$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa File: 28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa (raw, json) Hash identifier: 326rpTeh0ZADW/jFyRbbv6otlhZFnrwtr0JsbDvrx/E= Subject key identifier: AA:12:4F:BF:CF:0B:B8:2F:A4:A4:4D:28:6B:F6:B6:CB:7C:B3:1C:77 Certificate issuer: /CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5 Certificate serial: 010D0C9F4328584B7A50BEB528AA24C6A76F3640 Authority key identifier: 4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa Signing time: Fri 10 Oct 2025 17:59:01 +0000 ROA not before: Fri 10 Oct 2025 17:59:01 +0000 ROA not after: Thu 08 Jan 2026 18:59:01 +0000 asID: 30671 IP address blocks: 142.249.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:50:be:b5:28:aa:24:c6:a7:6f:36:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b68d8a55-99d1-4c5a-b426-9632944ee4c5 Validity Not Before: Oct 10 17:59:01 2025 GMT Not After : Jan 8 18:59:01 2026 GMT Subject: CN=c6f83a67-413c-4292-94e1-17266b96619f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:8b:df:51:1b:e0:ad:18:e9:81:e7:37:79:a7: 8b:c9:e1:87:ff:1b:01:59:1b:06:b2:b2:4b:b0:e7: cb:01:bf:0d:c1:41:2b:9f:84:c9:01:33:75:7f:f7: 40:59:f4:0d:1b:6f:86:10:08:56:29:64:82:92:72: d1:18:26:b9:f9:86:9e:c0:61:8f:43:38:39:9b:02: 9c:20:b7:20:b1:a4:09:6a:74:08:39:7f:ba:50:fc: d8:7d:1f:01:6b:47:df:06:19:d5:5e:f0:a4:01:27: 02:bc:d7:36:f0:0d:e8:15:03:30:0c:6e:e0:e9:2b: 18:eb:30:24:61:70:d7:5a:2a:b7:ed:2a:7c:93:c4: 9d:65:4d:79:9b:62:34:c1:ab:66:2e:76:b7:a6:56: a9:c8:b5:55:98:87:04:86:dc:b4:7c:f8:1d:f3:d1: 8c:8c:05:cc:5a:6d:41:7d:00:1a:c1:3b:35:77:e6: 2a:88:45:1d:ed:0e:62:18:87:95:df:cb:15:73:96: 71:91:bb:af:3e:6d:7f:86:08:9e:ae:d7:6f:a3:0d: 71:c4:45:dd:e1:1e:ff:e7:8e:ce:6e:3c:fc:cc:7f: 0c:93:1a:cc:80:f1:f9:41:76:86:fb:28:0b:59:45: 50:0d:c2:b9:1a:f5:de:96:31:b3:eb:01:56:15:91: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:12:4F:BF:CF:0B:B8:2F:A4:A4:4D:28:6B:F6:B6:CB:7C:B3:1C:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/28d32693-1ba8-3dab-8193-757c1ac6f8a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5/b68d8a55-99d1-4c5a-b426-9632944ee4c5.crl X509v3 Authority Key Identifier: keyid:4D:B9:6D:C9:15:4E:A4:3D:76:B7:E8:1C:87:C5:F1:F0:77:A1:73:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b68d8a55-99d1-4c5a-b426-9632944ee4c5.cer sbgp-ipAddrBlock: critical IPv4: 142.249.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:75:26:73:bf:23:13:89:60:4c:74:59:fc:f2:2b:ef:92:a4: 79:83:fd:16:2c:26:39:55:74:04:6c:58:58:56:93:ed:aa:2c: 28:3d:fb:36:68:bf:2b:2a:ba:53:b8:d5:e3:82:d9:2b:d6:ee: 86:ea:47:13:22:95:0d:76:ba:76:89:a0:98:0d:58:79:d3:b5: 20:35:e5:ab:5b:1d:e1:38:fe:ca:86:b5:af:56:42:71:44:ca: de:ca:aa:76:7c:2a:4f:a8:e6:b1:28:a4:a1:38:56:67:0c:82: 0e:ea:bd:bb:2d:47:46:30:43:7c:9c:d8:40:e0:ea:ef:70:3e: a5:25:5f:c1:40:9c:70:99:50:2b:d1:14:f1:ed:1a:50:fa:50: c1:6d:8b:a2:18:92:91:3a:a9:cc:aa:5c:9e:de:9e:d0:45:68: 2d:5f:c9:06:2e:71:d7:5d:e3:e2:24:39:fe:b1:82:74:ac:05: b1:3e:d9:e4:4f:e0:e9:ef:29:87:3f:f2:22:f9:59:a4:28:20: d3:6e:99:6c:b0:a7:44:56:56:50:eb:13:3a:d3:bc:02:d1:e5: e0:12:21:fc:dc:81:53:62:92:b3:1f:4b:c0:d2:d8:9d:c0:7a: d3:a9:16:ad:87:97:d7:5c:c1:c1:54:3a:25:94:e9:30:3e:09: 25:12:6c:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6UL61KKokxqdvNkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY4ZDhhNTUtOTlkMS00YzVhLWI0MjYtOTYzMjk0NGVl NGM1MB4XDTI1MTAxMDE3NTkwMVoXDTI2MDEwODE4NTkwMVowLzEtMCsGA1UEAxMk YzZmODNhNjctNDEzYy00MjkyLTk0ZTEtMTcyNjZiOTY2MTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4vfURvgrRjpgec3eaeLyeGH/xsBWRsGsrJL sOfLAb8NwUErn4TJATN1f/dAWfQNG2+GEAhWKWSCknLRGCa5+YaewGGPQzg5mwKc ILcgsaQJanQIOX+6UPzYfR8Ba0ffBhnVXvCkAScCvNc28A3oFQMwDG7g6SsY6zAk YXDXWiq37Sp8k8SdZU15m2I0watmLna3plapyLVVmIcEhty0fPgd89GMjAXMWm1B fQAawTs1d+YqiEUd7Q5iGIeV38sVc5ZxkbuvPm1/hgiertdvow1xxEXd4R7/547O bjz8zH8MkxrMgPH5QXaG+ygLWUVQDcK5GvXeljGz6wFWFZH9vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoST7/PC7gvpKRNKGv2tst8sxx3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNjhk OGE1NS05OWQxLTRjNWEtYjQyNi05NjMyOTQ0ZWU0YzUvMjhkMzI2OTMtMWJhOC0z ZGFiLTgxOTMtNzU3YzFhYzZmOGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjY4ZDhhNTUtOTlkMS00YzVhLWI0 MjYtOTYzMjk0NGVlNGM1L2I2OGQ4YTU1LTk5ZDEtNGM1YS1iNDI2LTk2MzI5NDRl ZTRjNS5jcmwwHwYDVR0jBBgwFoAUTbltyRVOpD12t+gch8Xx8Hehc9UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNjhkOGE1NS05OWQxLTRjNWEtYjQyNi05NjMy OTQ0ZWU0YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvn0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALd1JnO/IxOJYEx0WfzyK++SpHmD/RYsJjlVdARsWFhWk+2qLCg9+zZo vysqulO41eOC2SvW7obqRxMilQ12unaJoJgNWHnTtSA15atbHeE4/sqGta9WQnFE yt7KqnZ8Kk+o5rEopKE4VmcMgg7qvbstR0YwQ3yc2EDg6u9wPqUlX8FAnHCZUCvR FPHtGlD6UMFti6IYkpE6qcyqXJ7entBFaC1fyQYucddd4+IkOf6xgnSsBbE+2eRP 4OnvKYc/8iL5WaQoINNumWywp0RWVlDrEzrTvALR5eASIfzcgVNikrMfS8DS2J3A etOpFq2Hl9dcwcFUOiWU6TA+CSUSbKA= -----END CERTIFICATE-----Generated at Tue Oct 21 04:36:11 2025 by rpki-client