$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa File: 6088769e-3429-32bd-88b7-3ac8d54f15a8.roa (raw, json) Hash identifier: xzoHQHafH8T4hjrTu6jR6Br41H4WNsvykEcP3zsfIwo= Subject key identifier: 4F:0D:F9:4B:25:C9:6F:A0:A1:06:64:97:37:4F:D6:E6:21:E4:2E:71 Certificate issuer: /CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Certificate serial: 010D0C9F4328584B7B21F50B1BEF09E5A922EE3A Authority key identifier: F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa Signing time: Sat 11 Oct 2025 01:00:30 +0000 ROA not before: Sat 11 Oct 2025 01:00:30 +0000 ROA not after: Fri 09 Jan 2026 02:00:30 +0000 asID: 33359 IP address blocks: 208.89.28.0/24 maxlen: 24 208.89.29.0/24 maxlen: 24 208.89.30.0/24 maxlen: 24 208.89.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7b:21:f5:0b:1b:ef:09:e5:a9:22:ee:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c58f92f8-4d8d-41da-af9d-d8fdec2e3025 Validity Not Before: Oct 11 01:00:30 2025 GMT Not After : Jan 9 02:00:30 2026 GMT Subject: CN=824b1ec7-5517-4a93-974f-c002e12d799d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4c:45:56:68:a7:4d:37:42:04:ab:e5:38:bd: a4:0e:b7:fd:c6:f1:29:a1:02:b9:d1:af:bb:78:ce: 84:6e:d0:45:80:74:0d:c7:49:40:1e:6b:b2:7c:59: 21:be:47:4d:a3:0b:50:74:1e:a5:4d:99:e6:f2:32: df:35:ad:53:23:b9:28:c4:ed:14:d7:d3:47:b4:1e: 08:18:75:34:18:05:74:7a:c3:80:f1:a7:36:1d:6c: 13:17:dc:6b:52:e3:c8:81:bb:03:81:0a:cd:ba:f4: 3b:03:66:b9:56:c1:35:d7:04:77:54:48:ec:04:b5: 85:2a:78:65:8d:09:8b:f3:9f:40:06:a4:cc:cb:cf: 4b:e8:b7:b7:bb:eb:1e:6b:40:1e:b2:b6:76:bd:f0: 09:84:5a:0c:0f:b8:2a:fc:85:75:e2:d4:b9:f1:63: c1:67:33:56:b4:9c:cb:fc:c6:4f:7b:72:ad:3a:7e: 7c:2c:a1:2e:ca:07:c6:ad:7d:36:5a:ce:a0:ce:06: f3:7d:6a:27:7e:cf:51:00:6c:fc:18:09:52:6e:93: 64:62:27:84:16:ba:8d:ba:60:c3:99:95:49:6c:d6: 81:e5:97:63:d8:5d:df:50:66:45:b3:28:4a:33:12: 2b:1e:2d:d4:10:0f:8d:29:f5:6b:ab:3c:1a:7a:4a: 97:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0D:F9:4B:25:C9:6F:A0:A1:06:64:97:37:4F:D6:E6:21:E4:2E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/6088769e-3429-32bd-88b7-3ac8d54f15a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.crl X509v3 Authority Key Identifier: keyid:F5:28:F3:E5:4E:A6:20:65:57:C7:7A:3E:38:AA:D0:31:93:86:0B:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c58f92f8-4d8d-41da-af9d-d8fdec2e3025.cer sbgp-ipAddrBlock: critical IPv4: 208.89.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:93:6d:5d:56:85:a1:0b:af:51:0c:0b:03:67:1f:9a:b0:2e: 4b:23:84:d4:a4:cd:8c:72:9c:fa:ac:b0:b2:27:e5:4f:66:57: 94:e9:7c:a9:fc:b4:f4:58:19:e4:00:a8:4f:d0:42:3d:4f:c0: 0a:13:47:ca:9d:e2:c5:4c:59:42:87:af:f3:49:f6:a6:70:dd: 53:ea:5f:7a:69:ab:76:36:f7:7f:6b:f9:7e:97:f4:6a:85:4a: ef:3a:db:3e:eb:3f:0f:6b:79:dc:4e:58:8f:42:ae:39:e2:f1: ca:d0:72:75:4a:19:e6:09:88:c6:57:27:de:c9:64:ff:a3:44: 22:39:e3:b5:fe:b4:1f:d5:9d:c6:c3:9e:2b:ab:36:de:01:18: c6:dc:ca:c9:fc:91:91:eb:c4:4e:ac:67:d5:1d:95:87:02:2a: 39:c2:f4:44:91:93:2d:61:59:16:e5:f2:b6:65:ce:91:f4:e1: b3:9a:f2:f0:86:b6:a7:b4:cc:d1:72:f2:e4:aa:23:23:7b:6e: 8c:3b:82:08:ce:75:59:d0:b4:9d:cf:71:07:54:64:94:36:7c: a6:2a:90:c1:c5:84:1a:74:74:98:cf:cd:cc:21:24:6b:48:42: 2a:6a:50:36:65:cd:73:c4:d2:a2:c5:47:03:3a:73:8d:79:e7: 46:c6:1e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt7IfULG+8J5aki7jowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzU4ZjkyZjgtNGQ4ZC00MWRhLWFmOWQtZDhmZGVjMmUz MDI1MB4XDTI1MTAxMTAxMDAzMFoXDTI2MDEwOTAyMDAzMFowLzEtMCsGA1UEAxMk ODI0YjFlYzctNTUxNy00YTkzLTk3NGYtYzAwMmUxMmQ3OTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUxFVminTTdCBKvlOL2kDrf9xvEpoQK50a+7 eM6EbtBFgHQNx0lAHmuyfFkhvkdNowtQdB6lTZnm8jLfNa1TI7koxO0U19NHtB4I GHU0GAV0esOA8ac2HWwTF9xrUuPIgbsDgQrNuvQ7A2a5VsE11wR3VEjsBLWFKnhl jQmL859ABqTMy89L6Le3u+sea0AesrZ2vfAJhFoMD7gq/IV14tS58WPBZzNWtJzL /MZPe3KtOn58LKEuygfGrX02Ws6gzgbzfWonfs9RAGz8GAlSbpNkYieEFrqNumDD mZVJbNaB5Zdj2F3fUGZFsyhKMxIrHi3UEA+NKfVrqzwaekqXdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8N+UslyW+goQZklzdP1uYh5C5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThm OTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZkZWMyZTMwMjUvNjA4ODc2OWUtMzQyOS0z MmJkLTg4YjctM2FjOGQ1NGYxNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzU4ZjkyZjgtNGQ4ZC00MWRhLWFm OWQtZDhmZGVjMmUzMDI1L2M1OGY5MmY4LTRkOGQtNDFkYS1hZjlkLWQ4ZmRlYzJl MzAyNS5jcmwwHwYDVR0jBBgwFoAU9Sjz5U6mIGVXx3o+OKrQMZOGC5UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9jNThmOTJmOC00ZDhkLTQxZGEtYWY5ZC1kOGZk ZWMyZTMwMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKTbV1WhaELr1EMCwNnH5qwLksjhNSkzYxynPqssLIn5U9mV5TpfKn8 tPRYGeQAqE/QQj1PwAoTR8qd4sVMWUKHr/NJ9qZw3VPqX3ppq3Y2939r+X6X9GqF Su862z7rPw9redxOWI9Crjni8crQcnVKGeYJiMZXJ97JZP+jRCI547X+tB/VncbD niurNt4BGMbcysn8kZHrxE6sZ9UdlYcCKjnC9ESRky1hWRbl8rZlzpH04bOa8vCG tqe0zNFy8uSqIyN7bow7ggjOdVnQtJ3PcQdUZJQ2fKYqkMHFhBp0dJjPzcwhJGtI QipqUDZlzXPE0qLFRwM6c41550bGHtY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:09:52 2025 by rpki-client