$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa File: d8995625-d95c-32f8-bd79-899a5fc78f47.roa (raw, json) Hash identifier: JjRYQdAECh9fRKJsBevBNmj0Rz6NBdHomQ6fk94K+yo= Subject key identifier: 98:BB:89:3F:46:09:B0:3F:F0:29:EB:B4:81:34:C1:C6:BF:49:F5:65 Certificate issuer: /CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Certificate serial: 010D0C9F4328584B758C91465FADCBEBBE519440 Authority key identifier: 81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 21519 IP address blocks: 208.73.28.0/22 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:91:46:5f:ad:cb:eb:be:51:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce1ca5a2-6844-45f3-b01a-cfc88537d6a3 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=f2b95a6b-0b96-4845-8856-b50bd88cf719 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1c:c6:8b:df:9d:55:d1:68:6e:50:d9:29:31: 7b:27:48:d7:a7:9d:ad:4b:13:81:2d:04:21:4f:f4: 45:da:2a:d2:dc:f2:70:0e:dd:47:64:10:4e:43:49: 53:2d:3b:20:1f:cd:ee:4c:77:d3:95:54:72:e1:bb: 57:29:46:c1:8c:11:de:d5:67:e5:52:ee:16:ac:ef: 84:b9:18:15:ab:a9:dd:f9:f2:c9:fb:10:90:31:c0: 6c:8c:71:48:a0:b4:64:c4:3d:b9:0b:5d:22:7d:94: 3f:00:3c:40:50:90:72:96:9b:a7:b1:96:94:e6:c6: d5:9a:84:96:2f:45:c1:43:7d:ad:51:07:9c:d0:f6: 70:3f:d0:45:4c:9d:4d:b2:aa:03:d9:7e:23:2a:2e: 41:e7:a1:cf:e3:d7:c2:d0:80:c7:d0:48:83:1e:fe: 98:c7:94:a0:fd:84:1c:61:66:2a:b9:d4:fc:ef:21: 4d:51:af:88:75:50:7d:09:c1:04:3c:a4:78:21:77: 6b:80:7c:3a:45:01:d3:91:99:f7:26:94:43:c2:f1: ed:37:70:9c:fe:a8:c5:c1:0d:dd:12:8e:a6:c3:7f: 09:1a:d6:b8:82:f3:77:db:96:2b:4f:a1:be:01:ff: 13:a8:53:92:6d:a3:1a:39:74:9f:81:80:67:fd:28: 30:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:BB:89:3F:46:09:B0:3F:F0:29:EB:B4:81:34:C1:C6:BF:49:F5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/d8995625-d95c-32f8-bd79-899a5fc78f47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.crl X509v3 Authority Key Identifier: keyid:81:67:C7:EA:BC:99:EF:72:0D:14:8B:4A:C3:CE:5A:1E:1E:4C:35:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ce1ca5a2-6844-45f3-b01a-cfc88537d6a3.cer sbgp-ipAddrBlock: critical IPv4: 208.73.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:af:83:fe:41:1f:41:54:00:1d:96:95:43:6a:6c:99:38:32: 47:c9:71:9e:8d:88:5b:f9:62:0c:de:6f:03:b7:08:c5:87:2e: 1e:1d:37:ae:ac:96:12:2d:7b:87:c2:2f:15:fc:bc:10:de:f1: 00:78:db:ac:1d:a7:2a:ac:9f:19:62:35:69:ed:91:47:96:1a: 45:38:c7:a1:36:49:40:a1:13:a3:a5:f6:2e:ea:ee:db:90:5e: 4a:d6:22:e5:60:8c:19:2f:ba:c1:e2:f7:2b:05:d3:ce:79:c6: ce:83:d2:f5:fd:8e:a4:96:f4:54:60:5e:a8:91:57:ac:df:83: 3e:85:cd:d2:46:0c:eb:b0:db:42:4f:59:43:91:b2:92:0f:ee: 1d:98:b1:ad:43:75:00:8a:b6:fd:da:db:f6:dc:8e:ef:c9:93: d6:b8:f9:c5:90:e2:31:fa:61:c5:ee:41:8a:55:26:38:9f:a1: 0b:f2:8b:51:77:45:d7:8d:d2:1c:c8:ce:57:24:08:a6:e1:58: 5d:70:41:1a:6d:71:4b:9e:d1:06:26:02:6e:21:c3:70:21:60: 59:7f:f1:1a:3e:27:a2:e4:07:81:f4:11:8d:4f:69:57:8f:3d: 2e:5a:e7:5b:00:5e:20:dc:ac:ec:0b:e6:e0:7a:2a:91:57:b2: 41:79:a9:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jJFGX63L675RlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UxY2E1YTItNjg0NC00NWYzLWIwMWEtY2ZjODg1Mzdk NmEzMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZjJiOTVhNmItMGI5Ni00ODQ1LTg4NTYtYjUwYmQ4OGNmNzE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BzGi9+dVdFoblDZKTF7J0jXp52tSxOBLQQh T/RF2irS3PJwDt1HZBBOQ0lTLTsgH83uTHfTlVRy4btXKUbBjBHe1WflUu4WrO+E uRgVq6nd+fLJ+xCQMcBsjHFIoLRkxD25C10ifZQ/ADxAUJBylpunsZaU5sbVmoSW L0XBQ32tUQec0PZwP9BFTJ1NsqoD2X4jKi5B56HP49fC0IDH0EiDHv6Yx5Sg/YQc YWYqudT87yFNUa+IdVB9CcEEPKR4IXdrgHw6RQHTkZn3JpRDwvHtN3Cc/qjFwQ3d Eo6mw38JGta4gvN325YrT6G+Af8TqFOSbaMaOXSfgYBn/SgwwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJi7iT9GCbA/8CnrtIE0wca/SfVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFj YTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4ODUzN2Q2YTMvZDg5OTU2MjUtZDk1Yy0z MmY4LWJkNzktODk5YTVmYzc4ZjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2UxY2E1YTItNjg0NC00NWYzLWIw MWEtY2ZjODg1MzdkNmEzL2NlMWNhNWEyLTY4NDQtNDVmMy1iMDFhLWNmYzg4NTM3 ZDZhMy5jcmwwHwYDVR0jBBgwFoAUgWfH6ryZ73INFItKw85aHh5MNZEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZTFjYTVhMi02ODQ0LTQ1ZjMtYjAxYS1jZmM4 ODUzN2Q2YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EkcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKivg/5BH0FUAB2WlUNqbJk4MkfJcZ6NiFv5YgzebwO3CMWHLh4dN66s lhIte4fCLxX8vBDe8QB426wdpyqsnxliNWntkUeWGkU4x6E2SUChE6Ol9i7q7tuQ XkrWIuVgjBkvusHi9ysF0855xs6D0vX9jqSW9FRgXqiRV6zfgz6FzdJGDOuw20JP WUORspIP7h2Ysa1DdQCKtv3a2/bcju/Jk9a4+cWQ4jH6YcXuQYpVJjifoQvyi1F3 RdeN0hzIzlckCKbhWF1wQRptcUue0QYmAm4hw3AhYFl/8Ro+J6LkB4H0EY1PaVeP PS5a51sAXiDcrOwL5uB6KpFXskF5qW8= -----END CERTIFICATE-----Generated at Mon Nov 3 04:35:59 2025 by rpki-client