$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa File: 068781a8-e032-3979-adfe-4399056a3136.roa (raw, json) Hash identifier: cDkECToh/4stbhb6rZ9KQigFO39b6E3FnFPBXc/usTE= Subject key identifier: 6D:72:70:09:D4:87:DC:C4:6A:43:F3:7D:C4:17:CB:F6:86:4C:A0:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E6B0A1689BF8BC6DB82049700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa Signing time: Tue 07 Jul 2026 09:00:12 +0000 ROA not before: Tue 07 Jul 2026 09:00:12 +0000 ROA not after: Mon 05 Oct 2026 09:00:12 +0000 asID: 30036 IP address blocks: 173.28.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6b:0a:16:89:bf:8b:c6:db:82:04:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 7 09:00:12 2026 GMT Not After : Oct 5 09:00:12 2026 GMT Subject: CN=28c3c4c5-abb2-47f2-991e-2a677d75c6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b2:9d:9f:0c:da:dc:d9:2b:a1:ca:d7:d5:a5: 06:96:b7:8a:7d:3d:41:13:fc:2e:45:d0:b9:3d:6b: c7:41:86:5b:f2:25:7f:90:27:4a:aa:5a:32:fb:61: 7f:be:27:cb:dd:4f:71:41:bd:09:0f:16:ef:c3:78: 2f:4d:7f:68:05:c2:02:12:85:69:94:94:58:1c:eb: 08:94:74:82:d9:97:43:63:69:a8:6a:65:6c:c3:ea: 1a:de:b1:b6:e9:13:6f:bd:35:22:92:2f:36:5b:6d: 58:9f:fc:4d:d1:2f:de:3f:87:11:52:71:40:8f:ba: da:46:1d:04:53:d5:a0:15:1c:05:39:46:7a:74:b4: 79:47:97:00:cb:60:7a:c5:ce:a3:bc:74:21:1a:67: 41:53:6b:04:1b:42:61:20:3e:c0:f4:4b:6b:1b:14: 61:1d:e0:fa:5f:90:00:f2:00:43:81:c6:82:05:7b: 1f:39:19:3e:d3:9d:71:bd:71:9f:ba:e3:57:17:11: 1c:bc:99:38:10:f5:79:92:ba:04:d0:ae:ff:1f:23: ad:d8:27:44:1f:ce:f6:3b:c4:76:31:bb:53:3b:ea: 71:6b:20:bd:c8:82:fc:0b:50:a2:0f:a4:f5:43:30: 7e:d7:c9:d0:93:cd:30:b5:b4:ef:66:2b:a7:59:63: ab:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:72:70:09:D4:87:DC:C4:6A:43:F3:7D:C4:17:CB:F6:86:4C:A0:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:be:0f:3b:b7:a1:9e:f2:7b:20:8e:4e:39:90:4c:1f:f6:21: fd:ae:69:8a:51:60:97:3a:f0:ae:b5:7c:7a:58:ef:96:cc:30: 6f:6b:a6:fa:d7:ef:8e:c0:70:3e:27:a7:9d:60:7d:8e:95:0a: 32:fc:a7:8c:df:ec:94:1e:d3:0d:73:b0:65:71:39:e2:ae:96: d3:7b:4c:12:33:5e:3d:6d:ae:59:5b:5c:db:62:c5:7e:c9:9d: ac:0c:da:53:a1:9e:6c:d2:4c:d4:5e:14:8f:dd:42:bf:34:85: 26:8b:c9:62:5f:df:56:79:12:ca:aa:ae:e8:f8:44:0c:de:0b: e7:fd:e3:70:a8:61:dd:b8:55:b3:cf:6e:25:e6:cc:c8:5f:e8: 73:34:8b:0a:1d:44:ed:79:26:83:a6:51:ad:c0:7d:9d:d4:4c: e2:16:66:a0:2f:50:44:db:fe:57:20:9a:4c:28:a5:61:fa:24: a0:8e:63:8d:a9:05:62:6f:2c:b3:45:cd:e9:08:20:8d:5b:25: d7:46:78:da:bd:c9:69:15:14:bd:02:26:7e:8a:c6:f3:25:42: ab:4d:8b:cd:b3:19:54:5d:52:22:10:61:28:3d:2a:7e:5b:19: 1e:12:a8:e3:ee:c1:3f:94:52:68:cd:1f:36:15:a4:41:71:f0: b1:08:b7:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5rChaJv4vG24IElwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcwNzA5MDAxMloXDTI2MTAwNTA5MDAxMlowLzEtMCsGA1UEAxMk MjhjM2M0YzUtYWJiMi00N2YyLTk5MWUtMmE2NzdkNzVjNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorKdnwza3NkrocrX1aUGlreKfT1BE/wuRdC5 PWvHQYZb8iV/kCdKqloy+2F/vifL3U9xQb0JDxbvw3gvTX9oBcICEoVplJRYHOsI lHSC2ZdDY2moamVsw+oa3rG26RNvvTUiki82W21Yn/xN0S/eP4cRUnFAj7raRh0E U9WgFRwFOUZ6dLR5R5cAy2B6xc6jvHQhGmdBU2sEG0JhID7A9EtrGxRhHeD6X5AA 8gBDgcaCBXsfORk+051xvXGfuuNXFxEcvJk4EPV5kroE0K7/HyOt2CdEH872O8R2 MbtTO+pxayC9yIL8C1CiD6T1QzB+18nQk80wtbTvZiunWWOrVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG1ycAnUh9zEakPzfcQXy/aGTKBnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY4NzgxYTgtZTAzMi0z OTc5LWFkZmUtNDM5OTA1NmEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABS+Dzu3oZ7yeyCOTjmQTB/2If2uaYpRYJc68K61fHpY75bMMG9rpvrX 747AcD4np51gfY6VCjL8p4zf7JQe0w1zsGVxOeKultN7TBIzXj1trllbXNtixX7J nawM2lOhnmzSTNReFI/dQr80hSaLyWJf31Z5Esqqruj4RAzeC+f943CoYd24VbPP biXmzMhf6HM0iwodRO15JoOmUa3AfZ3UTOIWZqAvUETb/lcgmkwopWH6JKCOY42p BWJvLLNFzekIII1bJddGeNq9yWkVFL0CJn6KxvMlQqtNi82zGVRdUiIQYSg9Kn5b GR4SqOPuwT+UUmjNHzYVpEFx8LEIt0I= -----END CERTIFICATE-----Generated at Fri Jul 24 03:23:54 2026 by rpki-client