$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa File: 4364db7a-1be5-345a-9e0a-201915c52972.roa (raw, json) Hash identifier: IlDwHh9mMmniu/yZ2SzATIUjGDAiPhmr//Hbf8jlkbE= Subject key identifier: 1F:35:36:08:5F:42:3F:07:7F:ED:92:20:90:A9:95:F2:75:2D:42:B5 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B047C15DABE7DA163AC44C800 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 64267 IP address blocks: 208.89.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:15:da:be:7d:a1:63:ac:44:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=643a1ac4-6349-4490-ac3e-867e6ec0da30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:59:66:6a:ef:58:1c:c5:b7:a0:fe:bd:bf:ad: 8b:7c:0d:b5:a3:29:ee:f6:72:a9:10:bd:8a:ca:11: cf:71:7a:21:c1:bc:77:61:a7:37:f0:1c:8f:64:60: 5a:88:22:1e:f3:1a:78:2f:40:83:07:0b:11:71:e8: e1:ab:89:78:86:c2:1c:c9:c2:61:8f:67:30:23:65: 78:ba:e1:5f:5a:d4:b4:f5:60:33:84:a4:76:c8:aa: 09:71:d8:16:d4:a3:68:fa:21:7b:bc:c8:c9:01:7d: da:e9:f4:90:ea:8d:05:61:a0:70:11:97:e9:95:2b: cd:c2:67:6c:d9:6a:54:b8:b8:4d:f8:91:f1:4a:86: 4f:79:ad:ec:3b:e0:c4:8d:65:10:56:a9:63:09:aa: 3f:3c:32:5e:db:15:75:3b:4c:f3:09:e4:1c:67:45: 37:00:27:c3:98:93:e0:78:25:5a:00:c6:d8:bd:e6: 5d:b7:24:26:7c:39:01:65:db:7d:90:28:13:63:79: e3:91:b2:67:29:52:b4:a6:4a:15:2e:44:1a:e3:c3: 7d:0b:38:f7:16:59:b4:a6:35:96:42:5a:c9:05:bf: 29:05:25:dd:b8:da:fb:fa:03:7c:d5:dc:52:e2:e2: 45:e3:6c:05:dc:15:33:7f:d9:b4:4f:42:5a:31:d6: ba:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:35:36:08:5F:42:3F:07:7F:ED:92:20:90:A9:95:F2:75:2D:42:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/4364db7a-1be5-345a-9e0a-201915c52972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 208.89.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:24:f1:80:14:cb:d3:24:dc:ed:54:50:d7:0a:8f:33:be:42: 91:45:d8:90:4b:05:45:04:23:42:c0:02:87:e5:9c:15:cd:fb: 33:ad:ff:6b:fa:e5:1f:3e:74:36:83:18:cd:de:2f:1d:61:8b: c5:31:c0:b6:90:61:94:2b:5c:8a:a2:6b:cb:ab:4d:93:6c:03: 6a:e7:2e:61:e6:9b:49:f2:23:07:72:35:0d:56:4e:ba:7b:46: 83:e3:15:0d:f8:78:d2:1e:1a:3d:fe:11:22:c4:bb:10:0a:80: 7f:75:b8:31:09:dd:1c:3f:25:0a:9a:96:e7:8b:82:72:ce:56: d8:c8:2f:f1:71:ad:06:aa:d7:c9:26:23:fe:c6:df:2d:4e:a9: 7b:84:e5:83:22:7f:bd:71:5c:82:a4:40:d9:92:d9:ac:76:b8: 2e:b6:41:e0:07:f6:29:b0:ba:6d:71:eb:6e:3a:de:04:52:60: 3c:23:cb:fa:ec:09:1e:a9:a9:de:39:39:10:9e:b5:ab:d6:02: 39:6e:f8:b9:e0:96:6c:59:8f:cf:4e:02:53:34:fb:06:ec:1f: 1b:44:09:2a:98:13:cb:21:1a:7b:83:05:a6:ef:62:a0:d1:21: 77:e1:31:9a:82:25:8c:0c:d6:e8:11:12:41:c0:84:b9:da:75: 9f:1b:31:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBXavn2hY6xEyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk NjQzYTFhYzQtNjM0OS00NDkwLWFjM2UtODY3ZTZlYzBkYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjllmau9YHMW3oP69v62LfA21oynu9nKpEL2K yhHPcXohwbx3Yac38ByPZGBaiCIe8xp4L0CDBwsRcejhq4l4hsIcycJhj2cwI2V4 uuFfWtS09WAzhKR2yKoJcdgW1KNo+iF7vMjJAX3a6fSQ6o0FYaBwEZfplSvNwmds 2WpUuLhN+JHxSoZPea3sO+DEjWUQVqljCao/PDJe2xV1O0zzCeQcZ0U3ACfDmJPg eCVaAMbYveZdtyQmfDkBZdt9kCgTY3njkbJnKVK0pkoVLkQa48N9Czj3Flm0pjWW QlrJBb8pBSXduNr7+gN81dxS4uJF42wF3BUzf9m0T0JaMda63wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB81NghfQj8Hf+2SIJCplfJ1LUK1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDM2NGRiN2EtMWJlNS0z NDVhLTllMGEtMjAxOTE1YzUyOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJck8YAUy9Mk3O1UUNcKjzO+QpFF2JBLBUUEI0LAAoflnBXN+zOt/2v6 5R8+dDaDGM3eLx1hi8UxwLaQYZQrXIqia8urTZNsA2rnLmHmm0nyIwdyNQ1WTrp7 RoPjFQ34eNIeGj3+ESLEuxAKgH91uDEJ3Rw/JQqalueLgnLOVtjIL/FxrQaq18km I/7G3y1OqXuE5YMif71xXIKkQNmS2ax2uC62QeAH9imwum1x62463gRSYDwjy/rs CR6pqd45ORCetavWAjlu+LnglmxZj89OAlM0+wbsHxtECSqYE8shGnuDBabvYqDR IXfhMZqCJYwM1ugREkHAhLnadZ8bMUs= -----END CERTIFICATE-----Generated at Sun Sep 7 12:41:59 2025 by rpki-client