$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa File: ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa (raw, json) Hash identifier: ZxsVh3hzjCxCnupANlCnVs+tZbTtUN1uPLD9dxBn0jo= Subject key identifier: 28:1F:7C:F7:EB:DA:FF:48:2B:63:68:E4:CB:ED:DB:E2:D9:85:AA:66 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B110C0822ADDF7CC8DE3E6900 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa Signing time: Wed 03 Sep 2025 01:00:33 +0000 ROA not before: Wed 03 Sep 2025 01:00:33 +0000 ROA not after: Tue 02 Dec 2025 02:00:33 +0000 asID: 397630 IP address blocks: 72.14.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 09 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:0c:08:22:ad:df:7c:c8:de:3e:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 3 01:00:33 2025 GMT Not After : Dec 2 02:00:33 2025 GMT Subject: CN=9d7ccaf7-ba9b-46d9-9add-c092b3da9651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ae:47:c9:f3:a9:c2:90:1c:1f:ab:1b:dd:ae: 0c:7d:d8:04:2d:14:3d:65:f1:87:e0:f3:a4:91:0a: 76:0d:f3:17:75:7c:22:25:66:14:d8:8c:3f:33:82: b2:c7:a6:db:fd:00:04:34:50:85:16:a3:93:98:68: 69:3c:64:c0:cf:44:ff:c3:18:42:13:31:a0:fc:cb: 0f:83:13:7c:bf:1f:2a:f5:1f:cf:a2:47:e4:7e:5f: 52:cd:10:8a:df:84:53:7d:1d:6f:79:da:14:b8:b9: 5b:c6:38:3d:80:f8:7d:64:f3:96:52:26:e7:1d:08: 6e:72:bc:33:28:5a:f4:74:d7:f9:71:5c:42:0d:50: 7d:bf:8e:55:7f:50:86:a9:78:d3:1e:3b:4b:98:50: e0:dd:24:eb:c8:ee:09:6a:ea:a2:7b:5b:40:dc:e2: 3e:69:6f:29:13:ed:10:ef:ab:41:f8:dc:ee:c0:6c: 66:4b:07:1b:99:b0:15:1e:f6:50:b9:e7:d8:04:89: 5d:e4:c8:bc:01:5a:fa:2b:c0:46:68:6e:5e:ef:3a: 8d:4a:f3:9d:cf:7e:3f:01:b3:13:b3:5f:57:0f:45: bb:14:b6:ba:25:7b:1f:e7:9c:80:d1:a7:95:84:34: 20:ee:d0:33:ed:22:f2:17:51:49:4f:98:87:ad:b6: 09:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1F:7C:F7:EB:DA:FF:48:2B:63:68:E4:CB:ED:DB:E2:D9:85:AA:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ae6b2d22-5a09-336f-bb07-d3a1056fe17f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 72.14.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:ee:a9:5b:53:34:2e:8f:d7:9a:5e:2b:5c:6e:a3:9d:ba:eb: 2a:c4:7d:e7:63:ea:9b:bb:20:3f:3d:f4:dc:82:d9:66:22:22: bb:4d:eb:76:b2:d5:f8:ed:95:ae:0b:e5:ca:dc:43:f5:4a:1c: a0:81:1f:17:6f:bd:eb:21:59:ba:de:9e:82:df:53:6e:99:3f: 95:14:a1:03:c5:c9:a7:da:9e:ed:b9:dd:89:d9:85:58:53:ec: b6:55:f1:ae:c3:f3:25:58:4d:98:78:c8:85:e5:47:6a:55:ef: fe:95:fc:ef:c8:2a:2f:15:59:e4:d2:73:1c:8e:20:8e:5d:34: c0:03:a9:be:16:e3:cb:c6:26:10:28:54:39:04:d2:0b:7e:c5: 55:08:78:8b:a9:e0:42:10:f0:5d:fc:66:3e:e4:d3:10:e8:20: fd:c1:52:df:e8:2e:f6:65:0a:4e:6d:74:4e:e1:a7:29:81:bc: 82:98:65:84:ed:b2:a1:08:43:c9:bb:4a:26:8a:7e:17:18:0e: 60:66:4b:ab:84:6e:1c:0f:b6:83:69:f1:28:3d:39:45:57:1c: c3:09:29:ec:97:c0:15:8a:6a:e3:33:04:5e:b2:b5:ac:bb:b5: b8:b5:18:a9:77:fc:8a:fa:e6:9e:2c:47:9c:77:89:9d:49:37: 30:04:00:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRDAgird98yN4+aQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwMzAxMDAzM1oXDTI1MTIwMjAyMDAzM1owLzEtMCsGA1UEAxMk OWQ3Y2NhZjctYmE5Yi00NmQ5LTlhZGQtYzA5MmIzZGE5NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm65HyfOpwpAcH6sb3a4MfdgELRQ9ZfGH4POk kQp2DfMXdXwiJWYU2Iw/M4Kyx6bb/QAENFCFFqOTmGhpPGTAz0T/wxhCEzGg/MsP gxN8vx8q9R/Pokfkfl9SzRCK34RTfR1vedoUuLlbxjg9gPh9ZPOWUibnHQhucrwz KFr0dNf5cVxCDVB9v45Vf1CGqXjTHjtLmFDg3STryO4Jauqie1tA3OI+aW8pE+0Q 76tB+NzuwGxmSwcbmbAVHvZQuefYBIld5Mi8AVr6K8BGaG5e7zqNSvOdz34/AbMT s19XD0W7FLa6JXsf55yA0aeVhDQg7tAz7SLyF1FJT5iHrbYJQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgffPfr2v9IK2No5Mvt2+LZhapmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYWU2YjJkMjItNWEwOS0z MzZmLWJiMDctZDNhMTA1NmZlMTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASA5fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANvuqVtTNC6P15peK1xuo5266yrEfedj6pu7ID899NyC2WYiIrtN63ay 1fjtla4L5crcQ/VKHKCBHxdvveshWbrenoLfU26ZP5UUoQPFyafanu253YnZhVhT 7LZV8a7D8yVYTZh4yIXlR2pV7/6V/O/IKi8VWeTScxyOII5dNMADqb4W48vGJhAo VDkE0gt+xVUIeIup4EIQ8F38Zj7k0xDoIP3BUt/oLvZlCk5tdE7hpymBvIKYZYTt sqEIQ8m7SiaKfhcYDmBmS6uEbhwPtoNp8Sg9OUVXHMMJKeyXwBWKauMzBF6ytay7 tbi1GKl3/Ir65p4sR5x3iZ1JNzAEAI4= -----END CERTIFICATE-----Generated at Sun Sep 7 12:37:42 2025 by rpki-client