$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa File: 23f9a47e-4a54-3594-b2ad-43440c42e86e.roa (raw, json) Hash identifier: bZ2ZyW4Dpf0pqJrFqOAT5o6CRlBw2Kar87x6jv27mkA= Subject key identifier: F8:FA:D3:0E:33:13:22:95:9A:E1:D0:89:55:88:BA:51:BD:E6:34:EA Certificate issuer: /CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Certificate serial: 010D0C9F4328584BA0D246956CF655035AF5C100 Authority key identifier: 06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 396982 IP address blocks: 206.201.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:46:95:6c:f6:55:03:5a:f5:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28aeee72-bc9c-4a01-a9f5-38a80ac84d52 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=04b36929-10ab-4806-930a-8b744db29c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9b:c5:35:14:26:43:b4:ae:57:5a:87:6a:7f: ed:99:39:28:6a:30:9a:0d:2c:e4:a5:4e:7f:2f:f8: c0:26:43:ac:86:c6:8d:50:bd:ef:4c:24:a4:26:ec: 19:69:99:fc:23:d6:43:47:52:3e:d6:1b:07:6c:91: da:b4:14:09:68:98:9b:33:b2:8f:b9:d6:2c:6e:7c: b2:95:a9:44:75:63:93:20:8d:c8:01:c2:46:23:b1: fb:48:b9:db:3b:9e:2b:4e:b9:f0:b4:f9:f8:9d:10: 14:22:22:a2:78:04:46:84:02:50:fb:7e:3e:ef:99: fe:d0:6c:bb:79:17:39:6d:3a:87:3a:16:9a:49:74: ba:20:eb:f0:4a:95:27:a9:9b:ff:ea:04:ad:71:64: 21:ac:a5:2a:70:60:dd:92:da:09:4a:a7:8f:90:5e: 1d:fb:d9:90:01:ef:24:f4:e2:e0:0c:48:e4:07:e6: 07:ee:12:43:86:a3:2a:4c:68:ad:8b:74:37:80:cd: 45:68:62:33:a2:11:84:4b:a3:7b:4d:3a:7a:f7:6f: 59:e8:74:fe:da:02:25:9f:ae:23:6c:59:26:34:f3: 0e:04:d9:6f:17:f4:e2:61:3e:1b:64:80:8f:c5:97: 45:03:41:7a:40:19:d4:39:61:39:0f:5b:62:a5:b9: 29:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FA:D3:0E:33:13:22:95:9A:E1:D0:89:55:88:BA:51:BD:E6:34:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/23f9a47e-4a54-3594-b2ad-43440c42e86e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.crl X509v3 Authority Key Identifier: keyid:06:58:3B:EA:57:D6:D4:77:3A:5F:F1:0D:74:EF:6D:9A:EC:76:41:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28aeee72-bc9c-4a01-a9f5-38a80ac84d52.cer sbgp-ipAddrBlock: critical IPv4: 206.201.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:96:e0:45:25:ec:20:ce:43:3e:49:2d:08:36:77:b9:21:6c: c1:a1:f6:76:88:bf:1b:33:65:8c:f0:2d:1e:37:9f:ec:65:82: 6d:95:3b:c2:ac:38:54:de:af:d1:d0:12:5c:b7:66:06:e4:0f: 23:4b:fa:a7:72:8e:92:30:0d:56:85:2c:94:36:4f:d3:e2:23: e4:0f:fd:ba:8f:a5:38:9d:b5:32:8d:6e:b6:0c:6d:00:0a:8c: 71:71:a0:58:14:8a:fe:17:80:bd:13:4f:63:32:7f:1e:cb:3f: fd:c0:ec:e0:a6:79:61:73:97:02:eb:b9:a3:2a:1a:d0:c7:23: 11:e0:fc:cc:af:60:ed:51:8a:b5:25:c7:b9:ad:b0:6a:fa:8c: 6c:fc:14:a6:ef:bd:00:41:a3:f1:97:ff:28:97:e5:b4:0c:14: 40:db:34:4b:34:8a:69:68:4b:60:08:a0:56:9c:50:73:b6:db: 1f:9c:ab:6c:4b:d8:b1:65:46:9d:0e:2f:2b:a1:f3:3d:4a:ca: a9:b9:e2:5b:00:65:5d:bf:e0:ad:48:53:7f:90:97:06:67:85: 65:07:5b:c8:56:db:3d:1f:8c:60:c4:5c:79:89:be:ea:38:4b: fc:d4:c5:a3:e9:0f:e2:ea:ff:9e:6e:9d:bf:13:62:b0:ab:3a: e0:22:0c:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0kaVbPZVA1r1wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjhhZWVlNzItYmM5Yy00YTAxLWE5ZjUtMzhhODBhYzg0 ZDUyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDRiMzY5MjktMTBhYi00ODA2LTkzMGEtOGI3NDRkYjI5YzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZvFNRQmQ7SuV1qHan/tmTkoajCaDSzkpU5/ L/jAJkOshsaNUL3vTCSkJuwZaZn8I9ZDR1I+1hsHbJHatBQJaJibM7KPudYsbnyy lalEdWOTII3IAcJGI7H7SLnbO54rTrnwtPn4nRAUIiKieARGhAJQ+34+75n+0Gy7 eRc5bTqHOhaaSXS6IOvwSpUnqZv/6gStcWQhrKUqcGDdktoJSqePkF4d+9mQAe8k 9OLgDEjkB+YH7hJDhqMqTGiti3Q3gM1FaGIzohGES6N7TTp6929Z6HT+2gIln64j bFkmNPMOBNlvF/TiYT4bZICPxZdFA0F6QBnUOWE5D1tipbkp2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPj60w4zEyKVmuHQiVWIulG95jTqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFl ZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4MGFjODRkNTIvMjNmOWE0N2UtNGE1NC0z NTk0LWIyYWQtNDM0NDBjNDJlODZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjhhZWVlNzItYmM5Yy00YTAxLWE5 ZjUtMzhhODBhYzg0ZDUyLzI4YWVlZTcyLWJjOWMtNGEwMS1hOWY1LTM4YTgwYWM4 NGQ1Mi5jcmwwHwYDVR0jBBgwFoAUBlg76lfW1Hc6X/ENdO9tmux2QfUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yOGFlZWU3Mi1iYzljLTRhMDEtYTlmNS0zOGE4 MGFjODRkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzsk8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGW4EUl7CDOQz5JLQg2d7khbMGh9naIvxszZYzwLR43n+xlgm2VO8Ks OFTer9HQEly3ZgbkDyNL+qdyjpIwDVaFLJQ2T9PiI+QP/bqPpTidtTKNbrYMbQAK jHFxoFgUiv4XgL0TT2Myfx7LP/3A7OCmeWFzlwLruaMqGtDHIxHg/MyvYO1RirUl x7mtsGr6jGz8FKbvvQBBo/GX/yiX5bQMFEDbNEs0imloS2AIoFacUHO22x+cq2xL 2LFlRp0OLyuh8z1Kyqm54lsAZV2/4K1IU3+QlwZnhWUHW8hW2z0fjGDEXHmJvuo4 S/zUxaPpD+Lq/55unb8TYrCrOuAiDMw= -----END CERTIFICATE-----Generated at Tue Nov 4 19:58:32 2025 by rpki-client