$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa File: 4df80e12-1fe6-3764-926c-c35dada42f64.roa (raw, json) Hash identifier: HRA7pVkrs7yRE58ElPi5kchwEgqBKVZ2kkwfbK4EdzY= Subject key identifier: 21:38:5A:53:2A:A3:44:DF:C9:6B:D7:75:18:A1:14:4E:BA:C7:77:FE Certificate issuer: /CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Certificate serial: 010D0C9F4328584BB02D0360E452538085C4C980 Authority key identifier: 44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa Signing time: Thu 30 Oct 2025 01:00:30 +0000 ROA not before: Thu 30 Oct 2025 01:00:30 +0000 ROA not after: Wed 28 Jan 2026 02:00:30 +0000 asID: 401441 IP address blocks: 142.249.28.0/23 maxlen: 24 2602:f7b2::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b0:2d:03:60:e4:52:53:80:85:c4:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a060fa3-e2f1-4857-acf3-9a98a98df6f2 Validity Not Before: Oct 30 01:00:30 2025 GMT Not After : Jan 28 02:00:30 2026 GMT Subject: CN=bdec6169-fa1e-4c39-9da1-0b76d1843921 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:de:12:5e:ef:1f:6e:d4:1a:54:87:5b:1d: 3b:ce:1c:10:ed:90:e0:a0:29:d8:e9:ff:af:98:4b: 52:5d:2e:47:f7:cf:e2:82:3f:e0:ed:a4:d8:02:3d: ab:c2:ac:47:e2:19:68:f1:2b:c2:7b:9e:ed:66:df: 98:18:ce:bf:19:5c:7e:d7:11:aa:72:3d:05:14:15: 08:8a:c0:ac:85:e2:72:46:d0:5b:b1:a3:56:d7:75: 09:a2:ce:8f:e8:4c:91:bb:ad:69:47:b4:dc:8b:c7: bd:48:1a:a9:1d:a5:a5:f4:53:06:9c:7f:18:d3:e3: 7d:69:14:5e:36:57:fe:ea:f2:06:f0:dc:6e:ac:3b: 8b:d8:0b:88:a9:b7:33:2f:4b:ac:05:f5:09:88:74: f4:b0:ec:25:1b:36:47:1f:35:ca:fe:a9:09:ed:02: d2:46:55:fd:19:6f:b9:85:da:29:ca:ef:7c:2f:54: 6e:2e:a6:90:e8:19:40:60:a8:82:23:36:15:08:fb: e4:0f:02:6d:91:ac:80:3a:8e:b7:b2:31:b8:ba:38: 7a:1d:fe:3a:41:9d:8a:95:c4:d9:f2:19:98:60:bd: 6b:47:a6:03:b7:66:7a:87:37:a3:0c:b1:f1:31:88: de:6a:33:59:31:e1:db:87:63:77:fd:55:0c:25:95: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:38:5A:53:2A:A3:44:DF:C9:6B:D7:75:18:A1:14:4E:BA:C7:77:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/4df80e12-1fe6-3764-926c-c35dada42f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.crl X509v3 Authority Key Identifier: keyid:44:BB:0E:33:D2:52:28:75:DC:6C:97:19:F5:FE:55:9F:C0:6E:B0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a060fa3-e2f1-4857-acf3-9a98a98df6f2.cer sbgp-ipAddrBlock: critical IPv4: 142.249.28.0/23 IPv6: 2602:f7b2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:0b:1c:4f:74:60:d1:3e:78:ef:7c:21:9e:fb:41:2f:ed:7b: 7b:0f:d6:22:68:af:50:df:8a:b0:fd:1c:6c:52:f7:5a:43:f7: 39:0e:08:18:9e:41:2b:b9:87:79:80:5f:28:e8:86:0c:f6:e8: 83:00:73:cf:1b:70:1b:bd:e7:0f:97:c4:e8:a0:92:fa:84:65: 1b:c5:77:ef:bc:aa:1b:ba:7f:4f:e5:32:ac:42:95:84:1c:f2: cc:e2:6a:13:39:00:19:92:c5:b5:b5:15:45:32:8c:63:d3:1c: d5:0f:95:4f:5c:ff:bd:45:30:d1:0b:ee:8c:fd:a1:c6:1a:4f: 64:c2:ef:0b:a8:55:d6:55:ca:80:70:ab:9a:cb:c6:4e:e3:f0: 6e:4b:c5:f2:b2:b3:2c:e5:bc:ef:d8:e5:82:aa:c1:ef:50:36: 0e:49:89:53:9f:49:3b:11:f7:4a:74:d8:e9:46:52:db:b3:6d: 0b:5c:8d:4c:6a:d5:ba:9e:a2:e8:55:a0:0e:01:48:16:ac:e1: c2:59:12:ff:6e:28:ab:38:92:4b:b7:a2:0a:74:9d:d0:76:51: 15:92:5c:ae:46:7f:3f:34:14:56:07:79:5c:ee:74:44:93:b1: c0:b2:9d:ad:46:9c:68:3b:a8:40:d4:8b:41:0a:fb:09:dd:0c: 47:ab:07:d7 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEuwLQNg5FJTgIXEyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWEwNjBmYTMtZTJmMS00ODU3LWFjZjMtOWE5OGE5OGRm NmYyMB4XDTI1MTAzMDAxMDAzMFoXDTI2MDEyODAyMDAzMFowLzEtMCsGA1UEAxMk YmRlYzYxNjktZmExZS00YzM5LTlkYTEtMGI3NmQxODQzOTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurzeEl7vH27UGlSHWx07zhwQ7ZDgoCnY6f+v mEtSXS5H98/igj/g7aTYAj2rwqxH4hlo8SvCe57tZt+YGM6/GVx+1xGqcj0FFBUI isCsheJyRtBbsaNW13UJos6P6EyRu61pR7Tci8e9SBqpHaWl9FMGnH8Y0+N9aRRe Nlf+6vIG8NxurDuL2AuIqbczL0usBfUJiHT0sOwlGzZHHzXK/qkJ7QLSRlX9GW+5 hdopyu98L1RuLqaQ6BlAYKiCIzYVCPvkDwJtkayAOo63sjG4ujh6Hf46QZ2KlcTZ 8hmYYL1rR6YDt2Z6hzejDLHxMYjeajNZMeHbh2N3/VUMJZUxowIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCE4WlMqo0TfyWvXdRihFE66x3f+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTA2 MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4YTk4ZGY2ZjIvNGRmODBlMTItMWZlNi0z NzY0LTkyNmMtYzM1ZGFkYTQyZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWEwNjBmYTMtZTJmMS00ODU3LWFj ZjMtOWE5OGE5OGRmNmYyLzVhMDYwZmEzLWUyZjEtNDg1Ny1hY2YzLTlhOThhOThk ZjZmMi5jcmwwHwYDVR0jBBgwFoAURLsOM9JSKHXcbJcZ9f5Vn8BusH0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTA2MGZhMy1lMmYxLTQ4NTctYWNmMy05YTk4 YTk4ZGY2ZjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjvkcMA4E AgACMAgDBgQmAveyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCFCxxPdGDRPnjvfCGe+0Ev7Xt7D9YiaK9Q 34qw/RxsUvdaQ/c5DggYnkEruYd5gF8o6IYM9uiDAHPPG3AbvecPl8TooJL6hGUb xXfvvKobun9P5TKsQpWEHPLM4moTOQAZksW1tRVFMoxj0xzVD5VPXP+9RTDRC+6M /aHGGk9kwu8LqFXWVcqAcKuay8ZO4/BuS8XysrMs5bzv2OWCqsHvUDYOSYlTn0k7 EfdKdNjpRlLbs20LXI1MatW6nqLoVaAOAUgWrOHCWRL/biirOJJLt6IKdJ3QdlEV klyuRn8/NBRWB3lc7nREk7HAsp2tRpxoO6hA1ItBCvsJ3QxHqwfX -----END CERTIFICATE-----Generated at Wed Nov 5 11:21:57 2025 by rpki-client