$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e33c411-f6a3-36d7-8460-e99bbc867e23.roa File: 2e33c411-f6a3-36d7-8460-e99bbc867e23.roa (raw, json) Hash identifier: TglkmTgw5tJFFcCqgux1ZieqtQI+2dB4cmMijcbgttg= Subject key identifier: 62:5F:34:49:6A:73:67:B2:D0:CF:76:04:55:10:CF:BB:80:4E:12:AC Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806EF480D1920DCCD504DC0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e33c411-f6a3-36d7-8460-e99bbc867e23.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22516 IP address blocks: 104.244.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:ef:48:0d:19:20:dc:cd:50:4d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=26d86f38-302e-43b8-84f2-b3dc551cc30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:a4:f4:13:dd:84:8d:46:85:9e:35:ec:f6:bc: b0:aa:f7:ca:c3:d5:de:86:ea:84:da:bf:da:bf:b1: 0d:e1:a7:5a:7d:e5:43:56:a3:31:8e:13:65:6a:3b: dd:09:9f:39:fc:c2:58:96:06:09:48:08:d9:5e:18: 12:1f:9c:37:f6:8f:ef:09:90:5b:3f:fb:af:5d:37: 0d:0a:ee:dc:1e:9f:02:ac:56:2e:19:26:3b:48:82: fd:15:8d:27:b4:bb:5a:53:f2:98:db:3f:6f:8b:d1: 39:4b:17:c0:15:ee:b1:3a:4a:36:dd:1b:a6:63:2f: b1:34:32:64:94:31:16:ae:b5:16:ed:fb:d0:8c:94: fe:3d:72:55:a1:4b:fb:8c:f5:b3:8a:7c:c0:82:8a: 6c:db:93:1a:63:c0:72:3e:fe:c0:6f:55:89:82:ea: a4:71:9e:31:0f:8c:82:03:b6:3f:69:62:06:0b:61: b4:0b:84:de:94:99:d6:cb:2a:2c:a2:48:4c:41:8f: e4:02:ac:a5:71:29:7f:2a:92:54:3a:41:48:ab:32: 53:b2:b8:45:da:a6:e1:7d:d7:23:6f:3b:28:46:0e: b6:b2:dd:58:cb:88:72:29:02:18:a8:38:b3:ab:0f: ff:bc:20:f4:ba:b7:35:78:39:33:fe:6a:bb:00:89: f8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5F:34:49:6A:73:67:B2:D0:CF:76:04:55:10:CF:BB:80:4E:12:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2e33c411-f6a3-36d7-8460-e99bbc867e23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 104.244.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:27:3b:ef:f9:cb:33:a5:a7:b3:06:cc:b0:9e:2f:d8:c4:93: d9:e0:a5:3c:a1:c9:aa:2d:94:3e:ce:a9:25:2d:85:84:d2:5e: 28:07:4f:11:11:a8:b1:9b:1c:37:58:f7:85:d6:01:a2:12:c1: 86:e7:f8:92:2b:44:db:de:46:e5:9c:bc:eb:e4:67:11:d9:9c: a5:8f:62:b1:75:7b:66:26:c2:4b:ab:f6:cd:3b:ca:73:a5:ef: 41:52:5a:d3:57:84:cc:40:6b:cc:91:7a:aa:3d:70:80:a6:b3: fb:81:20:a1:98:ae:8d:65:00:2c:7b:59:43:6d:25:4b:a2:f3: 85:a8:4b:e7:83:b5:00:52:49:27:88:96:37:2d:43:88:f5:81: 59:8d:a4:b9:61:db:b4:51:5f:64:98:f6:ff:d4:48:d3:0e:4e: 2b:e3:54:a0:4e:53:82:21:aa:bf:7a:67:4d:fb:17:1f:85:38: 46:9b:94:d5:44:0b:e8:34:c0:52:4c:3e:8d:04:59:88:61:5e: aa:c1:fc:33:94:00:2a:f3:b9:63:67:28:6f:2a:90:a4:76:69: 46:48:a2:6f:5f:48:5c:bc:51:f6:bf:7b:97:f8:2f:07:b7:6b: d3:85:aa:e0:f9:36:b8:99:dc:0b:7e:66:da:b3:e6:33:6a:de: 61:28:56:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBu9IDRkg3M1QTcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk MjZkODZmMzgtMzAyZS00M2I4LTg0ZjItYjNkYzU1MWNjMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqT0E92EjUaFnjXs9rywqvfKw9XehuqE2r/a v7EN4adafeVDVqMxjhNlajvdCZ85/MJYlgYJSAjZXhgSH5w39o/vCZBbP/uvXTcN Cu7cHp8CrFYuGSY7SIL9FY0ntLtaU/KY2z9vi9E5SxfAFe6xOko23RumYy+xNDJk lDEWrrUW7fvQjJT+PXJVoUv7jPWzinzAgops25MaY8ByPv7Ab1WJguqkcZ4xD4yC A7Y/aWIGC2G0C4TelJnWyyosokhMQY/kAqylcSl/KpJUOkFIqzJTsrhF2qbhfdcj bzsoRg62st1Yy4hyKQIYqDizqw//vCD0urc1eDkz/mq7AIn4twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGJfNElqc2ey0M92BFUQz7uAThKsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmUzM2M0MTEtZjZhMy0z NmQ3LTg0NjAtZTk5YmJjODY3ZTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaPRmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFonO+/5yzOlp7MGzLCeL9jEk9ngpTyhyaotlD7OqSUthYTSXigHTxER qLGbHDdY94XWAaISwYbn+JIrRNveRuWcvOvkZxHZnKWPYrF1e2Ymwkur9s07ynOl 70FSWtNXhMxAa8yReqo9cICms/uBIKGYro1lACx7WUNtJUui84WoS+eDtQBSSSeI ljctQ4j1gVmNpLlh27RRX2SY9v/USNMOTivjVKBOU4Ihqr96Z037Fx+FOEablNVE C+g0wFJMPo0EWYhhXqrB/DOUACrzuWNnKG8qkKR2aUZIom9fSFy8Ufa/e5f4Lwe3 a9OFquD5NriZ3At+Ztqz5jNq3mEoVvA= -----END CERTIFICATE-----Generated at Sat Sep 6 02:22:08 2025 by rpki-client