$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa File: 28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa (raw, json) Hash identifier: XlR0NRc5friDjauZvna9r0wFNbj8BPr0m6LsjbuzBpg= Subject key identifier: 4D:D3:56:7F:D2:E2:BE:96:1E:CF:74:4E:E1:A4:AE:EF:87:A4:41:18 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584B0CDC2436E1B9081F65340180 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa Signing time: Mon 01 Sep 2025 13:00:40 +0000 ROA not before: Mon 01 Sep 2025 13:00:40 +0000 ROA not after: Sun 30 Nov 2025 14:00:40 +0000 asID: 20940 IP address blocks: 23.32.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0c:dc:24:36:e1:b9:08:1f:65:34:01:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 1 13:00:40 2025 GMT Not After : Nov 30 14:00:40 2025 GMT Subject: CN=d9c1206b-788f-4ce8-a890-1ed71fe6467f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f4:62:11:6f:81:0b:5b:b0:49:01:14:2a:30: 51:46:84:e7:46:80:7a:49:3a:42:38:3d:5e:98:77: 58:b8:80:a4:1a:e0:d3:84:b9:c3:fd:7a:90:ec:af: cd:61:5f:48:56:42:e7:f3:08:5b:61:50:45:e6:9d: e9:aa:08:5e:90:28:ad:79:22:6a:9f:32:15:22:d2: 0d:63:5a:b6:f8:0c:47:79:e1:6f:38:b6:3f:4f:1d: 2f:f0:52:60:17:8f:5b:70:5f:e4:c5:44:1d:b3:12: 9b:0f:14:bc:85:77:2a:9c:d0:06:75:4f:4b:8b:0d: f7:bf:0d:44:11:84:5f:09:82:da:42:4b:f7:10:00: 40:ee:8a:c1:1f:d8:c7:98:0f:f6:d0:7f:f6:25:d5: d9:fa:0e:a5:f0:13:1b:35:7b:61:45:0a:c9:0f:32: 42:6b:7f:eb:e4:cd:02:6d:4c:d7:de:1a:f0:3d:d1: 85:a4:f1:e1:fc:53:b2:b2:4f:5b:fc:69:39:49:7a: 75:d7:58:72:26:92:f5:37:9e:67:20:b2:12:13:4f: 58:c1:83:d8:21:2c:d0:55:54:21:91:5c:4b:f0:d8: 0a:55:df:63:b2:c7:ef:63:94:14:4e:ac:bf:96:a5: 71:a0:6d:1e:a2:60:2c:d0:16:6f:eb:7c:51:e9:09: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D3:56:7F:D2:E2:BE:96:1E:CF:74:4E:E1:A4:AE:EF:87:A4:41:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28589eea-d9fc-3e97-8cf9-a8fd7e89f550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.32.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:22:7b:be:54:ee:d4:40:c9:e4:6e:c8:13:8c:ea:f3:f3:e5: c6:0f:b5:ad:7b:02:fe:7d:18:54:c2:b9:b1:a2:c9:67:2f:fc: 7d:b4:aa:d5:85:4d:db:90:44:ea:73:ef:da:3a:f8:b9:9e:08: ce:fe:50:e8:f5:eb:16:f1:2a:93:93:08:62:32:15:81:1b:d3: 07:e2:5d:42:6a:ed:da:ab:f1:2b:48:6d:40:81:83:ac:fe:ad: f4:00:73:83:ca:3d:65:72:e0:a2:b9:24:b8:ed:f4:81:7c:84: 53:6d:97:3a:75:60:2f:5f:7f:44:0a:eb:eb:47:2d:a6:41:ca: 71:f7:eb:6e:2f:a2:1b:7c:c1:74:41:32:20:f8:fb:f8:ab:0a: 99:56:57:2e:e2:e3:46:ac:8c:9d:42:3d:bb:0a:7b:e0:5f:82: d0:3d:e6:30:37:aa:cf:2f:ff:82:2e:5d:bd:b0:ec:ac:41:af: 80:f4:06:0c:d1:08:e1:35:e9:4e:ab:30:6b:10:26:22:c6:a1: 59:c6:06:7e:37:ea:72:a7:50:67:69:57:0f:6c:0e:4f:37:40: 17:af:17:94:ae:92:b4:f8:3a:eb:5c:f1:78:5c:11:06:a9:12: 68:a2:1d:40:a6:ee:63:68:53:9a:9f:91:33:56:09:12:40:86: 75:e6:83:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsM3CQ24bkIH2U0AYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDkwMTEzMDA0MFoXDTI1MTEzMDE0MDA0MFowLzEtMCsGA1UEAxMk ZDljMTIwNmItNzg4Zi00Y2U4LWE4OTAtMWVkNzFmZTY0NjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPRiEW+BC1uwSQEUKjBRRoTnRoB6STpCOD1e mHdYuICkGuDThLnD/XqQ7K/NYV9IVkLn8whbYVBF5p3pqghekCiteSJqnzIVItIN Y1q2+AxHeeFvOLY/Tx0v8FJgF49bcF/kxUQdsxKbDxS8hXcqnNAGdU9Liw33vw1E EYRfCYLaQkv3EABA7orBH9jHmA/20H/2JdXZ+g6l8BMbNXthRQrJDzJCa3/r5M0C bUzX3hrwPdGFpPHh/FOysk9b/Gk5SXp111hyJpL1N55nILISE09YwYPYISzQVVQh kVxL8NgKVd9jssfvY5QUTqy/lqVxoG0eomAs0BZv63xR6QnX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE3TVn/S4r6WHs90TuGkru+HpEEYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjg1ODllZWEtZDlmYy0z ZTk3LThjZjktYThmZDdlODlmNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAie75U7tRAyeRuyBOM6vPz5cYPta17Av59GFTCubGiyWcv/H20qtWF TduQROpz79o6+LmeCM7+UOj16xbxKpOTCGIyFYEb0wfiXUJq7dqr8StIbUCBg6z+ rfQAc4PKPWVy4KK5JLjt9IF8hFNtlzp1YC9ff0QK6+tHLaZBynH3624voht8wXRB MiD4+/irCplWVy7i40asjJ1CPbsKe+BfgtA95jA3qs8v/4IuXb2w7KxBr4D0BgzR COE16U6rMGsQJiLGoVnGBn436nKnUGdpVw9sDk83QBevF5SukrT4Outc8XhcEQap EmiiHUCm7mNoU5qfkTNWCRJAhnXmgxk= -----END CERTIFICATE-----Generated at Mon Oct 20 00:28:27 2025 by rpki-client