$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa File: 28a41872-63b1-3476-b351-97f772fb1f96.roa (raw, json) Hash identifier: cSwLzFGFmjQYYtfX68rwD5ooBqCQ1X1g/2+KElV96oo= Subject key identifier: 13:AA:FD:EF:13:36:6B:1C:1F:F3:AE:7C:90:94:C5:22:91:8A:76:CB Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584AF95140668A850CB3724F5300 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 398712 IP address blocks: 23.227.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:40:66:8a:85:0c:b3:72:4f:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=4e0b6f05-23b0-4a49-b20b-9a9997f99e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3e:36:fa:68:b4:42:b5:d1:ca:bc:6b:14:46: d4:58:42:12:ca:41:e1:29:f9:2d:6f:45:e6:51:cb: 30:f0:84:c0:2d:ec:34:d2:f3:47:41:f3:04:73:f9: 71:5a:2d:d1:0b:6b:f2:4f:6c:95:10:b3:79:37:2f: e9:3e:c8:73:bf:45:fd:60:56:37:0c:e5:5c:94:5a: c4:33:28:60:67:48:e0:85:00:e1:1f:63:5d:c6:26: 35:a6:21:9a:e7:72:29:fd:ed:1c:eb:be:2a:43:85: 10:13:33:98:76:52:86:0c:c2:66:be:03:77:c3:3c: 78:6a:2f:73:fa:1e:de:98:6b:60:b9:c4:6d:2c:ea: 92:58:7e:db:a6:93:79:9e:9d:66:63:d2:0c:2d:b9: 0f:41:00:71:5d:d9:8a:62:f9:ce:0d:75:f7:52:72: f9:9d:ce:4a:43:02:d9:4a:d4:3d:38:e5:9d:04:60: af:41:54:82:83:3e:3d:a3:cf:d4:79:c8:87:51:76: 4a:d3:ff:b6:75:32:01:87:d7:60:65:e6:f5:12:d3: ab:a6:50:53:12:94:9e:cc:9c:14:ae:34:c2:aa:8a: c7:d4:65:c7:b3:fa:ed:98:6f:68:bb:98:d2:77:ef: 26:a4:81:16:71:66:de:7e:ff:44:e0:3b:97:36:06: a4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:AA:FD:EF:13:36:6B:1C:1F:F3:AE:7C:90:94:C5:22:91:8A:76:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28a41872-63b1-3476-b351-97f772fb1f96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:b3:b9:ee:31:d4:0f:5a:d1:e4:fb:82:b0:33:77:81:94:87: ab:60:15:b9:9b:e1:67:fa:c5:51:6b:78:be:e3:22:cf:f7:74: 6b:f8:65:1f:b8:03:73:90:76:bd:65:7a:ff:25:96:b9:03:14: ee:d9:d6:d9:ad:93:2f:07:cc:9f:ec:b7:d9:ec:43:e4:3d:b2: 23:34:c1:eb:e9:26:fe:61:d0:1b:3e:a4:62:c4:26:e1:81:e7: 92:7b:f6:f9:5c:f9:55:1d:00:0a:c3:af:c8:cb:c5:2c:04:42: 8e:84:d8:39:8a:e8:bd:27:a7:6a:11:67:4a:7c:a2:97:6b:b5: d3:80:6c:19:7d:d2:42:74:2b:d0:a2:cf:98:09:d6:8c:ef:50: 13:3b:5d:9a:dc:38:d6:62:01:68:53:44:a1:cb:93:a3:be:24: a7:8e:ab:93:62:a6:18:91:f8:b6:7e:ea:81:ed:02:fa:fa:28: 5b:8b:74:18:c0:de:81:04:31:7b:a6:0c:0b:57:94:1f:01:b8: 01:3f:40:63:06:9f:b8:92:00:f5:b2:fb:70:64:56:90:9f:ad: 86:c7:cc:ca:c9:7f:4c:5d:71:a8:b9:e0:4e:51:97:15:0d:b4: 77:04:c3:77:27:ba:bf:4c:57:ad:49:8f:e4:f7:7d:4a:65:74: 37:a3:2d:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UUBmioUMs3JPUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NGUwYjZmMDUtMjNiMC00YTQ5LWIyMGItOWE5OTk3Zjk5ZTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT42+mi0QrXRyrxrFEbUWEISykHhKfktb0Xm Ucsw8ITALew00vNHQfMEc/lxWi3RC2vyT2yVELN5Ny/pPshzv0X9YFY3DOVclFrE MyhgZ0jghQDhH2NdxiY1piGa53Ip/e0c674qQ4UQEzOYdlKGDMJmvgN3wzx4ai9z +h7emGtgucRtLOqSWH7bppN5np1mY9IMLbkPQQBxXdmKYvnODXX3UnL5nc5KQwLZ StQ9OOWdBGCvQVSCgz49o8/UeciHUXZK0/+2dTIBh9dgZeb1EtOrplBTEpSezJwU rjTCqorH1GXHs/rtmG9ou5jSd+8mpIEWcWbefv9E4DuXNgakyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOq/e8TNmscH/OufJCUxSKRinbLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMjhhNDE4NzItNjNiMS0z NDc2LWIzNTEtOTdmNzcyZmIxZjk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKzue4x1A9a0eT7grAzd4GUh6tgFbmb4Wf6xVFreL7jIs/3dGv4ZR+4 A3OQdr1lev8llrkDFO7Z1tmtky8HzJ/st9nsQ+Q9siM0wevpJv5h0Bs+pGLEJuGB 55J79vlc+VUdAArDr8jLxSwEQo6E2DmK6L0np2oRZ0p8opdrtdOAbBl90kJ0K9Ci z5gJ1ozvUBM7XZrcONZiAWhTRKHLk6O+JKeOq5NiphiR+LZ+6oHtAvr6KFuLdBjA 3oEEMXumDAtXlB8BuAE/QGMGn7iSAPWy+3BkVpCfrYbHzMrJf0xdcai54E5RlxUN tHcEw3cnur9MV61Jj+T3fUpldDejLQM= -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:22 2025 by rpki-client