$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa File: 4ceb54a7-225f-32e0-81d7-109b70ac65de.roa (raw, json) Hash identifier: lOHr2l4DqyfcBV/iQ4xz+5G4zIQJ48Nf+VqNqOhgFeA= Subject key identifier: 64:59:F5:18:C6:E9:0C:61:69:E8:E4:D9:48:72:4C:BB:8B:37:0C:02 Certificate issuer: /CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Certificate serial: 010D0C9F4328584BBFD93EC91B50939DB5B2F1C0 Authority key identifier: 78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa Signing time: Tue 04 Nov 2025 15:44:49 +0000 ROA not before: Tue 04 Nov 2025 15:44:49 +0000 ROA not after: Mon 02 Feb 2026 15:44:49 +0000 asID: 402074 IP address blocks: 208.92.236.0/22 maxlen: 24 2602:f85e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:d9:3e:c9:1b:50:93:9d:b5:b2:f1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28bc3af1-87e7-4ad5-ba9c-7eebdbd820db Validity Not Before: Nov 4 15:44:49 2025 GMT Not After : Feb 2 15:44:49 2026 GMT Subject: CN=b4af17e0-6565-481f-b771-9d888057c8e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:cf:2f:2b:31:ac:9b:a3:29:29:95:01:ca:0d: 30:17:52:67:d0:9d:c6:88:87:68:90:2a:96:97:61: c8:13:8c:82:04:42:98:ea:5a:2f:54:3f:5a:8a:80: 20:27:e7:8c:b9:19:d2:94:d6:b0:f9:d7:cb:27:b0: a5:8a:c4:c8:a5:47:b0:a8:e5:6c:f9:b8:7f:f4:2d: bc:f8:0f:fc:65:fa:59:4f:99:d8:24:68:72:8a:bc: 78:84:6d:58:2b:9b:5c:f1:76:77:1b:f8:95:aa:40: 25:a2:f0:68:81:bc:02:ec:7d:fe:71:4d:b6:1f:a2: 24:90:f8:1e:0b:20:b0:a2:a3:d8:dd:9d:8c:b0:2d: ee:6f:ba:c7:24:05:38:9f:d4:94:eb:ed:90:89:fd: 52:44:dc:5a:4b:e7:d4:b4:d5:a4:36:d8:18:27:31: 9e:c9:38:be:0d:a4:a2:bc:e5:51:f8:3a:f7:d6:0b: 8b:a9:04:0e:68:eb:e6:75:e7:d3:a5:ab:94:ba:9a: 20:ee:b6:3e:69:d7:d9:f5:8b:9e:da:5b:87:2a:8e: 5c:04:59:9c:8d:e5:5d:24:87:b2:fc:79:66:12:a2: 4e:cf:52:56:1e:c8:95:3f:4e:7e:e5:10:22:82:f6: 9a:29:fe:f8:84:21:26:56:d2:b4:d2:35:f9:7a:bb: a5:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:59:F5:18:C6:E9:0C:61:69:E8:E4:D9:48:72:4C:BB:8B:37:0C:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/4ceb54a7-225f-32e0-81d7-109b70ac65de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.crl X509v3 Authority Key Identifier: keyid:78:BD:2E:9E:0F:6D:71:DF:A1:7A:6B:F4:02:24:03:50:B3:19:7C:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/28bc3af1-87e7-4ad5-ba9c-7eebdbd820db.cer sbgp-ipAddrBlock: critical IPv4: 208.92.236.0/22 IPv6: 2602:f85e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:50:98:da:b6:bf:bc:36:26:9c:f9:2b:6e:a8:24:19:08:3e: 60:84:63:dc:12:3b:43:99:c9:09:a8:33:fc:75:54:14:cb:d0: fe:2c:16:63:01:9c:17:91:0c:8e:f4:f1:c5:cf:46:bd:f7:a1: 70:b9:b5:87:b3:04:48:a3:76:b1:86:5d:74:f8:ff:26:28:98: f1:a3:2a:0d:79:df:48:4a:37:7d:c2:2a:c7:97:8e:37:d1:f0: 72:31:64:b7:f3:e8:34:df:7e:ee:2e:c6:2f:05:c8:a9:35:0b: 42:cc:6f:01:87:47:d6:9e:c7:d7:c7:0d:bc:13:56:d3:d8:62: 73:28:ea:91:ca:5e:b8:a1:e8:4e:3f:76:fe:c2:02:f4:76:7f: fb:e8:1b:db:12:b3:63:95:04:a6:a2:cf:fa:02:d9:41:89:f9: 2e:9d:a1:31:3a:c8:5c:ed:dc:b5:c6:8a:02:b4:25:88:ee:71: f5:1f:7e:f5:e6:fa:71:32:9b:5f:48:b7:0b:98:21:c1:b3:df: 25:34:9a:85:0f:9f:a3:59:24:e5:9b:ad:a8:93:24:88:cc:56: 62:c7:35:dd:74:f4:77:88:95:92:ed:0b:f9:c0:c6:31:4a:fa: 71:f8:78:e3:a3:c6:3e:11:49:1f:93:68:80:e3:46:4e:78:f0: ed:b0:3b:58 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu/2T7JG1CTnbWy8cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhiYzNhZjEtODdlNy00YWQ1LWJhOWMtN2VlYmRiZDgy MGRiMB4XDTI1MTEwNDE1NDQ0OVoXDTI2MDIwMjE1NDQ0OVowLzEtMCsGA1UEAxMk YjRhZjE3ZTAtNjU2NS00ODFmLWI3NzEtOWQ4ODgwNTdjOGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgM8vKzGsm6MpKZUByg0wF1Jn0J3GiIdokCqW l2HIE4yCBEKY6lovVD9aioAgJ+eMuRnSlNaw+dfLJ7ClisTIpUewqOVs+bh/9C28 +A/8ZfpZT5nYJGhyirx4hG1YK5tc8XZ3G/iVqkAlovBogbwC7H3+cU22H6IkkPge CyCwoqPY3Z2MsC3ub7rHJAU4n9SU6+2Qif1SRNxaS+fUtNWkNtgYJzGeyTi+DaSi vOVR+Dr31guLqQQOaOvmdefTpauUupog7rY+adfZ9Yue2luHKo5cBFmcjeVdJIey /HlmEqJOz1JWHsiVP05+5RAigvaaKf74hCEmVtK00jX5erulkQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGRZ9RjG6Qxhaejk2UhyTLuLNwwCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yOGJj M2FmMS04N2U3LTRhZDUtYmE5Yy03ZWViZGJkODIwZGIvNGNlYjU0YTctMjI1Zi0z MmUwLTgxZDctMTA5YjcwYWM2NWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjhiYzNhZjEtODdlNy00YWQ1LWJh OWMtN2VlYmRiZDgyMGRiLzI4YmMzYWYxLTg3ZTctNGFkNS1iYTljLTdlZWJkYmQ4 MjBkYi5jcmwwHwYDVR0jBBgwFoAUeL0ung9tcd+hemv0AiQDULMZfHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yOGJjM2FmMS04N2U3LTRhZDUtYmE5Yy03ZWVi ZGJkODIwZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQC0FzsMA4E AgACMAgDBgQmAvheADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBsUJjatr+8Niac+StuqCQZCD5ghGPcEjtD mckJqDP8dVQUy9D+LBZjAZwXkQyO9PHFz0a996FwubWHswRIo3axhl10+P8mKJjx oyoNed9ISjd9wirHl4430fByMWS38+g0337uLsYvBcipNQtCzG8Bh0fWnsfXxw28 E1bT2GJzKOqRyl64oehOP3b+wgL0dn/76BvbErNjlQSmos/6AtlBifkunaExOshc 7dy1xooCtCWI7nH1H3715vpxMptfSLcLmCHBs98lNJqFD5+jWSTlm62okySIzFZi xzXddPR3iJWS7Qv5wMYxSvpx+Hjjo8Y+EUkfk2iA40ZOePDtsDtY -----END CERTIFICATE-----Generated at Wed Nov 5 20:43:02 2025 by rpki-client