$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21bd4012-2e5d-3b28-83c8-6f895320eda0.roa File: 21bd4012-2e5d-3b28-83c8-6f895320eda0.roa (raw, json) Hash identifier: Ujx8rznwMbT1VhWL8bcQW1FozuDqx6RuEvGS7Kn9NDc= Subject key identifier: 79:4F:5F:9D:C9:E2:70:00:D0:FA:FC:F0:83:D8:94:78:72:39:19:30 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B196C0FA037184D94CC4F4240 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21bd4012-2e5d-3b28-83c8-6f895320eda0.roa Signing time: Sat 06 Sep 2025 01:00:33 +0000 ROA not before: Sat 06 Sep 2025 01:00:33 +0000 ROA not after: Fri 05 Dec 2025 02:00:33 +0000 asID: 22516 IP address blocks: 69.58.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:19:6c:0f:a0:37:18:4d:94:cc:4f:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 6 01:00:33 2025 GMT Not After : Dec 5 02:00:33 2025 GMT Subject: CN=9f22de09-eb20-4c0c-964a-5fabfd33ce87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:c7:48:a0:0b:6a:06:de:71:13:e9:21:65:32: 5c:06:ae:d0:c8:26:b4:f5:17:29:f4:05:b4:c0:0a: d7:07:c5:11:56:37:e9:36:9e:37:b3:4b:6a:cf:5f: 39:50:6c:a7:d3:eb:61:e4:f2:7d:56:37:44:ab:ef: c2:d9:e9:c6:c7:0d:9c:42:4c:32:23:30:fd:e9:47: 34:d5:09:be:fe:4a:d4:41:a6:02:d0:b4:ab:86:04: e6:c7:02:c5:7f:8e:eb:6a:bf:63:f0:61:e5:3e:f8: d9:6c:9a:6c:1b:a1:f6:0c:7a:5f:74:46:f7:8d:8e: 48:04:a1:63:31:f3:85:98:45:9d:c4:49:52:ed:e5: 3b:66:d9:ff:27:ee:42:a1:66:e4:6f:24:9e:70:ec: 36:f5:ed:de:bf:f1:73:9f:80:cc:a9:40:4e:d8:27: ab:c9:ef:35:48:d2:e5:c4:f8:0c:d0:1e:de:4c:46: a0:39:22:79:44:aa:6f:96:a0:fb:12:fb:71:f8:41: 9f:17:83:e4:48:e0:fb:c7:16:33:5d:5a:2e:74:a6: da:f8:93:76:0d:ae:8d:d6:e0:72:40:ac:56:a5:6c: 97:05:f6:89:ef:fe:53:ed:d0:c2:e3:b4:8b:d0:0a: 68:14:15:58:81:c9:42:a3:ea:68:32:5a:72:c1:29: 82:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:4F:5F:9D:C9:E2:70:00:D0:FA:FC:F0:83:D8:94:78:72:39:19:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/21bd4012-2e5d-3b28-83c8-6f895320eda0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 69.58.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f6:1c:6b:f1:07:49:bd:1c:77:c9:5f:15:38:67:6e:0f:83: 7a:72:20:e6:0a:00:4f:15:e6:37:e6:59:39:9a:04:a2:e1:e0: 43:04:ca:c9:13:5c:e3:36:72:5c:c4:a8:1e:a4:91:4b:c4:42: 23:d7:03:cf:0d:3b:25:e4:d0:b2:29:fa:9e:fc:22:b3:a5:33: 37:8d:a5:8b:1a:a6:85:89:c4:05:8d:3b:04:cc:fd:d8:0c:f1: f0:c9:cf:cd:bd:b4:86:a2:e2:8b:dd:94:39:d2:2e:57:c0:1e: 68:af:4e:05:62:25:66:0f:c0:29:1d:be:df:cd:0a:41:0a:d2: 5d:40:8f:3c:56:29:99:3e:6c:19:9e:2e:a6:40:db:be:87:27: 48:a4:81:68:9d:7d:ab:22:fe:f3:91:ab:d2:13:8a:f7:84:89: 86:fa:6e:62:78:f0:1d:87:8e:c5:d0:5d:32:8b:4c:5e:4a:26: b1:cc:b1:92:ea:83:83:25:1e:54:49:2a:bc:7a:22:bd:de:14: 1c:0e:64:2d:40:3d:05:f7:e8:1c:d2:96:ac:48:41:83:6b:2b: d7:a3:4c:da:9c:14:18:83:b9:5d:f8:45:12:83:89:ee:01:51: 39:a7:e6:5b:f5:2d:1b:e9:25:67:6d:9b:97:8a:f5:f8:e3:ce: ba:10:42:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsZbA+gNxhNlMxPQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNjAxMDAzM1oXDTI1MTIwNTAyMDAzM1owLzEtMCsGA1UEAxMk OWYyMmRlMDktZWIyMC00YzBjLTk2NGEtNWZhYmZkMzNjZTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA78dIoAtqBt5xE+khZTJcBq7QyCa09Rcp9AW0 wArXB8URVjfpNp43s0tqz185UGyn0+th5PJ9VjdEq+/C2enGxw2cQkwyIzD96Uc0 1Qm+/krUQaYC0LSrhgTmxwLFf47rar9j8GHlPvjZbJpsG6H2DHpfdEb3jY5IBKFj MfOFmEWdxElS7eU7Ztn/J+5CoWbkbySecOw29e3ev/Fzn4DMqUBO2Cerye81SNLl xPgM0B7eTEagOSJ5RKpvlqD7Evtx+EGfF4PkSOD7xxYzXVoudKba+JN2Da6N1uBy QKxWpWyXBfaJ7/5T7dDC47SL0ApoFBVYgclCo+poMlpywSmCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlPX53J4nAA0Pr88IPYlHhyORkwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMjFiZDQwMTItMmU1ZC0z YjI4LTgzYzgtNmY4OTUzMjBlZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTpZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf2HGvxB0m9HHfJXxU4Z24Pg3pyIOYKAE8V5jfmWTmaBKLh4EMEyskT XOM2clzEqB6kkUvEQiPXA88NOyXk0LIp+p78IrOlMzeNpYsapoWJxAWNOwTM/dgM 8fDJz829tIai4ovdlDnSLlfAHmivTgViJWYPwCkdvt/NCkEK0l1AjzxWKZk+bBme LqZA276HJ0ikgWidfasi/vORq9ITiveEiYb6bmJ48B2HjsXQXTKLTF5KJrHMsZLq g4MlHlRJKrx6Ir3eFBwOZC1APQX36BzSlqxIQYNrK9ejTNqcFBiDuV34RRKDie4B UTmn5lv1LRvpJWdtm5eK9fjjzroQQgA= -----END CERTIFICATE-----Generated at Sat Sep 6 02:20:22 2025 by rpki-client