$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d59742b-2cc1-3e77-8a60-fb9a3a5c4ee8.roa File: 1d59742b-2cc1-3e77-8a60-fb9a3a5c4ee8.roa (raw, json) Hash identifier: 3iTDPbjFhORkYBwpC5PeVD/LaqO3vNbir85O+qgEIok= Subject key identifier: BD:30:8F:95:B3:F9:BB:5A:26:BF:C2:1B:DE:E0:49:F1:78:6F:4E:0A Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806F83F47E2B23C630121F0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d59742b-2cc1-3e77-8a60-fb9a3a5c4ee8.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22516 IP address blocks: 168.91.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f8:3f:47:e2:b2:3c:63:01:21:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=fd08b0e9-5c7e-46c3-9ed1-f388e6633551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:26:a2:9d:12:7b:a8:dc:67:1c:17:5a:f9:68: bc:f1:b7:47:81:97:3d:f1:a4:1a:70:06:c0:9d:30: 51:85:64:2b:f9:61:86:12:94:b1:5c:50:cf:f1:f6: 2b:02:ad:d5:2d:2a:82:0d:b4:e7:48:92:49:fd:8b: b1:1d:1c:78:01:e3:2b:76:1a:40:e6:e9:c4:66:35: 09:07:34:db:42:f4:3e:c1:69:db:b4:78:81:7b:25: 4a:52:8d:d5:db:0e:d7:78:fe:60:72:c2:76:bb:bc: cd:b6:78:c9:ab:7d:09:ef:70:90:56:36:7c:1c:fc: c8:66:01:dc:e5:0a:5e:8d:28:eb:1d:ef:b4:ba:8e: 49:64:86:fc:87:09:fe:01:c6:35:50:7c:49:af:d6: 30:05:06:4b:4a:9c:4d:d5:96:15:47:00:84:ea:73: 5f:59:1f:0a:10:a1:0f:ae:f3:3a:e6:82:fd:28:2b: 9e:64:c3:69:43:96:f6:af:b8:d2:dc:c5:14:57:8b: 9f:9e:42:fb:7e:e9:5e:9e:10:47:59:b9:c5:96:04: 69:29:41:1e:45:4c:0d:d6:6b:3d:35:86:07:fc:65: b2:46:07:c0:dc:f6:91:05:79:a2:78:df:63:1d:d3: 9e:57:0b:3b:22:03:60:bb:e7:30:d0:51:6e:0f:e8: f5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:30:8F:95:B3:F9:BB:5A:26:BF:C2:1B:DE:E0:49:F1:78:6F:4E:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1d59742b-2cc1-3e77-8a60-fb9a3a5c4ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 168.91.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:d3:fd:04:8a:7d:92:13:bc:06:d8:26:7f:f4:ab:5e:4d:6f: 66:c3:f5:3a:d4:c5:9f:4e:99:77:19:72:ed:f1:16:41:40:54: de:79:ea:41:2f:a4:0e:a4:4a:6c:f9:ae:5d:81:5a:f5:ab:86: 96:7a:50:2a:90:b0:4d:e4:a4:e9:f7:d5:b3:2c:45:df:b2:2a: 84:48:44:6c:60:23:25:d3:ce:fc:2e:0c:a2:df:d3:ad:6a:65: 02:1c:e3:7f:7c:3a:2e:08:fa:91:0d:2b:e1:c7:c2:50:4f:ca: fd:db:9b:a9:47:15:91:cb:14:8b:16:fa:09:1d:a9:54:d7:ec: 78:ed:0d:e3:95:4b:9d:84:05:25:46:02:01:90:e3:16:99:18: 1f:f5:e7:63:f0:bf:ff:b5:fd:c1:c4:3a:22:4f:5d:6c:40:95: 64:50:94:cf:12:c2:e1:d8:49:6b:ab:44:2a:79:01:d7:d7:a1: 4a:e1:9c:b8:95:8b:db:9c:57:35:1a:a2:61:9a:fc:c3:2d:8f: b5:c8:f1:f4:ea:7e:51:1a:8c:64:a6:3d:1f:10:5f:ad:46:ab: 62:e1:6a:95:b5:a0:58:3e:1a:f5:58:dd:6b:cf:96:5a:5c:e4: 6a:e2:0e:7a:24:79:23:95:2d:1d:04:7a:03:17:37:14:93:b9: c7:0a:a3:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvg/R+KyPGMBIfAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZmQwOGIwZTktNWM3ZS00NmMzLTllZDEtZjM4OGU2NjMzNTUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCainRJ7qNxnHBda+Wi88bdHgZc98aQacAbA nTBRhWQr+WGGEpSxXFDP8fYrAq3VLSqCDbTnSJJJ/YuxHRx4AeMrdhpA5unEZjUJ BzTbQvQ+wWnbtHiBeyVKUo3V2w7XeP5gcsJ2u7zNtnjJq30J73CQVjZ8HPzIZgHc 5QpejSjrHe+0uo5JZIb8hwn+AcY1UHxJr9YwBQZLSpxN1ZYVRwCE6nNfWR8KEKEP rvM65oL9KCueZMNpQ5b2r7jS3MUUV4ufnkL7fulenhBHWbnFlgRpKUEeRUwN1ms9 NYYH/GWyRgfA3PaRBXmieN9jHdOeVws7IgNgu+cw0FFuD+j14wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL0wj5Wz+btaJr/CG97gSfF4b04KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWQ1OTc0MmItMmNjMS0z ZTc3LThhNjAtZmI5YTNhNWM0ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqFsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTT/QSKfZITvAbYJn/0q15Nb2bD9TrUxZ9OmXcZcu3xFkFAVN556kEv pA6kSmz5rl2BWvWrhpZ6UCqQsE3kpOn31bMsRd+yKoRIRGxgIyXTzvwuDKLf061q ZQIc4398Oi4I+pENK+HHwlBPyv3bm6lHFZHLFIsW+gkdqVTX7HjtDeOVS52EBSVG AgGQ4xaZGB/152Pwv/+1/cHEOiJPXWxAlWRQlM8SwuHYSWurRCp5AdfXoUrhnLiV i9ucVzUaomGa/MMtj7XI8fTqflEajGSmPR8QX61Gq2LhapW1oFg+GvVY3WvPllpc 5GriDnokeSOVLR0EegMXNxSTuccKowU= -----END CERTIFICATE-----Generated at Sat Sep 6 02:22:06 2025 by rpki-client