$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa File: 399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa (raw, json) Hash identifier: Zc737H7otIZ/LSt3RaKPVmJNbjzhBHRWmrLNxm78hSI= Subject key identifier: DD:05:25:FC:6C:01:5D:23:94:E1:9E:F2:2F:45:A7:D0:7A:2F:26:0D Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B047C164AF049B41697D1CC80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 64267 IP address blocks: 208.89.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:16:4a:f0:49:b4:16:97:d1:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=f27ac18c-ca45-4558-912b-50186e1c1493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:36:58:8f:c5:f3:23:08:95:ad:8e:45:89:d8: 72:fa:a6:74:8a:ad:24:df:0e:d2:0a:3b:86:f7:a7: 9b:07:5f:43:98:cb:90:a7:e3:27:9e:8d:31:9f:ce: c4:66:7c:41:12:ef:1f:86:20:b4:37:ba:05:4f:68: 76:40:d0:f0:9d:73:b4:18:b0:ba:01:ab:47:e2:2d: b2:84:c0:76:bf:59:59:19:20:23:4c:68:df:08:66: 36:53:1b:2b:ca:dc:cd:37:cc:76:95:ec:0a:ca:c7: 48:e3:52:2e:9a:e9:60:77:6a:b7:2e:e6:6e:61:cd: 0d:24:91:c2:75:d1:0f:06:ef:a2:df:49:36:06:84: ea:36:45:e5:d7:ae:f3:5c:71:0f:78:5b:05:f1:54: 1f:b9:3d:47:34:32:50:d6:1d:1e:78:88:d1:49:16: 09:a5:c2:95:bf:a7:0b:c8:1f:c5:bf:4f:25:4f:bf: 6c:46:45:78:2e:d6:12:b3:97:08:00:74:d5:a7:38: c2:38:3f:84:f6:e4:0a:f4:f2:15:24:41:d8:c2:0f: e5:0c:79:9b:b8:a4:ba:0e:37:ca:cb:32:3b:22:e0: db:42:73:7e:11:4c:f5:b0:01:d5:93:a2:03:99:64: ea:4c:37:91:24:4f:7c:bf:2c:46:de:69:e7:cb:19: 2e:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:25:FC:6C:01:5D:23:94:E1:9E:F2:2F:45:A7:D0:7A:2F:26:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/399a8b3d-ac26-3e60-90e4-0572fd3229ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d8:30:6c:16:da:e9:b9:70:b0:0b:ae:c4:dc:d2:5d:7b:17: c7:46:96:ba:5b:c0:a9:46:58:dd:6b:5b:cb:30:9a:57:d9:3c: cf:77:b1:b8:db:84:3a:d8:ea:ec:4a:ad:bf:1a:26:1b:38:eb: 49:f4:de:7d:89:37:04:1a:71:c3:e4:2b:0c:67:1b:0c:e8:15: dd:d7:f2:24:fa:4b:4d:1b:b4:93:35:e6:99:19:30:27:62:31: ff:98:09:9b:f4:cc:7b:12:1b:c8:77:9c:b2:4e:14:eb:b6:35: 2a:d2:08:f1:35:ec:7b:0a:cd:ed:7a:c2:b1:2d:91:db:7a:85: 3b:f2:ea:03:59:5c:a6:fb:6f:5b:bb:31:82:93:2d:bb:1a:4b: e2:be:91:67:be:cf:3b:13:60:7e:ff:6d:85:7c:d9:37:a8:9f: cb:3d:c3:93:fb:fc:a8:18:22:51:7d:e7:5e:1b:e0:c1:cc:95: d6:d2:7f:ba:fc:0c:65:b4:2f:2f:01:29:44:8e:69:75:4c:77: c7:8c:db:08:42:cd:9d:be:3b:d7:01:25:77:5b:59:8c:66:b2: dc:21:5f:e5:45:76:a2:6f:6a:11:ea:bf:44:de:97:c7:df:83: 34:5f:56:3f:17:4d:18:fc:4c:69:21:e5:65:be:da:fe:53:a8: d0:c8:da:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBZK8Em0FpfRzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk ZjI3YWMxOGMtY2E0NS00NTU4LTkxMmItNTAxODZlMWMxNDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojZYj8XzIwiVrY5Fidhy+qZ0iq0k3w7SCjuG 96ebB19DmMuQp+Mnno0xn87EZnxBEu8fhiC0N7oFT2h2QNDwnXO0GLC6AatH4i2y hMB2v1lZGSAjTGjfCGY2UxsrytzNN8x2lewKysdI41Iumulgd2q3LuZuYc0NJJHC ddEPBu+i30k2BoTqNkXl167zXHEPeFsF8VQfuT1HNDJQ1h0eeIjRSRYJpcKVv6cL yB/Fv08lT79sRkV4LtYSs5cIAHTVpzjCOD+E9uQK9PIVJEHYwg/lDHmbuKS6DjfK yzI7IuDbQnN+EUz1sAHVk6IDmWTqTDeRJE98vyxG3mnnyxku5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0FJfxsAV0jlOGe8i9Fp9B6LyYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMzk5YThiM2QtYWMyNi0z ZTYwLTkwZTQtMDU3MmZkMzIyOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjYMGwW2um5cLALrsTc0l17F8dGlrpbwKlGWN1rW8swmlfZPM93sbjb hDrY6uxKrb8aJhs460n03n2JNwQaccPkKwxnGwzoFd3X8iT6S00btJM15pkZMCdi Mf+YCZv0zHsSG8h3nLJOFOu2NSrSCPE17HsKze16wrEtkdt6hTvy6gNZXKb7b1u7 MYKTLbsaS+K+kWe+zzsTYH7/bYV82Teon8s9w5P7/KgYIlF9514b4MHMldbSf7r8 DGW0Ly8BKUSOaXVMd8eM2whCzZ2+O9cBJXdbWYxmstwhX+VFdqJvahHqv0Tel8ff gzRfVj8XTRj8TGkh5WW+2v5TqNDI2mI= -----END CERTIFICATE-----Generated at Sun Sep 7 15:21:22 2025 by rpki-client