$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4092d596-fe7d-38d7-b59a-3271ee5ac801.roa File: 4092d596-fe7d-38d7-b59a-3271ee5ac801.roa (raw, json) Hash identifier: GJw+eCaIoK+YXPeek+QbXpciFiD+qlIap5dTRJq65Vw= Subject key identifier: 07:5F:8A:40:7D:BD:CE:CD:67:96:84:68:77:11:95:C3:31:30:11:0F Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821D8756BE504C71801A1340 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4092d596-fe7d-38d7-b59a-3271ee5ac801.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 7843 IP address blocks: 65.28.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:87:56:be:50:4c:71:80:1a:13:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=9354a6a7-4982-4806-96fa-0d216d414b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ed:66:8f:4c:dc:eb:8e:26:77:69:74:5d:bd: d0:94:08:30:f9:17:50:9e:45:08:ab:b8:b6:7c:b4: 71:0a:c2:d3:1c:1f:0b:6a:47:27:8a:10:a8:24:1d: 15:a7:fb:8f:cd:1e:b2:6e:49:02:36:3e:9f:19:0a: be:e4:1d:d5:dc:a7:e7:24:14:fd:82:eb:eb:6c:f9: b2:6b:79:7c:2f:9e:44:7b:9c:ac:fd:41:eb:4d:bf: 15:0f:ac:45:35:6d:0e:b1:41:50:97:b2:5a:a9:b9: 96:77:7a:1d:db:22:27:aa:54:7a:6d:6a:8c:99:24: b5:53:0b:44:22:78:cc:02:04:76:41:74:cb:a9:c9: f4:fc:34:54:8a:6f:1e:e5:5c:ac:fa:02:f0:7d:54: 32:9b:fe:2c:5f:1e:3c:97:4d:fd:33:fd:68:f3:e3: 83:94:36:06:4f:2b:db:b6:c9:3f:48:fd:bf:5c:8f: f9:0e:6d:c9:c4:14:99:8e:a9:ff:18:2c:f5:26:f9: 0e:5f:f9:e4:0e:97:90:76:e8:ec:92:95:ad:cb:0b: 5e:e9:aa:fc:26:a0:43:fa:ac:c3:1a:cb:cc:6c:64: 8c:98:64:97:21:89:0a:35:b3:c2:60:37:fd:39:50: 5d:c3:a8:9c:86:a5:f3:95:52:17:e7:31:e6:56:98: b7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:5F:8A:40:7D:BD:CE:CD:67:96:84:68:77:11:95:C3:31:30:11:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/4092d596-fe7d-38d7-b59a-3271ee5ac801.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 65.28.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:cb:1c:70:c2:69:b1:aa:2a:9f:68:63:4b:60:6e:fb:e5:1a: b0:4c:f1:31:a1:04:18:ae:b9:01:50:2b:b9:8c:7f:e0:cd:ea: 5d:07:29:00:d7:1d:51:1d:ff:15:79:38:f1:4d:49:fa:71:05: 4e:05:66:08:92:22:04:14:26:00:eb:2e:a4:45:a5:07:25:62: df:e3:37:e8:fb:3d:42:d1:71:76:75:37:34:10:d3:5f:f1:0c: e9:69:46:88:1d:2e:02:6f:3f:b5:8d:57:dc:ce:7c:71:ef:dd: 17:fb:56:00:1c:df:10:d0:78:af:5a:f6:77:0d:0c:d8:84:b3: f9:8a:b2:d4:ee:fb:6f:bd:47:5a:82:1e:be:9a:5d:ae:c0:4c: d7:da:6f:55:77:bb:24:cc:a0:e6:a7:3c:2d:ae:35:d0:5a:eb: 1a:f5:ef:6d:7d:3f:68:b1:d9:71:db:a2:cc:13:69:0e:3b:22: 8f:9d:aa:4f:99:f8:4f:ef:82:fa:df:32:82:8c:8c:05:8f:8c: 7a:63:82:db:59:b0:5e:32:83:5b:3c:29:4f:aa:7e:5f:62:68: ce:62:d1:0b:c8:5d:67:62:d2:0f:ae:b8:e3:61:52:79:35:c7: 39:48:da:3f:f7:89:cc:d9:67:53:8d:01:e6:be:73:d2:89:6e: 34:31:d0:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYdWvlBMcYAaE0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk OTM1NGE2YTctNDk4Mi00ODA2LTk2ZmEtMGQyMTZkNDE0YjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO1mj0zc644md2l0Xb3QlAgw+RdQnkUIq7i2 fLRxCsLTHB8LakcnihCoJB0Vp/uPzR6ybkkCNj6fGQq+5B3V3KfnJBT9guvrbPmy a3l8L55Ee5ys/UHrTb8VD6xFNW0OsUFQl7JaqbmWd3od2yInqlR6bWqMmSS1UwtE InjMAgR2QXTLqcn0/DRUim8e5Vys+gLwfVQym/4sXx48l039M/1o8+ODlDYGTyvb tsk/SP2/XI/5Dm3JxBSZjqn/GCz1JvkOX/nkDpeQdujskpWtywte6ar8JqBD+qzD GsvMbGSMmGSXIYkKNbPCYDf9OVBdw6ichqXzlVIX5zHmVpi32wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdfikB9vc7NZ5aEaHcRlcMxMBEPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvNDA5MmQ1OTYtZmU3ZC0z OGQ3LWI1OWEtMzI3MWVlNWFjODAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXLHHDCabGqKp9oY0tgbvvlGrBM8TGhBBiuuQFQK7mMf+DN6l0HKQDX HVEd/xV5OPFNSfpxBU4FZgiSIgQUJgDrLqRFpQclYt/jN+j7PULRcXZ1NzQQ01/x DOlpRogdLgJvP7WNV9zOfHHv3Rf7VgAc3xDQeK9a9ncNDNiEs/mKstTu+2+9R1qC Hr6aXa7ATNfab1V3uyTMoOanPC2uNdBa6xr17219P2ix2XHboswTaQ47Io+dqk+Z +E/vgvrfMoKMjAWPjHpjgttZsF4yg1s8KU+qfl9iaM5i0QvIXWdi0g+uuONhUnk1 xzlI2j/3iczZZ1ONAea+c9KJbjQx0Hg= -----END CERTIFICATE-----Generated at Mon Oct 20 08:05:19 2025 by rpki-client