$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa File: 28db5388-3028-3372-82b7-0e51f7f410ea.roa (raw, json) Hash identifier: Y4Kmm3xWsgwZovUo1qm8iHcQgz9CFONGvm+R0AVmtUk= Subject key identifier: 96:70:B2:7C:B9:89:E4:4C:1D:B1:AC:85:D8:05:0A:1E:A2:CD:02:95 Certificate issuer: /CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Certificate serial: 010D0C9F4328584B583C868ECE53428BF07CC3A0 Authority key identifier: F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 400564 IP address blocks: 207.174.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Oct 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:86:8e:ce:53:42:8b:f0:7c:c3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de8939a6-6acb-48e5-af9a-d1f7cca3b18e Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=4edcca40-bef5-4ee3-a8b1-b4058efc27e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5d:d2:ec:c3:61:10:dc:2d:a3:9d:78:35:a1: ae:b9:d8:03:ce:ec:d8:aa:f8:8e:a4:e3:ca:65:0a: be:ce:4c:58:46:48:63:bc:dd:a7:3c:51:13:b2:c0: a3:16:9e:50:a5:40:80:c6:cf:42:80:bf:49:47:90: 96:97:c7:87:8c:90:2f:03:af:cb:90:75:20:a8:04: 59:da:76:9c:78:d5:35:7f:39:ab:c8:95:53:fc:22: 7c:40:f0:9a:d2:8c:26:3f:b3:f0:3a:1d:53:09:84: df:e6:7a:df:c4:23:88:3f:ea:04:91:f0:0c:46:78: e5:43:ca:0f:47:2d:82:05:2c:9b:76:95:bf:d6:90: 3d:17:f7:1a:28:4a:eb:10:3b:bd:43:19:eb:3f:7b: 1f:00:15:59:44:18:32:eb:c3:27:f7:98:d3:3a:25: be:15:ab:55:41:87:13:2e:3a:9e:64:d9:1a:fd:ee: f6:04:ce:85:cb:c1:27:34:e5:78:08:23:17:44:86: 7b:1a:04:9e:0b:56:00:f2:55:5c:96:02:13:f2:da: 63:6f:6d:1b:01:0d:1a:e6:9e:82:cc:0e:f9:bf:8c: 21:7c:ee:0d:92:4e:da:67:da:46:e3:b9:ef:d6:e7: 41:72:52:a4:f4:d4:db:a5:40:f6:9b:ee:c9:f5:c9: 46:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:70:B2:7C:B9:89:E4:4C:1D:B1:AC:85:D8:05:0A:1E:A2:CD:02:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/28db5388-3028-3372-82b7-0e51f7f410ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.crl X509v3 Authority Key Identifier: keyid:F7:1B:1F:24:54:05:80:7F:6E:C6:5D:46:1B:82:A2:89:E7:ED:82:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/de8939a6-6acb-48e5-af9a-d1f7cca3b18e.cer sbgp-ipAddrBlock: critical IPv4: 207.174.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c2:83:c7:63:43:82:7d:84:ad:48:40:f5:c2:89:ba:37:a8: e0:80:cf:18:92:c6:e5:08:25:de:da:21:d0:6a:fb:fa:38:7c: e6:55:5a:69:fb:a2:f4:07:f3:3a:83:25:06:5a:f0:2c:d7:45: 28:1e:a1:ac:44:69:ba:bb:42:0d:f5:38:15:17:5b:31:c1:e7: b2:1b:14:7f:f4:1e:39:a1:b2:9b:da:0f:bb:46:65:68:4f:1b: 89:c1:b7:ed:e7:11:ba:6e:b6:f8:09:ec:69:61:a8:5a:b9:68: d5:ce:78:ce:f2:e9:b7:4d:17:70:d1:96:ae:99:09:2d:21:79: af:ad:8b:20:da:fd:b3:e1:07:4d:bb:94:32:42:41:c5:ed:4b: d7:33:48:84:0a:4e:b9:7b:b2:dc:cc:5c:8b:d6:64:4a:01:c5: fc:28:87:5c:23:a8:da:d9:08:77:07:3a:0a:a1:d2:58:b7:01: b1:5c:e0:f4:33:ad:17:ee:87:ba:da:89:b0:98:5b:c8:18:9c: 77:ba:af:7d:31:e4:29:0d:0b:5d:0b:11:36:e9:1b:4d:f9:9c: 40:8d:9d:e2:9e:1c:49:d7:b8:33:76:01:14:9f:74:07:10:e7: 33:7f:59:02:53:1f:36:9a:3b:37:4d:9c:74:d6:e5:c7:17:4a: 03:f3:c7:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPIaOzlNCi/B8w6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU4OTM5YTYtNmFjYi00OGU1LWFmOWEtZDFmN2NjYTNi MThlMB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk NGVkY2NhNDAtYmVmNS00ZWUzLWE4YjEtYjQwNThlZmMyN2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAql3S7MNhENwto514NaGuudgDzuzYqviOpOPK ZQq+zkxYRkhjvN2nPFETssCjFp5QpUCAxs9CgL9JR5CWl8eHjJAvA6/LkHUgqARZ 2naceNU1fzmryJVT/CJ8QPCa0owmP7PwOh1TCYTf5nrfxCOIP+oEkfAMRnjlQ8oP Ry2CBSybdpW/1pA9F/caKErrEDu9QxnrP3sfABVZRBgy68Mn95jTOiW+FatVQYcT LjqeZNka/e72BM6Fy8EnNOV4CCMXRIZ7GgSeC1YA8lVclgIT8tpjb20bAQ0a5p6C zA75v4whfO4Nkk7aZ9pG47nv1udBclKk9NTbpUD2m+7J9clGuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZwsny5ieRMHbGshdgFCh6izQKVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5 MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3Y2NhM2IxOGUvMjhkYjUzODgtMzAyOC0z MzcyLTgyYjctMGU1MWY3ZjQxMGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGU4OTM5YTYtNmFjYi00OGU1LWFm OWEtZDFmN2NjYTNiMThlL2RlODkzOWE2LTZhY2ItNDhlNS1hZjlhLWQxZjdjY2Ez YjE4ZS5jcmwwHwYDVR0jBBgwFoAU9xsfJFQFgH9uxl1GG4KiieftgsYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kZTg5MzlhNi02YWNiLTQ4ZTUtYWY5YS1kMWY3 Y2NhM2IxOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzCg8djQ4J9hK1IQPXCibo3qOCAzxiSxuUIJd7aIdBq+/o4fOZVWmn7 ovQH8zqDJQZa8CzXRSgeoaxEabq7Qg31OBUXWzHB57IbFH/0HjmhspvaD7tGZWhP G4nBt+3nEbputvgJ7GlhqFq5aNXOeM7y6bdNF3DRlq6ZCS0hea+tiyDa/bPhB027 lDJCQcXtS9czSIQKTrl7stzMXIvWZEoBxfwoh1wjqNrZCHcHOgqh0li3AbFc4PQz rRfuh7raibCYW8gYnHe6r30x5CkNC10LETbpG035nECNneKeHEnXuDN2ARSfdAcQ 5zN/WQJTHzaaOzdNnHTW5ccXSgPzx8k= -----END CERTIFICATE-----Generated at Sun Oct 19 12:11:57 2025 by rpki-client