$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa File: 8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa (raw, json) Hash identifier: HhBJgeU0JCJfiQE9aPPj0nfimIC9e8rW45ElBoGTZ0A= Subject key identifier: 13:A2:E3:9E:DF:35:C2:8D:34:10:8B:CA:4B:29:65:10:6F:05:13:CA Certificate issuer: /CN=971a94fb-9c36-412b-ae91-2ddb520de93f Certificate serial: 010D0C9F4328584B3556F23BBA6176B6521B7E00 Authority key identifier: E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa Signing time: Tue 16 Sep 2025 01:00:33 +0000 ROA not before: Tue 16 Sep 2025 01:00:33 +0000 ROA not after: Mon 15 Dec 2025 02:00:33 +0000 asID: 400729 IP address blocks: 192.157.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:35:56:f2:3b:ba:61:76:b6:52:1b:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=971a94fb-9c36-412b-ae91-2ddb520de93f Validity Not Before: Sep 16 01:00:33 2025 GMT Not After : Dec 15 02:00:33 2025 GMT Subject: CN=e7df47fd-cc00-4d20-885e-0708f69e9342 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:0f:a4:60:29:44:87:f8:d7:81:b2:db:60:b8: 32:df:be:c4:42:0b:07:aa:d1:0f:26:c2:18:44:b0: 82:6a:43:d1:e0:e1:c8:8e:b6:20:5d:88:b0:58:31: 1e:06:f3:46:b4:23:c7:f4:2e:ea:98:e0:cf:e0:2a: b4:19:69:13:f8:c3:1c:c6:aa:9e:83:0b:10:b6:82: 1c:4d:cd:09:91:a7:a2:bf:0b:ed:7b:ca:10:5b:4e: d3:2e:1a:0f:2c:c2:b1:03:5a:9b:77:1c:01:01:2f: 0b:12:34:85:b1:ed:d3:bf:a0:0b:82:a9:61:f7:78: 9f:73:86:0b:1e:a2:21:59:d3:d3:6d:ac:1f:d9:ea: 61:b6:98:25:31:f3:c1:80:c7:9f:60:d5:74:d0:bf: 1b:9b:35:7d:62:46:38:a9:cb:61:89:94:46:2e:37: 29:2f:ec:87:74:8e:43:e0:d6:8b:77:49:6b:84:31: 3c:bb:64:cc:58:7e:4b:65:0c:e0:c8:fa:63:0f:1f: f4:60:0a:91:ab:38:be:88:5e:bd:96:d5:fd:16:28: 6e:72:d8:88:20:2d:8d:fb:a4:be:a6:d3:86:38:df: 88:be:29:7f:f8:4c:d6:fa:50:e9:0a:fa:f9:19:44: c4:78:f5:98:94:62:90:3d:13:a9:c5:ac:91:a3:8d: 18:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:A2:E3:9E:DF:35:C2:8D:34:10:8B:CA:4B:29:65:10:6F:05:13:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/8a5e1d0a-c120-3c92-a25f-1220e11a7ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f/971a94fb-9c36-412b-ae91-2ddb520de93f.crl X509v3 Authority Key Identifier: keyid:E0:27:CC:9E:09:06:01:0F:82:20:10:EE:4A:73:6C:44:EB:86:A5:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/971a94fb-9c36-412b-ae91-2ddb520de93f.cer sbgp-ipAddrBlock: critical IPv4: 192.157.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e7:44:01:c1:e7:08:80:de:8a:ae:bc:25:17:7d:e1:ed:e6:cd: e7:89:31:96:93:27:3d:a0:15:e5:9b:01:36:8a:bc:15:ee:65: 45:04:5b:2c:f7:30:b8:42:ef:40:ef:17:42:89:56:cf:58:fc: 88:d6:aa:cb:d4:15:39:43:1a:9d:4e:73:9a:4b:8d:96:1d:f0: 01:55:93:b3:69:d2:69:e6:f0:2e:35:22:ca:13:16:79:18:0e: 5d:39:7c:bc:9f:32:4b:cc:7b:f5:d7:2e:a2:8c:7d:38:5d:75: e2:f0:c4:c8:82:3e:0e:3c:1d:87:91:48:33:76:61:35:dd:5c: 06:95:41:61:33:99:08:35:50:c1:ae:5c:a6:65:2b:52:a0:4b: 60:be:04:f8:ab:43:2a:0f:a6:93:81:15:e2:c4:18:f0:82:cb: 24:bf:6d:c4:bc:5f:77:21:ad:f9:05:fe:18:e7:57:81:79:f4: 48:6f:55:da:7c:dc:bd:b3:f5:65:36:ac:1c:c8:88:4f:2c:74: a9:19:82:50:f2:e3:7e:2f:cd:18:56:39:6c:61:dd:74:38:2a: af:4e:dd:15:e0:5f:0c:f8:61:9a:af:ba:77:1e:ca:48:9a:ca: 44:9f:10:82:aa:27:58:14:49:7c:42:3a:46:51:9c:b7:6f:75: cf:51:06:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs1VvI7umF2tlIbfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTcxYTk0ZmItOWMzNi00MTJiLWFlOTEtMmRkYjUyMGRl OTNmMB4XDTI1MDkxNjAxMDAzM1oXDTI1MTIxNTAyMDAzM1owLzEtMCsGA1UEAxMk ZTdkZjQ3ZmQtY2MwMC00ZDIwLTg4NWUtMDcwOGY2OWU5MzQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ+kYClEh/jXgbLbYLgy377EQgsHqtEPJsIY RLCCakPR4OHIjrYgXYiwWDEeBvNGtCPH9C7qmODP4Cq0GWkT+MMcxqqegwsQtoIc Tc0Jkaeivwvte8oQW07TLhoPLMKxA1qbdxwBAS8LEjSFse3Tv6ALgqlh93ifc4YL HqIhWdPTbawf2ephtpglMfPBgMefYNV00L8bmzV9YkY4qcthiZRGLjcpL+yHdI5D 4NaLd0lrhDE8u2TMWH5LZQzgyPpjDx/0YAqRqzi+iF69ltX9FihuctiIIC2N+6S+ ptOGON+Ivil/+EzW+lDpCvr5GUTEePWYlGKQPROpxayRo40YewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBOi457fNcKNNBCLykspZRBvBRPKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFh OTRmYi05YzM2LTQxMmItYWU5MS0yZGRiNTIwZGU5M2YvOGE1ZTFkMGEtYzEyMC0z YzkyLWEyNWYtMTIyMGUxMWE3YWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTcxYTk0ZmItOWMzNi00MTJiLWFl OTEtMmRkYjUyMGRlOTNmLzk3MWE5NGZiLTljMzYtNDEyYi1hZTkxLTJkZGI1MjBk ZTkzZi5jcmwwHwYDVR0jBBgwFoAU4CfMngkGAQ+CIBDuSnNsROuGpe0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85NzFhOTRmYi05YzM2LTQxMmItYWU5MS0yZGRi NTIwZGU5M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ0cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOdEAcHnCIDeiq68JRd94e3mzeeJMZaTJz2gFeWbATaKvBXuZUUEWyz3 MLhC70DvF0KJVs9Y/IjWqsvUFTlDGp1Oc5pLjZYd8AFVk7Np0mnm8C41IsoTFnkY Dl05fLyfMkvMe/XXLqKMfThddeLwxMiCPg48HYeRSDN2YTXdXAaVQWEzmQg1UMGu XKZlK1KgS2C+BPirQyoPppOBFeLEGPCCyyS/bcS8X3chrfkF/hjnV4F59EhvVdp8 3L2z9WU2rBzIiE8sdKkZglDy434vzRhWOWxh3XQ4Kq9O3RXgXwz4YZqvunceykia ykSfEIKqJ1gUSXxCOkZRnLdvdc9RBrM= -----END CERTIFICATE-----Generated at Wed Oct 8 19:36:49 2025 by rpki-client