$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa File: d14d99f6-81f6-3077-9604-b996080b45c9.roa (raw, json) Hash identifier: eBFbFTaF4m8E7x6Po2RriNquJvqB7V+OWJ9E7keyNkc= Subject key identifier: 68:D2:FD:B5:47:C0:66:21:E8:1B:4C:8F:45:CD:F6:31:ED:18:FD:3C Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584A77808C4B973DF5D7A60D5CC0 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 11273 IP address blocks: 204.194.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:8c:4b:97:3d:f5:d7:a6:0d:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=8a386921-9b84-4756-878f-1ad14323dade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:96:94:13:df:6b:36:55:70:7e:3a:5f:8e:e1: 6d:7d:60:9a:1d:09:c2:c4:43:60:90:ea:75:55:03: 45:ec:51:ca:df:97:ab:15:5a:96:9c:92:50:e0:3b: 32:bc:1f:11:10:d6:9a:a6:a0:26:6b:d4:22:95:a3: e1:50:99:88:da:5b:ef:88:e8:cf:41:aa:24:65:cf: 93:e8:dc:6f:d4:76:eb:64:01:5a:e0:b1:a4:d9:1b: 97:c6:b8:60:77:5c:50:c5:16:f8:c6:44:1b:f6:49: 80:d5:ad:d0:aa:23:98:7e:eb:d5:47:0b:4f:aa:9d: 9b:70:4f:b7:eb:53:bf:8c:7f:1a:ec:60:78:17:0b: 34:0b:5e:08:93:cb:f1:7d:29:27:85:07:9b:22:8f: 74:67:35:ff:73:c7:86:32:61:6c:21:c8:e7:8d:50: 2e:e0:54:25:ce:2e:86:c3:73:ee:3d:21:c3:cd:a1: 78:98:5a:60:d5:9e:ed:b2:7f:97:12:ab:96:09:ba: 72:10:0a:2c:25:e8:62:c8:e1:23:ee:be:40:91:c2: c7:cd:4a:5f:02:82:26:3a:92:fd:c6:25:37:cd:7d: da:23:0e:94:f1:5c:00:1c:e7:7d:ea:ca:0f:3e:b3: 90:ee:41:a1:b4:5e:af:4f:fb:9a:f1:3b:7a:10:07: 4f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:FD:B5:47:C0:66:21:E8:1B:4C:8F:45:CD:F6:31:ED:18:FD:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/d14d99f6-81f6-3077-9604-b996080b45c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 204.194.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:89:4a:4f:cd:2d:be:c8:c1:48:15:16:0f:ff:45:a7:32:bc: 56:77:6e:e8:1b:65:05:d8:56:4d:e7:5b:e3:21:74:a6:ba:f2: dc:40:52:6c:32:46:f9:3d:4b:b9:41:5f:41:27:78:f7:dc:c8: 84:89:22:4c:08:a0:c3:d8:ae:e5:e9:17:32:5f:50:fa:d5:f4: 89:ca:53:d0:77:c2:d9:43:fd:51:f0:b8:32:e5:19:6f:fb:0c: 59:7a:ef:34:d7:1e:f2:2f:75:57:be:de:9d:5f:dc:bd:2c:a0: 8c:61:cd:97:fd:fe:ee:56:86:2d:82:51:5d:88:6f:5e:5f:dc: e9:e0:a2:ee:e7:0c:93:ab:1e:fa:64:64:da:30:bb:40:c8:6c: e1:8a:e2:f4:81:92:40:69:43:ec:32:bf:db:71:fe:9f:a5:8f: ed:1f:43:98:f0:de:ec:c6:2d:31:c0:d0:e5:ca:cb:b9:43:38: 02:36:1a:35:fe:19:0c:57:1f:d8:af:ec:01:b8:4a:38:8c:89: 46:d7:f5:97:1c:60:d9:72:61:7a:77:e3:8f:00:00:72:12:00: 0c:e1:e3:1d:37:8f:87:03:cf:88:31:79:56:a7:9a:12:c8:b8: 1c:d7:fa:7e:01:b4:0b:10:b9:f6:c4:38:53:70:09:58:75:ac: 21:be:2e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIxLlz3116YNXMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk OGEzODY5MjEtOWI4NC00NzU2LTg3OGYtMWFkMTQzMjNkYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhpaUE99rNlVwfjpfjuFtfWCaHQnCxENgkOp1 VQNF7FHK35erFVqWnJJQ4DsyvB8RENaapqAma9QilaPhUJmI2lvviOjPQaokZc+T 6Nxv1HbrZAFa4LGk2RuXxrhgd1xQxRb4xkQb9kmA1a3QqiOYfuvVRwtPqp2bcE+3 61O/jH8a7GB4Fws0C14Ik8vxfSknhQebIo90ZzX/c8eGMmFsIcjnjVAu4FQlzi6G w3PuPSHDzaF4mFpg1Z7tsn+XEquWCbpyEAosJehiyOEj7r5AkcLHzUpfAoImOpL9 xiU3zX3aIw6U8VwAHOd96soPPrOQ7kGhtF6vT/ua8Tt6EAdPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjS/bVHwGYh6BtMj0XN9jHtGP08MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvZDE0ZDk5ZjYtODFmNi0z MDc3LTk2MDQtYjk5NjA4MGI0NWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzMKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKJSk/NLb7IwUgVFg//RacyvFZ3bugbZQXYVk3nW+MhdKa68txAUmwy Rvk9S7lBX0EnePfcyISJIkwIoMPYruXpFzJfUPrV9InKU9B3wtlD/VHwuDLlGW/7 DFl67zTXHvIvdVe+3p1f3L0soIxhzZf9/u5Whi2CUV2Ib15f3Ongou7nDJOrHvpk ZNowu0DIbOGK4vSBkkBpQ+wyv9tx/p+lj+0fQ5jw3uzGLTHA0OXKy7lDOAI2GjX+ GQxXH9iv7AG4SjiMiUbX9ZccYNlyYXp3448AAHISAAzh4x03j4cDz4gxeVanmhLI uBzX+n4BtAsQufbEOFNwCVh1rCG+Ll0= -----END CERTIFICATE-----Generated at Thu Jul 10 19:04:10 2025 by rpki-client