$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa File: c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa (raw, json) Hash identifier: TX8c0rGU0JDHwI6ua3XYuZR7VWgDmnRR9j0HLDfHa60= Subject key identifier: 99:C4:27:5B:54:08:85:13:1E:0E:A3:A3:A3:ED:8B:FD:2B:CB:48:04 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584B1806F951118D292DACFDB5C0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa Signing time: Fri 05 Sep 2025 13:00:41 +0000 ROA not before: Fri 05 Sep 2025 13:00:41 +0000 ROA not after: Thu 04 Dec 2025 14:00:41 +0000 asID: 22516 IP address blocks: 170.199.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:18:06:f9:51:11:8d:29:2d:ac:fd:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Sep 5 13:00:41 2025 GMT Not After : Dec 4 14:00:41 2025 GMT Subject: CN=598147d3-65e2-468e-8b53-91bc1c9a025b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:87:12:0b:6e:3d:a7:4a:11:e8:fa:f9:09:e9: ee:ac:63:b3:f3:ee:10:a4:63:b6:c9:1c:8d:e4:7d: 79:ca:e7:d0:4a:6a:6b:01:99:a0:21:7b:b3:9a:f1: 45:be:48:18:7a:17:c9:4e:87:39:d3:45:9d:75:d8: 21:6c:c6:50:dc:dc:1c:c2:be:0a:7c:da:7c:69:97: 57:6a:e4:ba:c5:34:6d:af:23:41:37:08:5c:24:50: a0:00:1c:88:9a:5d:c2:6c:a2:89:a2:2c:5e:9a:47: fc:55:70:23:2c:82:11:e4:94:7a:7d:fb:1a:3c:34: 98:f4:cc:4e:5e:f3:30:98:ca:76:a1:e1:b2:51:88: 41:fa:22:87:35:fc:c1:65:53:a7:08:69:0d:f9:21: 67:86:01:bb:bb:d7:5a:6d:23:ea:bf:9a:a4:16:f4: 05:e3:3e:5a:31:74:4a:6c:3a:42:da:85:01:18:df: 33:c2:76:02:ba:62:62:2c:c2:33:7c:73:a2:24:d2: ea:2f:5f:9d:2d:11:da:a9:ac:59:d5:6c:39:de:f7: 6e:80:94:02:39:e3:14:b0:2b:29:cd:d7:d3:64:56: d7:7f:70:a9:3f:dd:40:91:05:42:d4:ab:56:bd:44: 58:6d:18:f8:eb:0f:37:93:db:4c:73:ed:08:d1:d8: a9:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C4:27:5B:54:08:85:13:1E:0E:A3:A3:A3:ED:8B:FD:2B:CB:48:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/c91a7d2e-85b5-34f4-bc81-1d9f1ccfd3bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 170.199.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:b1:9e:81:6e:ee:64:a1:a8:09:ae:3d:d8:93:e9:06:ca:e5: 38:47:47:9c:fd:64:d6:64:b9:b2:48:cd:17:18:b4:d2:9c:0f: f7:cb:35:72:b4:13:18:0f:d4:5f:43:36:98:90:c4:12:59:c0: 03:a7:1b:0a:40:52:68:70:85:9a:32:d0:e7:64:0e:97:7d:81: a7:17:7b:8d:1a:e6:0d:e7:58:6a:a5:50:d2:ce:82:11:1e:4a: c8:f2:5e:9f:79:44:84:9f:ca:7d:56:d9:4c:80:ea:b8:4f:91: 52:b5:83:f5:4c:4d:24:ad:07:9b:95:1f:2e:1c:f2:7c:6b:26: 7e:b3:15:0c:45:53:cc:1c:05:b1:8a:f1:4a:fb:3b:e9:dc:3e: a8:61:ac:5b:51:98:3c:db:80:e9:6e:cf:d8:86:68:fc:5b:e7: b9:b0:8a:e6:d5:62:e1:a3:0b:1c:14:f2:77:08:c7:fa:3d:54: e0:48:ee:7d:66:6f:ee:b2:32:c3:5c:80:e0:c9:34:44:28:e5: 61:7b:17:e3:2b:78:3a:38:fa:f2:6a:b4:91:0a:28:ca:0f:3a: b3:aa:6b:cf:28:2f:79:9d:9d:ea:33:1a:d8:9e:34:e2:9e:fd: a2:4a:b8:24:ce:d6:5e:f3:88:af:dd:7f:d8:13:b7:ed:b2:c5: 5c:64:bb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsYBvlREY0pLaz9tcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDkwNTEzMDA0MVoXDTI1MTIwNDE0MDA0MVowLzEtMCsGA1UEAxMk NTk4MTQ3ZDMtNjVlMi00NjhlLThiNTMtOTFiYzFjOWEwMjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIcSC249p0oR6Pr5CenurGOz8+4QpGO2yRyN 5H15yufQSmprAZmgIXuzmvFFvkgYehfJToc500WdddghbMZQ3Nwcwr4KfNp8aZdX auS6xTRtryNBNwhcJFCgAByIml3CbKKJoixemkf8VXAjLIIR5JR6ffsaPDSY9MxO XvMwmMp2oeGyUYhB+iKHNfzBZVOnCGkN+SFnhgG7u9dabSPqv5qkFvQF4z5aMXRK bDpC2oUBGN8zwnYCumJiLMIzfHOiJNLqL1+dLRHaqaxZ1Ww53vdugJQCOeMUsCsp zdfTZFbXf3CpP91AkQVC1KtWvURYbRj46w83k9tMc+0I0dipoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJnEJ1tUCIUTHg6jo6Pti/0ry0gEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYzkxYTdkMmUtODViNS0z NGY0LWJjODEtMWQ5ZjFjY2ZkM2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqsflMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCxnoFu7mShqAmuPdiT6QbK5ThHR5z9ZNZkubJIzRcYtNKcD/fLNXK0 ExgP1F9DNpiQxBJZwAOnGwpAUmhwhZoy0OdkDpd9gacXe40a5g3nWGqlUNLOghEe SsjyXp95RISfyn1W2UyA6rhPkVK1g/VMTSStB5uVHy4c8nxrJn6zFQxFU8wcBbGK 8Ur7O+ncPqhhrFtRmDzbgOluz9iGaPxb57mwiubVYuGjCxwU8ncIx/o9VOBI7n1m b+6yMsNcgODJNEQo5WF7F+MreDo4+vJqtJEKKMoPOrOqa88oL3mdneozGtieNOKe /aJKuCTO1l7ziK/df9gTt+2yxVxkuwk= -----END CERTIFICATE-----Generated at Sat Sep 6 02:18:44 2025 by rpki-client