$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa File: 7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa (raw, json) Hash identifier: BfdJPNsVVBICfYsNmfL4vgbxLrVOZisUF6DmDieUfJA= Subject key identifier: 57:0B:D5:5C:6B:E4:BE:92:92:18:38:5E:28:37:83:60:0A:B8:A6:62 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584B2E5C4B7525A9CA3EC41CEB00 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 21530 IP address blocks: 216.66.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:4b:75:25:a9:ca:3e:c4:1c:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=b7d4121a-9f78-44c9-b8e7-c42073d762ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:47:01:9b:a2:27:f8:ff:ec:3e:21:00:80:5d: 8f:d1:d2:ea:09:70:e4:46:42:77:ff:a5:45:7e:a7: e1:0b:38:95:5c:a2:3e:c2:ab:f0:73:0e:fe:ee:26: 2b:99:c8:cf:55:7e:71:a2:ec:3d:60:2a:a3:da:02: 76:da:b0:71:8a:b7:c9:8e:61:4a:40:ac:af:db:2f: fc:2b:2a:57:c7:cb:cb:6f:7f:81:31:15:44:16:53: 3e:17:9b:1e:dd:53:0b:55:5e:ee:8f:24:09:d0:f7: 83:e0:cf:21:28:dd:4e:27:98:de:04:20:7d:4a:c6: 57:bc:ce:0f:41:61:4e:fd:e8:57:8b:64:70:1a:3e: 3e:3a:ac:5e:f6:5e:2d:de:0b:2a:f1:67:e6:45:0f: f2:25:d5:93:14:ec:72:0f:0d:69:e0:d1:2b:f2:ad: 4e:88:b4:eb:71:75:6d:4d:42:ef:2b:d0:f3:9b:17: cd:75:8c:d6:4a:8d:4f:66:69:d4:e2:a3:ec:ee:8f: 0d:c4:5d:f9:9f:b4:02:b9:49:da:3f:a0:3f:ac:18: 07:f0:b5:07:21:7a:23:3f:33:fd:8e:cd:65:0a:dd: fe:f8:8c:1c:00:ef:53:42:1a:c7:3e:b0:cb:4d:43: 35:d4:78:54:fd:4d:a5:83:4a:00:80:6c:e8:f4:d3: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0B:D5:5C:6B:E4:BE:92:92:18:38:5E:28:37:83:60:0A:B8:A6:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/7f1cdd4b-0bea-3f13-a2ad-b0076aca68a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 216.66.210.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:89:2d:45:0d:7d:31:85:ab:ff:ea:0e:ef:6a:a3:69:f2:f9: 73:04:cc:94:f7:97:92:e8:0d:d6:dd:4d:16:97:13:36:ed:27: 94:f2:9a:bd:f5:12:58:d1:2d:8d:95:49:16:26:ba:88:6d:1f: 69:1c:2b:6b:ee:e9:8b:61:6d:15:5f:6b:2a:f3:74:33:79:08: 6a:c0:11:c5:91:d9:16:f5:81:45:5f:68:b2:5a:99:7c:b8:57: 7c:72:d0:0d:1c:f2:fc:b2:d7:8c:52:ee:1f:02:29:ed:2b:b0: 66:98:b8:b4:26:5c:29:68:a6:b1:7a:22:f2:7a:21:ff:22:bc: 98:fe:df:aa:ee:63:b9:05:af:8c:96:7c:9b:4d:c4:d5:71:90: d3:f3:69:64:21:f6:97:5d:84:a2:65:ce:ad:69:ed:f7:23:7f: f5:6f:72:87:a7:60:cf:07:52:61:b6:d8:c3:7c:7e:46:a7:72: 9b:9e:8a:5a:88:ad:95:e9:74:55:b0:d3:51:86:07:cb:33:cf: cb:75:6b:64:80:f6:60:04:25:f4:2e:27:40:a8:95:f1:4f:24: ed:62:24:cf:6b:39:03:b4:f9:5b:96:0e:ed:24:2b:de:1e:1e: ca:1d:e7:d7:7f:60:eb:c4:96:b0:76:b8:1a:be:33:12:ad:85: d6:87:34:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEt1JanKPsQc6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk YjdkNDEyMWEtOWY3OC00NGM5LWI4ZTctYzQyMDczZDc2MmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUcBm6In+P/sPiEAgF2P0dLqCXDkRkJ3/6VF fqfhCziVXKI+wqvwcw7+7iYrmcjPVX5xouw9YCqj2gJ22rBxirfJjmFKQKyv2y/8 KypXx8vLb3+BMRVEFlM+F5se3VMLVV7ujyQJ0PeD4M8hKN1OJ5jeBCB9SsZXvM4P QWFO/ehXi2RwGj4+Oqxe9l4t3gsq8WfmRQ/yJdWTFOxyDw1p4NEr8q1OiLTrcXVt TULvK9DzmxfNdYzWSo1PZmnU4qPs7o8NxF35n7QCuUnaP6A/rBgH8LUHIXojPzP9 js1lCt3++IwcAO9TQhrHPrDLTUM11HhU/U2lg0oAgGzo9NP6FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcL1Vxr5L6Skhg4Xig3g2AKuKZiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvN2YxY2RkNGItMGJlYS0z ZjEzLWEyYWQtYjAwNzZhY2E2OGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ELSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSJLUUNfTGFq//qDu9qo2ny+XMEzJT3l5LoDdbdTRaXEzbtJ5Tymr31 EljRLY2VSRYmuohtH2kcK2vu6YthbRVfayrzdDN5CGrAEcWR2Rb1gUVfaLJamXy4 V3xy0A0c8vyy14xS7h8CKe0rsGaYuLQmXCloprF6IvJ6If8ivJj+36ruY7kFr4yW fJtNxNVxkNPzaWQh9pddhKJlzq1p7fcjf/VvcoenYM8HUmG22MN8fkancpueilqI rZXpdFWw01GGB8szz8t1a2SA9mAEJfQuJ0ColfFPJO1iJM9rOQO0+VuWDu0kK94e Hsod59d/YOvElrB2uBq+MxKthdaHNHI= -----END CERTIFICATE-----Generated at Sat Oct 11 15:13:10 2025 by rpki-client