$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa File: b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa (raw, json) Hash identifier: iIhUSjfnByOuBB1xWSx48Z+zeZRybnpkKFXrGtg++VA= Subject key identifier: 34:2B:8B:D8:3B:5C:12:0C:A1:A9:50:6E:39:1D:53:2C:19:43:44:AE Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584BA9329272E1E45E4A3D51FA80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa Signing time: Mon 27 Oct 2025 13:00:38 +0000 ROA not before: Mon 27 Oct 2025 13:00:38 +0000 ROA not after: Sun 25 Jan 2026 14:00:38 +0000 asID: 16625 IP address blocks: 184.28.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 05 Nov 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a9:32:92:72:e1:e4:5e:4a:3d:51:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Oct 27 13:00:38 2025 GMT Not After : Jan 25 14:00:38 2026 GMT Subject: CN=0125f11c-9adb-4b57-9360-81a20d488498 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e3:1c:1d:72:1b:14:ef:71:01:89:1d:41:4e: bd:73:f2:e3:49:74:83:d5:7f:f2:9c:89:84:89:fb: d0:6d:4f:5d:69:91:79:e4:eb:d7:d6:56:f8:00:48: 2b:42:b6:85:d1:05:60:4b:d3:25:d9:4e:f6:2c:52: 54:ca:ba:a3:2d:e2:e1:9b:90:5e:c9:cb:77:43:00: 32:e8:01:00:f9:39:be:d5:0b:89:3b:9b:28:e9:49: 1d:e0:cf:93:1c:ed:8d:3b:25:26:22:11:25:4e:a8: 01:4a:3b:3c:37:22:bc:2e:b7:25:be:4b:27:fa:54: 96:0c:86:a2:47:25:24:15:14:de:e6:26:1f:de:f2: 99:a4:e8:bb:1d:4a:1a:ee:2b:d8:0c:1c:81:df:16: cd:d4:f0:0c:74:4d:45:a6:e2:38:f3:77:c9:d4:35: 8a:a9:b8:f1:b9:5a:b3:2d:6a:23:f9:33:a3:b6:9e: f5:ba:fd:c2:60:8d:62:7d:74:2f:c3:cb:dc:c2:b0: 02:aa:c6:5b:a5:64:3b:87:93:05:38:1d:38:17:8a: 02:fd:cf:49:3b:ba:e8:47:f8:dd:90:66:1a:eb:62: 10:8f:15:e0:e9:08:89:e1:43:a2:79:e4:b6:b9:28: e3:d5:09:f7:67:d3:85:a3:51:c2:8a:6d:7a:9c:0d: b2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:2B:8B:D8:3B:5C:12:0C:A1:A9:50:6E:39:1D:53:2C:19:43:44:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b776fa48-74aa-3439-8520-69c7b8a8d1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 184.28.244.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:af:0a:0c:a8:e1:3b:d3:48:61:c2:fa:36:85:d2:5a:1f:9d: f8:a3:0a:e9:10:36:cd:19:38:03:fa:c3:5e:7e:f1:42:e2:48: fc:34:0d:74:f0:4e:f7:46:de:be:45:db:1d:af:b3:97:4b:bb: a7:51:42:4a:44:59:ba:f4:9f:1e:b1:07:e5:85:a7:bc:5d:82: 29:58:c5:ca:4f:7b:03:85:99:ce:f8:10:e8:9b:e5:27:e0:c0: 26:d6:81:6b:52:d5:da:a4:a0:9e:a4:99:d5:01:d9:97:25:5c: 55:ee:b4:44:2b:23:83:b2:d4:5d:a5:cb:17:a1:0d:cc:09:8b: 0b:50:41:6a:a7:6e:dd:15:6b:39:1c:96:df:0d:ab:38:39:ec: 22:3c:7b:3d:de:2d:9d:a6:35:77:7d:d3:b9:bc:1c:ab:c7:bb: b4:9a:82:8f:b0:76:24:14:f5:3b:bf:ad:7f:28:fe:b8:01:dd: 49:d7:a5:cd:47:97:97:a9:12:4d:35:ca:28:4a:b4:1b:bb:82: 6d:01:01:fc:05:38:1d:b9:71:8b:55:d6:ec:39:dd:c7:b6:6e: 1d:ea:e6:fd:23:c8:dd:30:b3:86:6d:f7:ce:99:68:c4:33:69: 90:6e:30:77:94:44:6a:12:d5:6b:55:9e:f3:fa:e6:a6:53:92: f9:40:3d:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEupMpJy4eReSj1R+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MTAyNzEzMDAzOFoXDTI2MDEyNTE0MDAzOFowLzEtMCsGA1UEAxMk MDEyNWYxMWMtOWFkYi00YjU3LTkzNjAtODFhMjBkNDg4NDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuMcHXIbFO9xAYkdQU69c/LjSXSD1X/ynImE ifvQbU9daZF55OvX1lb4AEgrQraF0QVgS9Ml2U72LFJUyrqjLeLhm5Beyct3QwAy 6AEA+Tm+1QuJO5so6Ukd4M+THO2NOyUmIhElTqgBSjs8NyK8Lrclvksn+lSWDIai RyUkFRTe5iYf3vKZpOi7HUoa7ivYDByB3xbN1PAMdE1FpuI483fJ1DWKqbjxuVqz LWoj+TOjtp71uv3CYI1ifXQvw8vcwrACqsZbpWQ7h5MFOB04F4oC/c9JO7roR/jd kGYa62IQjxXg6QiJ4UOieeS2uSjj1Qn3Z9OFo1HCim16nA2ypQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQri9g7XBIMoalQbjkdUywZQ0SuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjc3NmZhNDgtNzRhYS0z NDM5LTg1MjAtNjljN2I4YThkMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuBz0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACavCgyo4TvTSGHC+jaF0lofnfijCukQNs0ZOAP6w15+8ULiSPw0DXTw TvdG3r5F2x2vs5dLu6dRQkpEWbr0nx6xB+WFp7xdgilYxcpPewOFmc74EOib5Sfg wCbWgWtS1dqkoJ6kmdUB2ZclXFXutEQrI4Oy1F2lyxehDcwJiwtQQWqnbt0Vazkc lt8Nqzg57CI8ez3eLZ2mNXd907m8HKvHu7Sago+wdiQU9Tu/rX8o/rgB3UnXpc1H l5epEk01yihKtBu7gm0BAfwFOB25cYtV1uw53ce2bh3q5v0jyN0ws4Zt986ZaMQz aZBuMHeURGoS1WtVnvP65qZTkvlAPYk= -----END CERTIFICATE-----Generated at Tue Nov 4 22:20:03 2025 by rpki-client