$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa File: 8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa (raw, json) Hash identifier: S1b3Aj3FjxlatnFeLfq4ThQvODLh5kOGZd5T8Zpv/aI= Subject key identifier: 35:5C:81:D1:98:17:71:B9:06:27:2E:B5:94:B3:4A:79:89:83:C1:40 Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A73325E2D5B130C360E9BBF80 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa Signing time: Tue 08 Jul 2025 12:00:12 +0000 ROA not before: Tue 08 Jul 2025 12:00:12 +0000 ROA not after: Mon 06 Oct 2025 12:00:12 +0000 asID: 40466 IP address blocks: 170.186.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:73:32:5e:2d:5b:13:0c:36:0e:9b:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 8 12:00:12 2025 GMT Not After : Oct 6 12:00:12 2025 GMT Subject: CN=c197b849-5eac-469c-9577-244beaf4d009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:0f:dd:63:90:58:32:a3:24:00:72:70:b9: 2a:7b:1e:91:f6:b8:52:b2:71:e1:8e:60:f7:51:3a: aa:96:35:92:66:5c:98:a1:30:2d:ed:79:53:84:d2: 5b:d4:d7:9f:19:d8:6f:3c:63:d1:4e:b9:c1:0e:4d: 4f:f5:3d:d2:2f:1a:a3:34:41:a9:14:4a:20:17:14: 4f:c1:55:16:3c:10:3a:2f:17:1a:80:5e:c4:44:4d: 99:b9:41:b1:7d:39:a6:b9:46:20:1a:b2:56:2b:77: 45:e4:67:8b:3c:83:f9:7c:e8:29:c1:57:28:2a:18: c2:8d:5d:29:9c:4c:d5:05:04:14:93:6c:87:bc:10: 28:2b:c8:b1:d6:fd:05:66:9e:1c:6c:90:a8:79:0c: cd:c5:62:0c:e3:2b:82:28:45:de:18:82:93:e1:cf: a4:df:0f:c4:d8:c0:c0:90:16:3b:f2:c9:a9:ab:8d: 77:12:a5:3b:26:d7:3d:15:8b:e0:6a:7a:fb:09:01: 22:08:ec:5f:e9:bf:fa:3d:fd:9d:de:e8:91:9f:27: 04:14:8a:39:16:9c:36:15:13:76:e3:cd:1b:b5:e8: de:23:b9:68:a3:05:30:dc:0b:4a:89:26:5f:6a:82: 3d:59:38:58:b6:3d:25:f3:b4:d3:16:12:ab:84:c1: 64:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:81:D1:98:17:71:B9:06:27:2E:B5:94:B3:4A:79:89:83:C1:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/8aab3cd7-e34d-30e9-84b1-7403ab620d41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 170.186.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2e:68:53:b5:5e:bd:06:e1:ab:61:e3:e5:65:6a:d3:b9:68: 4b:34:e9:12:0a:94:36:75:a6:44:53:a3:a9:87:ca:34:d7:3e: 47:11:ba:2f:06:76:47:62:bd:d3:ff:2b:a7:94:21:f4:de:6f: e2:a4:45:e1:b0:aa:14:9d:60:c5:2f:b5:4f:9d:1a:2b:58:c9: fb:f3:68:da:19:72:43:bf:1a:03:95:95:96:f5:dd:36:2f:00: 0a:aa:bf:63:b3:83:34:c0:8e:86:cf:8b:47:2f:a3:9b:65:e0: c0:e2:d0:1c:3f:96:a2:4c:b1:54:02:f1:75:4b:92:ad:3c:b8: e2:84:bb:8a:1a:ef:98:12:d3:fb:67:cd:b5:e9:21:17:18:ba: 26:29:38:ac:42:7c:00:9a:f2:4c:6d:0c:2a:85:4b:a5:09:38: b3:40:ae:e3:89:8a:21:ff:02:fa:c2:f1:ad:55:37:ab:1f:fa: 43:ee:59:91:cc:09:0f:6d:f5:ca:7f:27:be:25:d0:51:15:4c: ac:1d:34:3d:74:15:f3:04:f9:34:bf:d3:bd:75:cf:11:b9:91: 5f:9d:7c:a2:6f:1d:34:e1:50:f1:56:81:51:78:3a:da:93:71: 23:eb:d3:7f:0a:04:8c:0a:4a:59:c9:5b:f6:97:11:a0:34:d4: 05:81:29:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpzMl4tWxMMNg6bv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDcwODEyMDAxMloXDTI1MTAwNjEyMDAxMlowLzEtMCsGA1UEAxMk YzE5N2I4NDktNWVhYy00NjljLTk1NzctMjQ0YmVhZjRkMDA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/AP3WOQWDKjJABycLkqex6R9rhSsnHhjmD3 UTqqljWSZlyYoTAt7XlThNJb1NefGdhvPGPRTrnBDk1P9T3SLxqjNEGpFEogFxRP wVUWPBA6LxcagF7ERE2ZuUGxfTmmuUYgGrJWK3dF5GeLPIP5fOgpwVcoKhjCjV0p nEzVBQQUk2yHvBAoK8ix1v0FZp4cbJCoeQzNxWIM4yuCKEXeGIKT4c+k3w/E2MDA kBY78smpq413EqU7Jtc9FYvganr7CQEiCOxf6b/6Pf2d3uiRnycEFIo5Fpw2FRN2 480btejeI7loowUw3AtKiSZfaoI9WThYtj0l87TTFhKrhMFk3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVcgdGYF3G5BicutZSzSnmJg8FAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvOGFhYjNjZDctZTM0ZC0z MGU5LTg0YjEtNzQwM2FiNjIwZDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrqOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYuaFO1Xr0G4ath4+VlatO5aEs06RIKlDZ1pkRTo6mHyjTXPkcRui8G dkdivdP/K6eUIfTeb+KkReGwqhSdYMUvtU+dGitYyfvzaNoZckO/GgOVlZb13TYv AAqqv2OzgzTAjobPi0cvo5tl4MDi0Bw/lqJMsVQC8XVLkq08uOKEu4oa75gS0/tn zbXpIRcYuiYpOKxCfACa8kxtDCqFS6UJOLNAruOJiiH/AvrC8a1VN6sf+kPuWZHM CQ9t9cp/J74l0FEVTKwdND10FfME+TS/0711zxG5kV+dfKJvHTThUPFWgVF4OtqT cSPr038KBIwKSlnJW/aXEaA01AWBKRw= -----END CERTIFICATE-----Generated at Sat Jul 12 00:10:09 2025 by rpki-client