$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc3cd7bb-2135-32f5-9db3-bfa7d38cf8fb.roa File: fc3cd7bb-2135-32f5-9db3-bfa7d38cf8fb.roa (raw, json) Hash identifier: Ol2cEFDuE78kQNFUUDN7qeFUyB6qqkkV/z9gjf+RES4= Subject key identifier: 58:DF:F4:CA:E2:0A:9B:EC:29:86:BF:09:22:41:BD:1A:CA:15:75:04 Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584B821CFF9E6886EFA57EF86080 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc3cd7bb-2135-32f5-9db3-bfa7d38cf8fb.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 11427 IP address blocks: 24.28.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1c:ff:9e:68:86:ef:a5:7e:f8:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=0b99299d-5b82-4eae-a61c-d7a9c5dea8b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b5:82:38:5f:ca:45:b9:ae:f5:ea:6e:de:a2: fb:94:4f:3c:13:e0:c0:f4:db:58:01:19:58:2a:52: 5f:e2:15:0c:7b:55:61:40:9d:f9:37:cb:53:f9:bd: 87:36:58:d3:81:7c:9b:5e:a6:44:f5:2b:bc:39:4f: f9:dc:88:bd:38:12:b8:45:a8:5c:09:8b:17:e8:b3: 20:00:c9:2c:80:81:47:a3:aa:93:a2:92:55:bc:b7: 8a:e1:6a:30:de:23:e2:35:3d:ae:a6:a9:60:ea:e2: d8:6c:54:84:8c:eb:80:73:18:8e:7b:7a:d9:27:08: 99:e9:c8:a3:60:06:c5:aa:5b:b9:54:1b:eb:7e:c2: e9:1f:13:74:61:c7:17:bd:4a:bc:91:b1:0b:14:a6: bb:4b:7d:59:e6:a1:f1:64:6b:7d:21:ad:a3:36:a7: 50:f7:9c:6e:c5:f5:76:d0:f7:d5:59:c5:f8:61:95: a4:0f:45:dd:0f:cc:a0:0b:f2:35:91:db:34:8d:3f: 9c:f6:bb:7c:b5:76:2e:ac:dd:69:7e:e3:f9:7b:2e: e5:dd:08:a8:a0:45:65:a5:aa:dc:c9:00:51:45:e2: f4:01:a2:68:e3:20:09:44:fa:78:73:0b:c4:d5:bf: bd:e4:c3:a1:f7:2f:27:02:0e:d8:97:2c:53:23:2c: dd:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:DF:F4:CA:E2:0A:9B:EC:29:86:BF:09:22:41:BD:1A:CA:15:75:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/fc3cd7bb-2135-32f5-9db3-bfa7d38cf8fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 24.28.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:2e:a0:37:9b:0e:3a:f5:b8:29:45:a6:3c:4b:8d:57:f0:f5: 4b:3f:e4:50:b1:12:1b:a7:ce:d5:5c:1f:3a:7b:7d:48:d7:cc: b2:da:e2:ae:b0:d0:d4:bc:a2:0f:03:52:b1:0b:c3:6a:dd:b3: 50:00:d5:8e:d2:14:43:e7:db:1e:89:ac:fe:7e:42:cd:31:2e: ac:ca:b0:57:18:92:2e:7b:14:79:9c:00:ce:c1:cd:ff:33:2b: 33:e1:58:5f:fb:a5:44:7a:14:97:13:6f:67:1f:e8:a0:9a:90: 5b:29:b0:65:15:b7:76:b6:5c:2c:27:d5:88:46:9a:b8:ff:1a: ab:67:21:31:66:ca:28:ea:60:ab:e0:c2:bd:5e:1a:ba:d1:63: 9b:0e:88:54:19:a3:d5:a6:c8:1e:d8:dc:c3:b9:64:45:cd:2b: c6:a8:5e:a6:03:b9:4b:fb:e4:f8:a2:73:41:d3:c9:67:69:02: da:37:35:6c:46:35:64:e8:89:12:d7:e9:3c:c3:44:e2:7b:b5: 44:24:5b:fb:f2:e2:d6:60:56:97:5b:ed:4b:ff:ab:19:71:7a: df:35:2c:c4:37:11:42:a6:18:03:99:e8:65:c1:bf:83:f4:5d: 72:37:21:ea:53:95:5c:1a:0f:09:70:0e:1b:0a:2e:3f:8a:0f: 85:fd:1f:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHP+eaIbvpX74YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MGI5OTI5OWQtNWI4Mi00ZWFlLWE2MWMtZDdhOWM1ZGVhOGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrWCOF/KRbmu9epu3qL7lE88E+DA9NtYARlY KlJf4hUMe1VhQJ35N8tT+b2HNljTgXybXqZE9Su8OU/53Ii9OBK4RahcCYsX6LMg AMksgIFHo6qTopJVvLeK4Wow3iPiNT2upqlg6uLYbFSEjOuAcxiOe3rZJwiZ6cij YAbFqlu5VBvrfsLpHxN0YccXvUq8kbELFKa7S31Z5qHxZGt9Ia2jNqdQ95xuxfV2 0PfVWcX4YZWkD0XdD8ygC/I1kds0jT+c9rt8tXYurN1pfuP5ey7l3QiooEVlparc yQBRReL0AaJo4yAJRPp4cwvE1b+95MOh9y8nAg7YlyxTIyzdfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjf9MriCpvsKYa/CSJBvRrKFXUEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvZmMzY2Q3YmItMjEzNS0z MmY1LTlkYjMtYmZhN2QzOGNmOGZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHGBwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsuoDebDjr1uClFpjxLjVfw9Us/5FCxEhunztVcHzp7fUjXzLLa4q6w 0NS8og8DUrELw2rds1AA1Y7SFEPn2x6JrP5+Qs0xLqzKsFcYki57FHmcAM7Bzf8z KzPhWF/7pUR6FJcTb2cf6KCakFspsGUVt3a2XCwn1YhGmrj/GqtnITFmyijqYKvg wr1eGrrRY5sOiFQZo9WmyB7Y3MO5ZEXNK8aoXqYDuUv75Piic0HTyWdpAto3NWxG NWToiRLX6TzDROJ7tUQkW/vy4tZgVpdb7Uv/qxlxet81LMQ3EUKmGAOZ6GXBv4P0 XXI3IepTlVwaDwlwDhsKLj+KD4X9H3Y= -----END CERTIFICATE-----Generated at Mon Oct 20 13:08:22 2025 by rpki-client