$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa File: 28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa (raw, json) Hash identifier: N+J7V6Ac6Qg7oRs/azGUt2NZBUu5nspp7tnFPqefYTY= Subject key identifier: B0:A2:AD:28:F6:F7:9A:8E:84:CD:9E:C7:57:60:79:6E:30:D7:4E:3A Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584BB2F7C0989E002EB1F6DF9740 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 7018 IP address blocks: 23.227.64.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 08 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:c0:98:9e:00:2e:b1:f6:df:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=3ebb1e2c-8713-49d9-9783-9335178d15db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:89:e5:3e:f5:a8:a3:67:48:be:a2:d6:54:a4: 12:40:0a:f9:84:37:36:7f:b4:9b:9e:ff:68:17:fd: 02:84:fe:ad:18:d3:48:64:14:9a:b8:1f:ac:92:da: de:0f:66:a2:7e:3c:f0:39:4e:ed:2e:68:1f:1b:70: 27:22:bd:9e:3f:49:39:65:e0:25:8c:60:31:b8:6d: c6:39:49:d5:93:f6:17:d2:16:0a:d7:64:c6:9a:28: ec:ec:50:e2:1d:02:1f:b7:51:82:4d:6d:21:47:ef: 3c:ed:d2:3d:19:18:fc:bd:ee:7c:a8:6a:33:8b:b5: 6d:db:92:70:cb:2d:5c:c5:bf:99:31:68:81:1c:f3: 74:5e:50:b0:82:ad:63:00:52:a9:e2:fc:69:1b:07: 79:6c:f7:43:eb:f7:53:4a:8f:e4:8d:bb:b6:2c:ec: fd:52:80:2f:6b:7c:f2:33:f8:09:e9:74:36:35:53: a6:14:5d:4b:ab:24:bd:53:4e:a8:a6:24:c6:22:83: f6:64:15:95:87:e8:9d:93:01:6e:8e:f4:c3:30:42: e3:9c:ad:ca:bd:8a:c1:a7:c3:29:21:00:5e:7b:de: fb:40:d1:15:15:58:37:0e:b3:33:97:be:a7:96:19: 49:08:f0:e0:95:69:b3:60:d3:c4:1a:67:3b:2f:54: 2b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:A2:AD:28:F6:F7:9A:8E:84:CD:9E:C7:57:60:79:6E:30:D7:4E:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/28d5ba8f-0f4b-3f95-a9a5-ed8a41d3d0e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.227.64.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:27:64:8e:df:e6:28:8f:4c:24:71:b6:b3:9e:f3:a5:70:f4: 95:83:bb:83:42:20:62:e1:de:31:b1:03:2c:25:d5:07:96:5c: c6:3b:81:c4:95:f3:8c:25:eb:6e:a8:ea:70:a7:3b:41:dc:1f: af:83:88:a9:83:e1:bd:52:47:04:5c:ea:0b:9c:b0:dc:d4:8f: 5e:47:98:3b:b8:f3:cf:f4:64:ba:af:fe:4d:82:9b:c6:3e:cf: 68:31:24:19:28:44:31:5f:e8:d7:79:b3:67:dc:6b:90:13:a0: d0:47:68:97:fc:79:8d:d4:78:b8:7d:bb:a4:76:96:9b:60:1e: 0d:91:51:fd:24:3a:0a:07:48:f8:12:8d:59:94:e2:14:66:4d: 3c:a6:1c:fd:5f:6d:41:e5:ca:54:b1:23:2a:22:c8:a9:84:67: 1d:80:2b:2d:54:64:c8:08:ea:99:0a:86:71:7e:26:50:d6:58: b2:02:34:78:c6:7a:c6:29:aa:21:42:ed:61:ca:31:cd:e3:96: cc:2f:e0:72:d7:b5:15:93:74:40:18:c4:31:84:3f:52:de:84: 70:e1:e2:c5:6d:cf:ba:4a:fa:50:c0:05:96:8c:5e:c7:4f:57: 5c:61:46:38:d9:ef:e3:37:e6:cd:69:2c:46:d3:81:3c:9f:71: 28:bf:ce:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy98CYngAusfbfl0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk M2ViYjFlMmMtODcxMy00OWQ5LTk3ODMtOTMzNTE3OGQxNWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4nlPvWoo2dIvqLWVKQSQAr5hDc2f7Sbnv9o F/0ChP6tGNNIZBSauB+sktreD2aifjzwOU7tLmgfG3AnIr2eP0k5ZeAljGAxuG3G OUnVk/YX0hYK12TGmijs7FDiHQIft1GCTW0hR+887dI9GRj8ve58qGozi7Vt25Jw yy1cxb+ZMWiBHPN0XlCwgq1jAFKp4vxpGwd5bPdD6/dTSo/kjbu2LOz9UoAva3zy M/gJ6XQ2NVOmFF1LqyS9U06opiTGIoP2ZBWVh+idkwFujvTDMELjnK3KvYrBp8Mp IQBee977QNEVFVg3DrMzl76nlhlJCPDglWmzYNPEGmc7L1QrvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLCirSj295qOhM2ex1dgeW4w1046MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvMjhkNWJhOGYtMGY0Yi0z Zjk1LWE5YTUtZWQ4YTQxZDNkMGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADUnZI7f5iiPTCRxtrOe86Vw9JWDu4NCIGLh3jGxAywl1QeWXMY7gcSV 84wl626o6nCnO0HcH6+DiKmD4b1SRwRc6gucsNzUj15HmDu488/0ZLqv/k2Cm8Y+ z2gxJBkoRDFf6Nd5s2fca5AToNBHaJf8eY3UeLh9u6R2lptgHg2RUf0kOgoHSPgS jVmU4hRmTTymHP1fbUHlylSxIyoiyKmEZx2AKy1UZMgI6pkKhnF+JlDWWLICNHjG esYpqiFC7WHKMc3jlswv4HLXtRWTdEAYxDGEP1LehHDh4sVtz7pK+lDABZaMXsdP V1xhRjjZ7+M35s1pLEbTgTyfcSi/zso= -----END CERTIFICATE-----Generated at Wed Nov 5 22:52:51 2025 by rpki-client