$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa File: 28f43666-e719-3a3b-842f-19d63e1d9c71.roa (raw, json) Hash identifier: ydijJGnPgNLhpiaijoQc34CT625Mg7XQtjjOU/6xpG8= Subject key identifier: 20:04:55:22:5C:FF:88:E6:B5:74:6E:4B:21:99:31:0A:A9:FE:4C:70 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AACD4544ECFDAEB8006F80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33662 IP address blocks: 76.143.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:cd:45:44:ec:fd:ae:b8:00:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=10ae9ad9-4ac9-442e-a554-82c3d85f0800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:43:d6:63:ee:f8:77:55:8f:70:37:2a:e0:e8: 3a:c3:b7:c5:0b:09:2e:9b:35:40:99:5f:6d:de:13: 0c:10:07:ca:53:b9:73:79:e5:38:c4:84:81:51:d0: be:6f:6f:58:0b:b4:5c:c0:23:08:37:72:1c:4c:ec: 02:47:0b:0f:3a:d9:e1:7a:d7:25:7f:97:24:9a:d0: df:7b:bd:33:4c:b1:43:93:a6:0a:73:7e:ba:77:90: 51:84:af:31:f4:43:2a:5c:ea:fc:29:4c:6e:f2:4e: 8b:65:3b:39:b2:28:bf:43:29:1a:85:3a:92:04:13: 8d:f5:2e:a6:62:22:7d:7f:2f:f2:08:e0:29:d7:7d: 96:9e:05:67:1f:69:6e:dd:00:9f:75:b0:44:8b:9c: 99:b1:bf:21:f4:0c:38:67:33:de:96:7d:9a:d1:c4: 04:52:83:3e:09:70:aa:df:5c:2c:95:bd:7b:6b:d2: 7e:f5:a9:df:da:13:1e:d5:af:22:4f:7d:dd:48:c8: 48:f9:54:fa:53:3a:2c:21:2c:75:a0:2e:26:98:79: 03:c8:8f:3a:a3:0b:12:27:aa:47:a8:87:ba:0c:72: 5d:84:51:f9:70:ad:ca:3d:cd:a4:2b:47:86:4e:52: fe:b2:4a:cb:72:81:1a:d3:82:21:49:fd:5a:d1:f0: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:04:55:22:5C:FF:88:E6:B5:74:6E:4B:21:99:31:0A:A9:FE:4C:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.143.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:0d:d3:8b:88:08:7b:60:39:51:a4:36:9c:49:b6:cc:c9:5d: d2:9b:d7:01:4e:c4:b7:6a:f7:5b:5b:c5:dd:05:c2:c1:c1:76: 78:dc:9d:ab:66:0b:f3:f3:68:83:c3:a2:0d:5c:bc:dc:c4:54: 80:c3:2c:b9:61:13:77:cf:0c:50:05:b9:98:4f:57:75:22:97: b1:99:e9:53:e3:0c:37:fc:ba:73:54:8d:85:7d:df:5e:af:18: fb:93:c8:bd:3d:c8:33:33:e6:31:46:78:20:72:18:96:1d:a9: 48:6c:31:ad:40:2e:43:03:f5:cf:85:38:08:84:04:31:b0:e1: 24:c5:5b:de:5f:5e:4a:e3:7c:06:93:7f:d0:cf:5b:34:45:ef: 4f:e8:f0:d3:ee:0c:58:26:8d:cd:ad:eb:2b:b1:eb:76:d5:b4: 3e:36:92:4b:b7:5d:e8:4d:3f:73:71:e9:ca:f9:61:04:20:fd: 32:e8:82:d1:df:e9:e0:aa:8f:89:72:d4:76:4d:cc:31:40:c9: fb:6f:c4:c2:ae:0c:b2:ff:c6:ce:72:9e:ff:a0:86:15:5c:a0: 54:4e:96:56:1c:ef:6c:2f:70:de:0f:a1:72:0d:ff:b0:94:ab: 1a:0e:6d:a2:cf:8b:e4:06:9a:b0:23:2b:7d:b6:d0:81:7c:56: 99:72:e3:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqs1FROz9rrgAb4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTBhZTlhZDktNGFjOS00NDJlLWE1NTQtODJjM2Q4NWYwODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0PWY+74d1WPcDcq4Og6w7fFCwkumzVAmV9t 3hMMEAfKU7lzeeU4xISBUdC+b29YC7RcwCMIN3IcTOwCRwsPOtnhetclf5ckmtDf e70zTLFDk6YKc366d5BRhK8x9EMqXOr8KUxu8k6LZTs5sii/QykahTqSBBON9S6m YiJ9fy/yCOAp132WngVnH2lu3QCfdbBEi5yZsb8h9Aw4ZzPeln2a0cQEUoM+CXCq 31wslb17a9J+9anf2hMe1a8iT33dSMhI+VT6UzosISx1oC4mmHkDyI86owsSJ6pH qIe6DHJdhFH5cK3KPc2kK0eGTlL+skrLcoEa04IhSf1a0fAixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAEVSJc/4jmtXRuSyGZMQqp/kxwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjhmNDM2NjYtZTcxOS0z YTNiLTg0MmYtMTlkNjNlMWQ5YzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTI/4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcN04uICHtgOVGkNpxJtszJXdKb1wFOxLdq91tbxd0FwsHBdnjcnatm C/PzaIPDog1cvNzEVIDDLLlhE3fPDFAFuZhPV3Uil7GZ6VPjDDf8unNUjYV9316v GPuTyL09yDMz5jFGeCByGJYdqUhsMa1ALkMD9c+FOAiEBDGw4STFW95fXkrjfAaT f9DPWzRF70/o8NPuDFgmjc2t6yux63bVtD42kku3XehNP3Nx6cr5YQQg/TLogtHf 6eCqj4ly1HZNzDFAyftvxMKuDLL/xs5ynv+ghhVcoFROllYc72wvcN4PoXIN/7CU qxoObaLPi+QGmrAjK3220IF8Vply49A= -----END CERTIFICATE-----Generated at Wed Nov 5 04:52:41 2025 by rpki-client