$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6811b08-7a69-340f-8e19-631eed49bd7f.roa File: b6811b08-7a69-340f-8e19-631eed49bd7f.roa (raw, json) Hash identifier: 8nNOIFiDq3/siIg7kv5wn7/f68q5IhiUtu2CSjZz3lM= Subject key identifier: 3D:3B:C7:0E:37:40:A9:B9:52:F8:EA:6F:4B:3F:83:B4:78:7B:C6:43 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95AA35D234EC0A2157E8FF80 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6811b08-7a69-340f-8e19-631eed49bd7f.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 7015 IP address blocks: 76.28.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:aa:35:d2:34:ec:0a:21:57:e8:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=8f080e86-f649-4b40-9a2a-f2c67fcfa2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:56:96:39:c1:93:c0:cb:79:45:9a:83:b1:e6: 01:1c:9a:87:f1:3f:ba:47:ca:7e:1e:15:d1:e8:d6: 85:60:ed:fb:0c:1a:ae:16:dd:d4:94:38:74:19:db: 2d:f0:1b:b6:8a:a9:17:d0:d6:24:69:47:b8:4c:0b: 94:39:b7:e1:18:16:25:da:ee:39:9f:3f:28:da:67: 90:dc:28:6d:63:e4:16:12:62:ab:95:92:56:2c:45: 9e:af:69:5b:5e:ad:64:e3:94:b0:aa:12:9c:9f:02: 9b:59:b8:c8:b0:5d:b1:2a:48:a2:7d:16:81:d8:b4: e1:e5:ba:76:16:ec:3b:1d:ba:78:ca:57:7c:d6:dc: 90:ae:07:b3:be:70:39:a1:20:cc:cc:7c:b6:50:58: 27:0a:dd:a2:f9:2e:af:70:59:9b:39:fc:4f:75:f5: 57:9e:b6:af:96:67:db:d0:aa:1c:4b:a0:1f:8d:3a: 89:2c:5e:8e:9a:32:d2:85:fe:71:ec:b2:b7:99:0c: c7:2b:b2:8a:5b:86:7b:d7:0c:48:e7:eb:1d:0e:56: 59:b9:e3:56:22:e6:a6:2f:eb:45:50:f6:2d:55:f5: 4e:55:7a:95:79:1e:98:b7:61:ad:7c:68:ba:57:5d: cb:d5:72:97:11:55:1b:68:be:0c:cc:75:8b:f0:30: 0c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:3B:C7:0E:37:40:A9:B9:52:F8:EA:6F:4B:3F:83:B4:78:7B:C6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b6811b08-7a69-340f-8e19-631eed49bd7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 76.28.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:60:4c:48:40:7e:60:40:ab:79:76:8f:f7:af:52:31:0a:05: e1:67:e9:be:2e:84:b8:1b:e9:c7:01:9f:eb:d0:9e:d7:9f:97: 3d:00:de:e6:80:df:c7:44:55:9f:23:b5:38:cd:97:5c:3e:71: ca:86:9b:d8:90:a1:fc:97:6f:47:16:cf:5c:5e:d3:1b:94:e1: a3:f4:dd:53:12:a6:da:57:71:9d:b2:3b:5d:9e:f1:a2:ff:34: 79:86:45:ad:ba:81:c6:31:3a:93:43:05:68:6e:66:fc:53:8e: 80:c3:b2:51:89:d5:88:3c:35:cb:68:81:c7:92:7b:d7:66:19: 91:de:8b:4f:a2:01:9e:fa:9f:b7:79:8a:f2:4d:20:ce:0f:94: 13:25:36:1f:e3:65:7f:d6:97:9e:48:4f:ad:f0:2a:62:e7:0e: 43:e2:6d:2a:d1:4f:ef:ff:b2:d1:a2:1b:a5:f0:f7:b0:b7:09: 3f:7a:04:20:12:38:0e:ef:ad:d3:44:88:91:23:d4:9b:b5:de: 7e:28:4e:47:fc:32:43:9c:87:58:ad:bb:a8:63:87:85:3e:72: b2:49:fc:c5:04:38:6d:89:27:a8:12:00:a0:70:e7:bb:16:b8: 3b:f6:21:9b:ec:6d:3b:3a:da:e7:93:fe:25:21:46:b7:60:b3: 22:ea:bd:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqjXSNOwKIVfo/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk OGYwODBlODYtZjY0OS00YjQwLTlhMmEtZjJjNjdmY2ZhMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlaWOcGTwMt5RZqDseYBHJqH8T+6R8p+HhXR 6NaFYO37DBquFt3UlDh0Gdst8Bu2iqkX0NYkaUe4TAuUObfhGBYl2u45nz8o2meQ 3ChtY+QWEmKrlZJWLEWer2lbXq1k45SwqhKcnwKbWbjIsF2xKkiifRaB2LTh5bp2 Fuw7Hbp4yld81tyQrgezvnA5oSDMzHy2UFgnCt2i+S6vcFmbOfxPdfVXnravlmfb 0KocS6AfjTqJLF6OmjLShf5x7LK3mQzHK7KKW4Z71wxI5+sdDlZZueNWIuamL+tF UPYtVfVOVXqVeR6Yt2GtfGi6V13L1XKXEVUbaL4MzHWL8DAMXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD07xw43QKm5Uvjqb0s/g7R4e8ZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjY4MTFiMDgtN2E2OS0z NDBmLThlMTktNjMxZWVkNDliZDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATBwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdgTEhAfmBAq3l2j/evUjEKBeFn6b4uhLgb6ccBn+vQnteflz0A3uaA 38dEVZ8jtTjNl1w+ccqGm9iQofyXb0cWz1xe0xuU4aP03VMSptpXcZ2yO12e8aL/ NHmGRa26gcYxOpNDBWhuZvxTjoDDslGJ1Yg8NctogceSe9dmGZHei0+iAZ76n7d5 ivJNIM4PlBMlNh/jZX/Wl55IT63wKmLnDkPibSrRT+//stGiG6Xw97C3CT96BCAS OA7vrdNEiJEj1Ju13n4oTkf8MkOch1itu6hjh4U+crJJ/MUEOG2JJ6gSAKBw57sW uDv2IZvsbTs62ueT/iUhRrdgsyLqvVU= -----END CERTIFICATE-----Generated at Mon Oct 20 18:18:56 2025 by rpki-client