$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7f428998-5143-3a67-a88f-176279e49672.roa File: 7f428998-5143-3a67-a88f-176279e49672.roa (raw, json) Hash identifier: Qti0fxReF4jsZA3DNc59iK+iorTsMQvhGgYEfH1KU2c= Subject key identifier: 3A:EC:6B:9D:34:59:93:B3:10:27:95:14:4A:6F:79:17:BE:98:64:E4 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806FAB99649B1A528B91E80 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7f428998-5143-3a67-a88f-176279e49672.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22516 IP address blocks: 172.96.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:fa:b9:96:49:b1:a5:28:b9:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=f5347bdc-8133-4da6-be75-51e0283d6cb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:24:e5:12:0e:70:70:da:12:e3:8b:55:96:50: 39:1e:3b:a9:ca:e5:e0:39:ba:01:cd:5a:c9:53:3f: cf:69:59:c7:08:6f:ab:c0:06:bd:48:17:2a:fd:2a: 8f:7d:64:be:27:7e:5d:35:2e:50:58:da:7c:32:93: 7d:95:15:4a:55:59:ea:2a:03:eb:8d:8e:cf:02:1d: 85:a8:54:6a:73:b7:be:b6:2e:a3:45:d0:eb:03:63: 1d:07:32:61:0d:5c:08:6a:ef:12:3a:ae:bf:29:b4: 9f:dc:fd:68:04:1a:a8:cf:e3:fa:b1:76:3e:98:1d: eb:fa:57:f2:6e:67:36:b9:62:d7:b7:64:6f:2e:bf: 10:b0:43:13:40:b1:5d:b6:e5:57:b1:d9:34:e4:33: bf:18:30:8c:e1:87:33:14:72:c1:b0:c3:56:f6:f2: 01:dd:86:3d:55:e9:9c:42:33:35:73:50:d0:49:ab: dd:ac:93:34:19:b7:32:d0:3c:73:ed:19:d4:cb:ea: eb:ab:63:7d:f1:a5:d8:72:f7:56:bf:cf:2f:65:db: 55:23:e5:1c:bd:f4:1c:cd:ba:d7:e9:bb:f4:b4:22: f6:48:d2:40:66:f3:e9:36:8e:dc:e4:04:ea:1f:da: 7e:26:59:3c:49:dc:a5:eb:55:5c:83:d4:b6:41:9b: 9e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EC:6B:9D:34:59:93:B3:10:27:95:14:4A:6F:79:17:BE:98:64:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7f428998-5143-3a67-a88f-176279e49672.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 172.96.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:d6:60:80:2c:2a:c9:c2:3e:53:88:42:ce:cd:5f:d3:e4:82: ca:90:ec:24:3c:0b:4d:96:63:43:37:b6:d3:de:19:48:72:68: 4a:29:61:4d:51:16:8a:89:62:bd:41:1a:62:61:07:32:3f:77: c8:86:45:df:90:23:ea:86:02:81:85:28:18:c3:4f:64:ad:0c: 6b:ea:e2:40:c6:d5:ce:1c:a5:6a:c1:fb:bd:85:45:2b:96:fa: a7:6f:53:78:1f:cb:d2:55:3d:d4:eb:66:9a:ca:dc:da:fa:91: 90:e5:25:57:38:84:e3:8d:7c:a9:74:87:a3:6e:14:75:ee:ab: 79:df:ae:d3:69:6a:c3:4c:b1:81:fa:9b:4d:e6:af:10:d4:28: a6:1e:5d:10:a6:d4:eb:bd:3f:80:94:d9:07:3b:c6:96:5e:e9: 8c:b9:b8:0d:9f:85:9d:57:f9:6d:16:12:b1:3b:8b:45:46:08: 28:f9:6f:dd:07:8c:76:24:ef:d8:bc:40:5f:b0:17:1f:52:b5: d1:2d:78:ba:7c:bf:8d:16:0b:60:a8:b8:36:00:d1:03:15:ac: 13:5c:8c:ea:28:01:30:31:b7:06:bb:bd:c9:01:92:31:fb:1d: 1d:7b:94:79:89:63:5c:b9:bc:5a:12:bb:cf:f0:b5:48:e6:78: 57:7f:b2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvq5lkmxpSi5HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk ZjUzNDdiZGMtODEzMy00ZGE2LWJlNzUtNTFlMDI4M2Q2Y2I4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCTlEg5wcNoS44tVllA5HjupyuXgOboBzVrJ Uz/PaVnHCG+rwAa9SBcq/SqPfWS+J35dNS5QWNp8MpN9lRVKVVnqKgPrjY7PAh2F qFRqc7e+ti6jRdDrA2MdBzJhDVwIau8SOq6/KbSf3P1oBBqoz+P6sXY+mB3r+lfy bmc2uWLXt2RvLr8QsEMTQLFdtuVXsdk05DO/GDCM4YczFHLBsMNW9vIB3YY9Vemc QjM1c1DQSavdrJM0Gbcy0Dxz7RnUy+rrq2N98aXYcvdWv88vZdtVI+UcvfQczbrX 6bv0tCL2SNJAZvPpNo7c5ATqH9p+Jlk8Sdyl61Vcg9S2QZueBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrsa500WZOzECeVFEpveRe+mGTkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvN2Y0Mjg5OTgtNTE0My0z YTY3LWE4OGYtMTc2Mjc5ZTQ5NjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArGBXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANPWYIAsKsnCPlOIQs7NX9PkgsqQ7CQ8C02WY0M3ttPeGUhyaEopYU1R FoqJYr1BGmJhBzI/d8iGRd+QI+qGAoGFKBjDT2StDGvq4kDG1c4cpWrB+72FRSuW +qdvU3gfy9JVPdTrZprK3Nr6kZDlJVc4hOONfKl0h6NuFHXuq3nfrtNpasNMsYH6 m03mrxDUKKYeXRCm1Ou9P4CU2Qc7xpZe6Yy5uA2fhZ1X+W0WErE7i0VGCCj5b90H jHYk79i8QF+wFx9StdEteLp8v40WC2CouDYA0QMVrBNcjOooATAxtwa7vckBkjH7 HR17lHmJY1y5vFoSu8/wtUjmeFd/suw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:50:06 2025 by rpki-client