$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a865188e-8adc-3877-94df-7f4e8768dbad.roa File: a865188e-8adc-3877-94df-7f4e8768dbad.roa (raw, json) Hash identifier: sRQRO3TIn/pkMMWNDpoIhF2DGao6IEGpVdblbEpJYaM= Subject key identifier: CE:38:3A:72:DF:3E:6C:3E:30:AD:BC:BE:A3:A3:E3:E7:5E:F8:82:B1 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584BB88D24317C70A1F86DCAA700 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a865188e-8adc-3877-94df-7f4e8768dbad.roa Signing time: Sun 02 Nov 2025 01:00:31 +0000 ROA not before: Sun 02 Nov 2025 01:00:31 +0000 ROA not after: Sat 31 Jan 2026 02:00:31 +0000 asID: 7018 IP address blocks: 158.62.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b8:8d:24:31:7c:70:a1:f8:6d:ca:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Nov 2 01:00:31 2025 GMT Not After : Jan 31 02:00:31 2026 GMT Subject: CN=a160b6df-c91e-4031-a086-52d7528eec2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:71:2b:fc:d4:e1:8f:df:8c:e8:d9:7c:8c: 01:01:68:50:7b:79:c7:38:9e:ab:f5:bd:95:91:36: 9e:85:6d:3f:4e:08:71:4e:a0:fb:94:54:ab:ea:6e: ca:46:c3:31:d0:fd:e0:df:05:78:22:54:d0:40:26: 3f:b7:d7:7a:ae:4f:9b:62:6d:28:83:5d:ee:42:6d: 6c:9e:90:73:29:5f:a2:03:69:7b:e8:f8:ab:00:25: 6d:56:4e:fe:14:f3:c5:6e:67:3a:6c:34:6b:1e:0b: 92:b5:a2:fe:dc:cd:6c:2d:3e:d1:52:07:ba:7c:70: 39:90:a0:5e:32:eb:0e:19:ee:40:8a:e5:00:da:ef: c0:85:92:4d:54:2c:55:55:7c:41:36:58:6b:9d:d4: d8:5c:64:fe:da:31:d3:98:6a:ed:9f:7b:55:d6:b1: dd:97:11:c4:a0:df:b1:a5:a2:ae:e9:5b:49:ae:c6: 98:b1:c3:ba:90:d8:7f:d8:22:ae:de:5c:7b:00:f4: 22:bd:5d:2c:ba:0e:fa:d5:bb:5f:c4:04:e5:68:b3: 4f:ad:33:1c:d3:ed:13:82:e4:82:e6:97:92:9f:f2: 77:8c:c2:37:b6:9a:9e:7d:c3:93:6e:7c:bc:5f:52: 0d:7e:0e:6c:8d:90:df:c9:43:fa:1e:d0:34:7f:8a: b9:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:38:3A:72:DF:3E:6C:3E:30:AD:BC:BE:A3:A3:E3:E7:5E:F8:82:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/a865188e-8adc-3877-94df-7f4e8768dbad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 158.62.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:65:40:53:69:a5:9b:24:5a:cd:7f:d5:5b:ed:f6:59:8d:f8: 21:14:31:65:dd:c3:63:5e:b0:02:05:ad:6b:d0:9c:0e:f1:1d: da:30:6d:d2:36:d9:44:3a:09:9f:f1:33:c9:cd:d3:f1:46:c0: 22:19:22:fd:8b:a8:c3:58:93:8f:b8:ac:db:25:ff:58:77:f1: 9e:42:36:2f:63:a7:6a:dd:26:f3:47:05:a3:15:b9:f3:75:92: 77:46:3f:34:8f:76:f5:81:dc:99:13:35:03:49:47:cf:8d:40: 11:85:b0:7c:22:a2:d8:b8:97:dc:57:6e:6c:65:b5:fd:37:7d: 76:78:d6:7d:69:dd:a8:e2:be:ce:93:c1:ea:83:b6:61:f3:59: e3:62:bb:2f:55:29:f6:35:b8:44:1f:7a:a1:cb:b7:50:11:b9: ce:bd:16:e1:03:39:62:8d:4d:7e:15:70:ac:66:29:b1:52:a5: 77:ec:76:d3:f4:69:b0:a1:f0:74:b9:f3:84:2a:d4:9f:6d:8f: 33:d2:b8:fe:e9:d4:dc:62:ae:8d:da:5a:64:02:8d:2a:fd:29: 1b:32:3f:12:fe:1d:cd:55:4d:c8:5c:03:8a:d8:07:6b:f2:09: ef:ea:b8:c6:8b:28:50:35:fc:12:66:1e:dc:8b:2f:06:09:31: 30:95:11:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu4jSQxfHCh+G3KpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MTEwMjAxMDAzMVoXDTI2MDEzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTE2MGI2ZGYtYzkxZS00MDMxLWEwODYtNTJkNzUyOGVlYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcRxK/zU4Y/fjOjZfIwBAWhQe3nHOJ6r9b2V kTaehW0/TghxTqD7lFSr6m7KRsMx0P3g3wV4IlTQQCY/t9d6rk+bYm0og13uQm1s npBzKV+iA2l76PirACVtVk7+FPPFbmc6bDRrHguStaL+3M1sLT7RUge6fHA5kKBe MusOGe5AiuUA2u/AhZJNVCxVVXxBNlhrndTYXGT+2jHTmGrtn3tV1rHdlxHEoN+x paKu6VtJrsaYscO6kNh/2CKu3lx7APQivV0sug761btfxATlaLNPrTMc0+0TguSC 5peSn/J3jMI3tpqefcOTbny8X1INfg5sjZDfyUP6HtA0f4q5sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM44OnLfPmw+MK28vqOj4+de+IKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvYTg2NTE4OGUtOGFkYy0z ODc3LTk0ZGYtN2Y0ZTg3NjhkYmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnj7aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJlQFNppZskWs1/1Vvt9lmN+CEUMWXdw2NesAIFrWvQnA7xHdowbdI2 2UQ6CZ/xM8nN0/FGwCIZIv2LqMNYk4+4rNsl/1h38Z5CNi9jp2rdJvNHBaMVufN1 kndGPzSPdvWB3JkTNQNJR8+NQBGFsHwioti4l9xXbmxltf03fXZ41n1p3ajivs6T weqDtmHzWeNiuy9VKfY1uEQfeqHLt1ARuc69FuEDOWKNTX4VcKxmKbFSpXfsdtP0 abCh8HS584Qq1J9tjzPSuP7p1Nxiro3aWmQCjSr9KRsyPxL+Hc1VTchcA4rYB2vy Ce/quMaLKFA1/BJmHtyLLwYJMTCVEYg= -----END CERTIFICATE-----Generated at Wed Nov 5 11:58:09 2025 by rpki-client