$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38641919-e4ee-38d1-99fa-9e7605e9884b.roa File: 38641919-e4ee-38d1-99fa-9e7605e9884b.roa (raw, json) Hash identifier: 5xXxg0OCNXsSiPj5U0MoQmCZjzS7nuhy4hSeJwanFoM= Subject key identifier: E1:9E:1A:64:03:3D:C2:9C:4C:37:03:EF:3E:A9:D7:06:64:92:7B:EE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B80B754C50388C8D19898CAC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38641919-e4ee-38d1-99fa-9e7605e9884b.roa Signing time: Mon 13 Oct 2025 01:00:29 +0000 ROA not before: Mon 13 Oct 2025 01:00:29 +0000 ROA not after: Sun 11 Jan 2026 02:00:29 +0000 asID: 30036 IP address blocks: 173.28.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:80:b7:54:c5:03:88:c8:d1:98:98:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 13 01:00:29 2025 GMT Not After : Jan 11 02:00:29 2026 GMT Subject: CN=b8768650-5a3b-434d-a28e-2331bb1db1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:54:09:29:b0:c2:26:4d:63:4b:71:22:ae:85: f6:48:9b:30:da:df:cf:92:d2:cd:f3:8b:f0:27:c4: 09:77:8c:5b:8e:48:e9:62:71:bb:cc:10:54:1e:50: 95:bb:91:f9:63:62:f3:94:af:7c:5f:43:7d:34:3b: 08:52:f7:f7:1d:88:12:0f:ae:c5:35:22:c9:ae:b0: d4:cb:43:74:fe:0b:c9:84:69:35:7f:e8:b1:4a:24: cc:f4:c8:2c:71:35:41:d6:e3:d5:14:36:84:49:4b: 7a:c5:c0:07:93:23:87:2d:22:8e:61:9c:a2:4a:5b: d9:01:1b:47:97:c1:93:59:e0:ce:53:39:0d:11:3a: 91:ec:bd:36:45:71:d9:27:f8:7a:d3:f2:c4:3e:c3: ca:d1:66:50:0f:66:d6:06:89:e8:65:23:35:6a:c6: 73:13:4d:e1:cf:65:9e:e2:95:46:2d:cf:11:66:ac: 53:db:ac:69:0e:ac:ab:69:0f:cb:d1:f6:b4:af:bc: 8f:0e:f0:33:c4:01:86:27:e7:70:4b:73:e6:34:b8: 21:f0:1d:68:db:e5:0a:7a:26:f0:04:35:7a:27:7a: 44:42:c0:df:04:3a:31:7c:e9:09:83:ed:4c:ca:d9: c4:7d:3c:73:3d:6b:0f:eb:bb:1d:31:92:a0:48:99: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:9E:1A:64:03:3D:C2:9C:4C:37:03:EF:3E:A9:D7:06:64:92:7B:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/38641919-e4ee-38d1-99fa-9e7605e9884b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:f9:1d:7d:c0:f6:9c:7a:ca:fc:0c:ec:71:76:c1:9e:e5:ce: 92:24:f8:42:ce:e4:8c:a1:72:74:fe:d7:1d:cd:d3:e4:6c:74: b7:3b:78:0b:e3:8b:21:38:8b:97:ad:7e:0c:26:cb:26:9a:73: 23:4f:d3:4c:eb:f6:0b:7d:4d:25:18:31:21:be:62:44:50:50: 29:fe:ca:a1:d0:a8:30:b6:ba:bb:fe:c1:bf:80:94:4e:26:93: cc:1a:6a:73:a3:d6:8f:02:50:b8:f5:93:4d:f6:d5:2a:15:23: c2:4c:4b:21:62:a3:73:87:6f:cf:e6:91:8c:d7:2f:cc:38:f1: f7:71:89:1f:72:be:a1:3f:3a:3c:52:78:e4:fb:7f:56:a6:d9: 9b:fd:cd:b3:49:37:8e:41:82:f7:62:63:59:a2:13:80:68:d3: c1:3b:fd:b5:07:74:bf:b0:a4:a9:02:66:6a:85:0e:53:64:37: 6e:78:f6:38:03:b1:f6:0c:e3:e4:05:4e:16:2e:14:c9:9c:16: 3a:be:38:e2:7b:a9:86:d5:fb:88:1a:7e:11:03:4b:00:a8:68: c8:99:3d:1e:ea:e2:08:93:90:c5:01:15:89:d3:91:01:9d:7f: ee:d9:d5:f3:6e:22:26:88:68:c2:ae:ce:3a:4a:5e:64:4e:06: a5:d5:f7:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuAt1TFA4jI0ZiYysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMzAxMDAyOVoXDTI2MDExMTAyMDAyOVowLzEtMCsGA1UEAxMk Yjg3Njg2NTAtNWEzYi00MzRkLWEyOGUtMjMzMWJiMWRiMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1QJKbDCJk1jS3EiroX2SJsw2t/PktLN84vw J8QJd4xbjkjpYnG7zBBUHlCVu5H5Y2LzlK98X0N9NDsIUvf3HYgSD67FNSLJrrDU y0N0/gvJhGk1f+ixSiTM9MgscTVB1uPVFDaESUt6xcAHkyOHLSKOYZyiSlvZARtH l8GTWeDOUzkNETqR7L02RXHZJ/h60/LEPsPK0WZQD2bWBonoZSM1asZzE03hz2We 4pVGLc8RZqxT26xpDqyraQ/L0fa0r7yPDvAzxAGGJ+dwS3PmNLgh8B1o2+UKeibw BDV6J3pEQsDfBDoxfOkJg+1MytnEfTxzPWsP67sdMZKgSJmPpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGeGmQDPcKcTDcD7z6p1wZkknvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzg2NDE5MTktZTRlZS0z OGQxLTk5ZmEtOWU3NjA1ZTk4ODRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGX5HX3A9px6yvwM7HF2wZ7lzpIk+ELO5IyhcnT+1x3N0+RsdLc7eAvj iyE4i5etfgwmyyaacyNP00zr9gt9TSUYMSG+YkRQUCn+yqHQqDC2urv+wb+AlE4m k8waanOj1o8CULj1k0321SoVI8JMSyFio3OHb8/mkYzXL8w48fdxiR9yvqE/OjxS eOT7f1am2Zv9zbNJN45BgvdiY1miE4Bo08E7/bUHdL+wpKkCZmqFDlNkN2549jgD sfYM4+QFThYuFMmcFjq+OOJ7qYbV+4gafhEDSwCoaMiZPR7q4giTkMUBFYnTkQGd f+7Z1fNuIiaIaMKuzjpKXmROBqXV92g= -----END CERTIFICATE-----Generated at Mon Oct 20 05:18:35 2025 by rpki-client