$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45f820d2-7c65-3d1f-a6e2-db2a6e0a9ab0.roa File: 45f820d2-7c65-3d1f-a6e2-db2a6e0a9ab0.roa (raw, json) Hash identifier: vjKsRsyKzU0AfdukcyD85wrwpJl3lvbKvVZBm+u9wD8= Subject key identifier: 20:0B:D4:1B:61:ED:1F:40:F9:DF:7B:D8:38:9B:81:B7:CC:C9:B5:58 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B110C08736B981EB8A8497F80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45f820d2-7c65-3d1f-a6e2-db2a6e0a9ab0.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 397630 IP address blocks: 167.160.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:08:73:6b:98:1e:b8:a8:49:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=1d3816b5-d5c7-41cd-b7f1-3837e62f2ed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:01:f3:71:12:75:1f:f7:2d:ed:2a:5a:4a:0f: 5a:58:37:f4:56:fd:1a:5e:26:a3:6e:2b:66:31:d8: 04:21:34:c4:b3:82:ec:48:e1:2e:b8:ae:cd:b1:4f: a0:37:10:03:bd:d0:8a:cb:d6:a9:5d:4c:5f:af:6f: 26:ba:84:96:27:42:30:b8:cb:95:d1:da:7c:97:7f: d2:cb:14:1a:b6:c0:a1:d6:42:6f:7c:9b:98:90:6f: 70:1d:a3:7a:14:aa:99:d6:7f:3b:e0:66:62:79:e3: 71:52:d1:03:a0:bd:81:96:ab:71:7e:28:cf:7a:e0: d6:84:2f:68:27:6b:c4:bd:ec:41:75:68:ac:9a:21: 9d:74:46:6f:8d:b7:35:df:5a:d2:ed:d6:e3:30:e6: f6:da:25:ce:41:49:14:62:3c:1f:94:ae:fd:71:3e: 44:17:8a:cb:c6:71:75:a1:ad:df:48:20:6e:0c:a4: da:d2:a0:0b:ee:aa:8f:2b:79:01:c5:6f:5c:9d:ef: fc:7e:86:ca:0e:32:a0:bf:fc:3f:7b:1b:c5:a6:17: 38:e1:0a:ca:16:3a:21:92:78:b5:91:26:d1:e0:d9: b2:b6:72:c8:b4:98:6a:5b:2b:da:cd:9c:b9:48:16: 9a:d4:fa:fc:30:9a:9a:72:6f:3e:ad:53:56:d8:86: 07:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0B:D4:1B:61:ED:1F:40:F9:DF:7B:D8:38:9B:81:B7:CC:C9:B5:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/45f820d2-7c65-3d1f-a6e2-db2a6e0a9ab0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 167.160.74.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:67:1e:9b:b8:9d:7c:b1:15:6b:15:5c:af:4e:ca:bf:f3:05: 71:b4:bd:6e:77:b1:18:d2:f6:a2:a3:96:2f:f0:ae:f0:ff:dd: 55:53:95:c5:56:89:85:8d:e5:3c:bf:ae:b1:62:75:71:31:0c: 78:91:d2:d9:91:d1:58:e9:b2:b9:34:e5:1a:29:dc:71:2c:9f: c7:58:60:ba:c5:34:5e:42:29:70:07:02:48:b4:86:27:79:e6: d2:46:22:94:cf:0d:dd:fc:9a:61:87:a5:64:09:0e:e9:64:1b: ce:9f:ce:e4:93:5f:25:ad:a6:11:c6:87:38:93:ba:dc:11:d8: 66:5f:34:3a:52:19:83:57:2d:cc:3d:5a:d0:86:9c:df:47:58: e8:ee:b4:b0:ab:8d:0d:8a:e8:ad:ef:77:f8:6c:7c:0c:5e:00: 34:f5:91:94:65:92:8e:ca:2b:5d:f6:cc:e7:36:3a:47:50:5d: 44:d5:66:6d:78:e0:87:46:7c:eb:49:e0:6d:2f:79:d5:8e:ef: 68:b3:e3:20:e8:64:ec:39:f0:12:9c:11:f9:f6:82:99:bf:6c: d1:65:f1:35:9e:86:19:78:d2:44:aa:d5:6d:e4:c8:78:de:ea: ed:b4:49:cb:f8:48:82:11:d3:7a:d6:53:32:5f:c8:51:6e:a2: 99:95:01:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAhza5geuKhJf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWQzODE2YjUtZDVjNy00MWNkLWI3ZjEtMzgzN2U2MmYyZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgHzcRJ1H/ct7SpaSg9aWDf0Vv0aXiajbitm MdgEITTEs4LsSOEuuK7NsU+gNxADvdCKy9apXUxfr28muoSWJ0IwuMuV0dp8l3/S yxQatsCh1kJvfJuYkG9wHaN6FKqZ1n874GZieeNxUtEDoL2BlqtxfijPeuDWhC9o J2vEvexBdWismiGddEZvjbc131rS7dbjMOb22iXOQUkUYjwflK79cT5EF4rLxnF1 oa3fSCBuDKTa0qAL7qqPK3kBxW9cne/8fobKDjKgv/w/exvFphc44QrKFjohkni1 kSbR4NmytnLItJhqWyvazZy5SBaa1Pr8MJqacm8+rVNW2IYHtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAL1Bth7R9A+d972DibgbfMybVYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNDVmODIwZDItN2M2NS0z ZDFmLWE2ZTItZGIyYTZlMGE5YWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp6BKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9nHpu4nXyxFWsVXK9Oyr/zBXG0vW53sRjS9qKjli/wrvD/3VVTlcVW iYWN5Ty/rrFidXExDHiR0tmR0Vjpsrk05Rop3HEsn8dYYLrFNF5CKXAHAki0hid5 5tJGIpTPDd38mmGHpWQJDulkG86fzuSTXyWtphHGhziTutwR2GZfNDpSGYNXLcw9 WtCGnN9HWOjutLCrjQ2K6K3vd/hsfAxeADT1kZRlko7KK132zOc2OkdQXUTVZm14 4IdGfOtJ4G0vedWO72iz4yDoZOw58BKcEfn2gpm/bNFl8TWehhl40kSq1W3kyHje 6u20Scv4SIIR03rWUzJfyFFuopmVAfI= -----END CERTIFICATE-----Generated at Sun Sep 7 12:34:17 2025 by rpki-client