$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa File: 28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa (raw, json) Hash identifier: hrVkPYnihGy4Z7NafIYpj2OMIVbkpWWo9iG32w69Hyw= Subject key identifier: 34:5A:10:FD:78:A5:59:35:D3:66:CF:EC:BA:95:79:19:CB:D5:82:D7 Certificate issuer: /CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Certificate serial: 010D0C9F4328584BA667AC5F56145437D50B6D80 Authority key identifier: BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa Signing time: Sun 26 Oct 2025 13:00:38 +0000 ROA not before: Sun 26 Oct 2025 13:00:38 +0000 ROA not after: Sat 24 Jan 2026 14:00:38 +0000 asID: 26946 IP address blocks: 205.221.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 29 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a6:67:ac:5f:56:14:54:37:d5:0b:6d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88e1646b-e1b3-42e7-8591-3a57fd436369 Validity Not Before: Oct 26 13:00:38 2025 GMT Not After : Jan 24 14:00:38 2026 GMT Subject: CN=260804ef-e64d-46de-9d53-3337c619f579 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:06:35:e5:5d:c0:41:26:e4:95:80:01:03: 5d:cf:8c:4d:7f:59:15:7f:f0:ee:a9:ce:86:b7:9d: 47:09:3b:f0:b3:ec:57:55:24:e8:ef:77:4b:c3:f0: a3:43:64:1d:3e:c2:5a:ad:5a:33:74:84:4c:19:e5: 81:0b:0c:03:56:92:db:a5:54:93:f6:db:1a:2f:31: 0a:ac:d6:a2:38:f6:64:e0:55:87:af:55:37:97:e2: bc:38:39:7f:3e:06:69:61:66:7c:f8:87:72:2b:0a: eb:c6:73:b6:31:d0:af:ff:74:50:a5:fc:dd:72:56: 61:a0:0c:3a:0d:5e:4a:14:59:94:87:c2:c4:b9:5e: c1:27:c5:ab:2a:e7:cd:30:52:ac:68:c0:75:8b:37: e7:fd:e5:b0:c3:12:e4:3d:b0:7e:14:fc:b2:e0:40: fc:33:c0:77:a8:e1:a4:06:fa:74:cd:be:17:4c:13: 06:e9:a7:de:6e:d0:78:13:66:c8:15:43:3f:b4:89: 7d:4a:5d:83:7e:d5:51:80:ea:41:0d:46:4e:ba:34: 9e:b9:a2:56:5d:cf:5b:0f:92:2b:92:85:24:63:7f: db:d6:d0:f1:37:d9:c7:69:2d:a8:5b:b3:91:54:00: 93:a9:8a:b5:ce:73:17:d4:74:96:66:12:4a:a0:d8: b9:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5A:10:FD:78:A5:59:35:D3:66:CF:EC:BA:95:79:19:CB:D5:82:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/28df5f64-221a-36f6-bd0b-ff92ca4864f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369/88e1646b-e1b3-42e7-8591-3a57fd436369.crl X509v3 Authority Key Identifier: keyid:BA:43:23:72:BB:F7:97:E5:F2:B4:13:EB:EC:BF:20:32:5C:2D:85:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/88e1646b-e1b3-42e7-8591-3a57fd436369.cer sbgp-ipAddrBlock: critical IPv4: 205.221.16.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:82:dc:45:4f:9c:ec:89:e4:da:49:df:f5:77:07:c9:be:9f: a1:74:5b:f1:74:92:f4:b9:4c:21:cb:30:8b:3a:c1:08:e6:78: 3b:a5:86:3e:5f:95:48:2a:bc:5b:d9:1b:83:35:d8:0d:76:48: 81:49:61:b4:6a:d0:c5:0f:d9:0d:43:77:dc:83:8a:6a:02:91: f8:93:58:4e:ba:65:8b:5a:ac:6c:cd:03:cd:26:7b:42:51:5d: 53:93:0f:38:b6:37:4d:d9:f9:7e:50:22:72:c4:f7:c6:17:85: 94:bf:33:a6:6c:1c:bf:39:af:87:14:12:34:5f:b5:f3:5b:b8: 85:98:9b:3c:0e:71:57:b8:6f:7f:ac:69:da:e4:3e:25:be:2d: a8:09:01:ba:19:d4:26:29:f7:20:dd:2e:a3:30:57:31:a5:c4: 2f:54:f7:00:d7:e1:1c:ac:42:cf:13:6c:b5:da:15:db:75:95: 11:39:e3:92:1f:7f:81:8d:5d:74:eb:26:f1:d4:f9:0f:e1:db: 24:da:93:15:c5:ce:26:24:0e:c0:69:35:e1:31:c4:15:1f:00: 24:92:9a:76:a8:27:0c:4a:38:e6:ec:dc:23:3d:ff:62:00:78: 8a:7f:26:8a:90:3e:9d:ae:67:4c:f0:65:a6:62:2f:56:f1:f8: 48:10:13:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEumZ6xfVhRUN9ULbYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODhlMTY0NmItZTFiMy00MmU3LTg1OTEtM2E1N2ZkNDM2 MzY5MB4XDTI1MTAyNjEzMDAzOFoXDTI2MDEyNDE0MDAzOFowLzEtMCsGA1UEAxMk MjYwODA0ZWYtZTY0ZC00NmRlLTlkNTMtMzMzN2M2MTlmNTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUwGNeVdwEEm5JWAAQNdz4xNf1kVf/Duqc6G t51HCTvws+xXVSTo73dLw/CjQ2QdPsJarVozdIRMGeWBCwwDVpLbpVST9tsaLzEK rNaiOPZk4FWHr1U3l+K8ODl/PgZpYWZ8+IdyKwrrxnO2MdCv/3RQpfzdclZhoAw6 DV5KFFmUh8LEuV7BJ8WrKufNMFKsaMB1izfn/eWwwxLkPbB+FPyy4ED8M8B3qOGk Bvp0zb4XTBMG6afebtB4E2bIFUM/tIl9Sl2DftVRgOpBDUZOujSeuaJWXc9bD5Ir koUkY3/b1tDxN9nHaS2oW7ORVACTqYq1znMX1HSWZhJKoNi5XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRaEP14pVk102bP7LqVeRnL1YLXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUx NjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3ZmQ0MzYzNjkvMjhkZjVmNjQtMjIxYS0z NmY2LWJkMGItZmY5MmNhNDg2NGY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODhlMTY0NmItZTFiMy00MmU3LTg1 OTEtM2E1N2ZkNDM2MzY5Lzg4ZTE2NDZiLWUxYjMtNDJlNy04NTkxLTNhNTdmZDQz NjM2OS5jcmwwHwYDVR0jBBgwFoAUukMjcrv3l+XytBPr7L8gMlwthZkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84OGUxNjQ2Yi1lMWIzLTQyZTctODU5MS0zYTU3 ZmQ0MzYzNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzd0QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiC3EVPnOyJ5NpJ3/V3B8m+n6F0W/F0kvS5TCHLMIs6wQjmeDulhj5f lUgqvFvZG4M12A12SIFJYbRq0MUP2Q1Dd9yDimoCkfiTWE66ZYtarGzNA80me0JR XVOTDzi2N03Z+X5QInLE98YXhZS/M6ZsHL85r4cUEjRftfNbuIWYmzwOcVe4b3+s adrkPiW+LagJAboZ1CYp9yDdLqMwVzGlxC9U9wDX4RysQs8TbLXaFdt1lRE545If f4GNXXTrJvHU+Q/h2yTakxXFziYkDsBpNeExxBUfACSSmnaoJwxKOObs3CM9/2IA eIp/JoqQPp2uZ0zwZaZiL1bx+EgQEyg= -----END CERTIFICATE-----Generated at Tue Oct 28 07:20:34 2025 by rpki-client