$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa File: d8561cc0-42de-398c-82a6-2cae487ec735.roa (raw, json) Hash identifier: 76hAkF1o/RqQbloweTqKAlvpSRgNNwuhlXQvzJF2D9c= Subject key identifier: 07:02:6B:56:30:CD:BD:86:D7:FC:58:DC:29:B5:3A:33:86:2B:54:99 Certificate issuer: /CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Certificate serial: 010D0C9F4328584B92DCDEEB08565F51677EBF00 Authority key identifier: BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa Signing time: Sun 19 Oct 2025 13:00:39 +0000 ROA not before: Sun 19 Oct 2025 13:00:39 +0000 ROA not after: Sat 17 Jan 2026 14:00:39 +0000 asID: 18863 IP address blocks: 64.28.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:92:dc:de:eb:08:56:5f:51:67:7e:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b683a16-e9c4-489a-a5e9-3bb1b401f190 Validity Not Before: Oct 19 13:00:39 2025 GMT Not After : Jan 17 14:00:39 2026 GMT Subject: CN=e5ecf46b-a474-4b56-ab01-26c85a2464b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:4b:a6:b8:cd:b2:e6:f8:ac:3c:17:2e:e9: 11:41:f0:2b:9a:11:70:8c:92:5b:8f:f2:c4:88:b3: bb:b5:e2:c7:e8:b9:53:3a:e8:a6:6d:66:6a:b8:09: 0d:0a:75:c2:0c:f5:29:53:a9:4d:b2:67:3a:96:40: 06:2d:6a:63:db:4f:8c:db:3f:d4:c6:e0:b5:9d:38: 58:9b:ab:80:13:0f:7e:7c:55:b2:8b:b7:08:86:49: 24:d8:a3:b1:c2:00:60:a8:33:ff:26:68:a2:70:1b: 65:ee:7c:5c:ed:4a:5d:08:42:b7:7c:01:a9:13:4c: 96:3b:2e:de:bf:71:08:85:b1:5c:b2:51:dc:d5:b2: 6d:ee:e5:73:68:2c:8a:30:15:f7:7a:ef:5c:cc:b2: 55:81:35:c6:08:64:c5:01:5a:d0:5e:70:0d:03:4a: f5:a3:52:86:75:d0:19:3b:b6:bf:23:f7:72:a7:68: 46:84:5a:6d:d6:e1:98:01:d6:aa:f5:01:de:68:0c: a3:04:26:6d:58:42:35:bd:0d:70:21:32:a6:a9:7a: 47:cc:9b:29:16:d1:01:44:2b:9c:33:9a:7a:13:f3: 05:ff:43:1c:49:96:2c:26:97:8c:09:40:e4:a5:ed: 9f:a3:c7:b5:e5:2f:05:00:37:b2:58:11:8d:59:cf: a8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:02:6B:56:30:CD:BD:86:D7:FC:58:DC:29:B5:3A:33:86:2B:54:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/d8561cc0-42de-398c-82a6-2cae487ec735.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190/1b683a16-e9c4-489a-a5e9-3bb1b401f190.crl X509v3 Authority Key Identifier: keyid:BA:9B:1D:28:3D:C9:F8:2F:10:17:0C:0E:A5:14:79:05:16:35:4D:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b683a16-e9c4-489a-a5e9-3bb1b401f190.cer sbgp-ipAddrBlock: critical IPv4: 64.28.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:09:bd:1a:9d:a5:3c:62:2f:2e:3a:ab:e6:41:0a:a0:58:f3: b6:b0:e5:cb:dc:f2:11:41:67:52:a6:6c:80:3e:24:02:51:49: 3b:28:2c:67:ee:b0:99:15:a6:0c:ca:8c:9b:07:46:95:cb:be: 0a:1f:cb:47:1f:3d:99:a9:92:2c:88:3f:7b:7e:8a:95:54:49: 0b:e5:7c:6d:61:f9:1f:04:84:4c:36:2b:a0:60:ad:20:87:c8: a6:27:8f:c8:5d:61:ac:1a:a3:24:2d:06:3c:3c:67:ea:fd:56: 0e:0c:e1:94:cc:47:e7:77:91:b0:7f:b1:bb:59:8d:51:b9:e0: 1c:1e:19:01:7c:e6:dd:52:fd:69:da:13:17:0a:b7:7b:af:32: ae:ed:05:eb:fa:c4:d6:52:b4:8e:fc:89:e5:35:a9:9c:7f:48: 76:60:a3:ee:95:27:ab:fe:e7:bc:9a:0f:62:1b:8f:f6:24:c2: a7:12:e8:5a:21:59:a2:79:14:f0:69:29:bb:0f:7d:d1:0a:4a: af:c4:47:8c:c7:9d:eb:05:0a:2a:f9:ef:1f:0b:cf:5c:38:3b: d6:36:82:fb:3e:c3:05:01:d0:d7:ba:cd:8b:67:75:c9:67:38: 7d:2e:f1:75:1a:59:8d:a4:2a:c0:90:4e:12:f4:41:06:12:c3: 54:70:f6:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuS3N7rCFZfUWd+vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2ODNhMTYtZTljNC00ODlhLWE1ZTktM2JiMWI0MDFm MTkwMB4XDTI1MTAxOTEzMDAzOVoXDTI2MDExNzE0MDAzOVowLzEtMCsGA1UEAxMk ZTVlY2Y0NmItYTQ3NC00YjU2LWFiMDEtMjZjODVhMjQ2NGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgElLprjNsub4rDwXLukRQfArmhFwjJJbj/LE iLO7teLH6LlTOuimbWZquAkNCnXCDPUpU6lNsmc6lkAGLWpj20+M2z/UxuC1nThY m6uAEw9+fFWyi7cIhkkk2KOxwgBgqDP/JmiicBtl7nxc7UpdCEK3fAGpE0yWOy7e v3EIhbFcslHc1bJt7uVzaCyKMBX3eu9czLJVgTXGCGTFAVrQXnANA0r1o1KGddAZ O7a/I/dyp2hGhFpt1uGYAdaq9QHeaAyjBCZtWEI1vQ1wITKmqXpHzJspFtEBRCuc M5p6E/MF/0McSZYsJpeMCUDkpe2fo8e15S8FADeyWBGNWc+o6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAcCa1Ywzb2G1/xY3Cm1OjOGK1SZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4 M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIxYjQwMWYxOTAvZDg1NjFjYzAtNDJkZS0z OThjLTgyYTYtMmNhZTQ4N2VjNzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWI2ODNhMTYtZTljNC00ODlhLWE1 ZTktM2JiMWI0MDFmMTkwLzFiNjgzYTE2LWU5YzQtNDg5YS1hNWU5LTNiYjFiNDAx ZjE5MC5jcmwwHwYDVR0jBBgwFoAUupsdKD3J+C8QFwwOpRR5BRY1TZMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xYjY4M2ExNi1lOWM0LTQ4OWEtYTVlOS0zYmIx YjQwMWYxOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQBzuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIJvRqdpTxiLy46q+ZBCqBY87aw5cvc8hFBZ1KmbIA+JAJRSTsoLGfu sJkVpgzKjJsHRpXLvgofy0cfPZmpkiyIP3t+ipVUSQvlfG1h+R8EhEw2K6BgrSCH yKYnj8hdYawaoyQtBjw8Z+r9Vg4M4ZTMR+d3kbB/sbtZjVG54BweGQF85t1S/Wna ExcKt3uvMq7tBev6xNZStI78ieU1qZx/SHZgo+6VJ6v+57yaD2Ibj/YkwqcS6Foh WaJ5FPBpKbsPfdEKSq/ER4zHnesFCir57x8Lz1w4O9Y2gvs+wwUB0Ne6zYtndcln OH0u8XUaWY2kKsCQThL0QQYSw1Rw9jM= -----END CERTIFICATE-----Generated at Wed Nov 5 23:03:40 2025 by rpki-client