$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa File: 4a4db36a-637e-343a-9b4f-81b75136b0d8.roa (raw, json) Hash identifier: 5xjvpN1A3ogN3nYKAHYYncGi1R+31cniOL3T3j3U+BY= Subject key identifier: 0C:B1:85:4E:46:43:A0:54:01:F9:91:95:A8:40:C2:D7:57:DB:58:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEEC513F3FF88E76750764D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa Signing time: Thu 21 Aug 2025 18:20:14 +0000 ROA not before: Thu 21 Aug 2025 18:20:14 +0000 ROA not after: Wed 19 Nov 2025 19:20:14 +0000 asID: 30036 IP address blocks: 173.28.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:c5:13:f3:ff:88:e7:67:50:76:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 18:20:14 2025 GMT Not After : Nov 19 19:20:14 2025 GMT Subject: CN=daa68db7-3af9-4627-9868-7f2745b1aa1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f0:d9:0b:c8:5b:3b:40:e4:49:60:61:dc:09: bd:dc:25:fe:1e:b6:4f:e5:65:78:e0:46:a7:16:77: c2:6f:80:d3:8f:c3:32:71:bc:5d:d4:41:85:18:96: 0c:af:ed:06:e3:2c:57:df:68:24:3e:68:09:32:dc: 6c:5f:ca:e4:2f:26:44:73:29:15:e0:c7:0b:6a:de: 28:59:e6:49:95:ee:93:13:fa:81:29:94:9b:d6:21: 54:b1:76:42:b3:c9:c0:9a:1a:1d:60:0e:cd:56:6c: 48:fd:47:e0:8f:a2:c4:8b:a5:67:79:e5:41:0d:53: 24:46:d0:2e:63:14:b9:6e:a2:fd:76:0a:77:ec:4a: 4f:69:42:3e:a5:40:24:d9:69:ff:6e:a9:f8:40:7a: 07:4b:64:94:48:4e:81:b2:85:a0:45:1a:6a:9b:b1: 09:d4:8d:66:5d:da:bb:65:be:18:a6:80:a5:7c:ff: 26:80:8a:2a:cb:2e:b5:27:b3:e7:1b:58:be:8c:92: 7c:3e:2a:f1:54:43:90:2e:fe:e6:8f:d8:a4:fc:4e: 32:a6:38:7c:cb:7a:29:26:7b:c6:b7:db:db:32:6c: e8:b4:a7:c3:fd:47:dd:84:4d:a1:7e:7f:ee:4e:b2: d1:d9:14:9d:95:13:f1:df:2d:1f:55:6e:74:a1:3f: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:B1:85:4E:46:43:A0:54:01:F9:91:95:A8:40:C2:D7:57:DB:58:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a4db36a-637e-343a-9b4f-81b75136b0d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9b:4c:28:01:4d:ae:b6:ce:75:ea:4e:8c:c9:b6:bc:3d:2e: b1:57:b0:0a:b5:04:54:a3:75:26:b3:d4:f5:a8:a3:8a:a5:7d: 71:f8:c1:32:93:5c:01:89:9f:7c:02:e6:a4:1a:c8:00:6c:d9: fd:ea:e5:35:11:be:73:18:d9:5d:72:80:db:2e:8b:12:93:34: 88:24:78:35:8e:4e:02:da:63:9a:e4:38:4d:7e:b1:a2:84:cd: df:ee:29:f0:7e:05:9d:3e:74:51:52:ed:e9:f1:c2:8e:d1:ed: 2f:d9:4f:18:19:a8:b8:cc:a8:d1:6b:9c:89:45:5d:bc:f6:cc: 09:37:6e:6f:d5:5e:8d:42:79:f2:e8:12:91:fd:40:df:23:ac: 64:84:4d:5a:61:8f:09:c8:fb:5c:8f:71:6f:99:b5:c4:15:7e: a2:54:a1:dc:dd:2a:62:a3:a2:fe:9b:55:32:d6:5d:d4:5e:45: 13:d0:2a:d8:a0:4a:a9:3e:80:46:a1:ba:12:2e:e0:56:47:ce: f8:22:bc:d7:87:07:f5:fe:36:d9:8c:c0:f2:80:76:7f:62:c7: ff:b9:c4:a2:4c:12:fa:7f:bb:c8:04:c0:ad:06:9d:35:ba:78: be:9a:14:db:58:12:45:7d:1a:7a:2d:a4:de:e9:ae:5d:73:ba: 97:48:4c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruxRPz/4jnZ1B2TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMTE4MjAxNFoXDTI1MTExOTE5MjAxNFowLzEtMCsGA1UEAxMk ZGFhNjhkYjctM2FmOS00NjI3LTk4NjgtN2YyNzQ1YjFhYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/DZC8hbO0DkSWBh3Am93CX+HrZP5WV44Ean FnfCb4DTj8Mycbxd1EGFGJYMr+0G4yxX32gkPmgJMtxsX8rkLyZEcykV4McLat4o WeZJle6TE/qBKZSb1iFUsXZCs8nAmhodYA7NVmxI/Ufgj6LEi6VneeVBDVMkRtAu YxS5bqL9dgp37EpPaUI+pUAk2Wn/bqn4QHoHS2SUSE6BsoWgRRpqm7EJ1I1mXdq7 Zb4YpoClfP8mgIoqyy61J7PnG1i+jJJ8PirxVEOQLv7mj9ik/E4ypjh8y3opJnvG t9vbMmzotKfD/UfdhE2hfn/uTrLR2RSdlRPx3y0fVW50oT+sBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAyxhU5GQ6BUAfmRlahAwtdX21gdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE0ZGIzNmEtNjM3ZS0z NDNhLTliNGYtODFiNzUxMzZiMGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRyIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFubTCgBTa62znXqTozJtrw9LrFXsAq1BFSjdSaz1PWoo4qlfXH4wTKT XAGJn3wC5qQayABs2f3q5TURvnMY2V1ygNsuixKTNIgkeDWOTgLaY5rkOE1+saKE zd/uKfB+BZ0+dFFS7enxwo7R7S/ZTxgZqLjMqNFrnIlFXbz2zAk3bm/VXo1CefLo EpH9QN8jrGSETVphjwnI+1yPcW+ZtcQVfqJUodzdKmKjov6bVTLWXdReRRPQKtig Sqk+gEahuhIu4FZHzvgivNeHB/X+NtmMwPKAdn9ix/+5xKJMEvp/u8gEwK0GnTW6 eL6aFNtYEkV9GnotpN7prl1zupdITI8= -----END CERTIFICATE-----Generated at Sat Aug 23 14:52:29 2025 by rpki-client