$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f4b7779-7c29-3d09-986c-a7b587cc8892.roa File: 4f4b7779-7c29-3d09-986c-a7b587cc8892.roa (raw, json) Hash identifier: xd5vxtTS6fb2c/UV+9UhU5zQcF+rAg8u+Wgfxg0lyZE= Subject key identifier: 59:ED:E7:27:F3:50:C7:AF:89:53:6F:B4:1C:05:F6:B2:1E:E8:84:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEEC5273C5AAFC0358ADB7B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f4b7779-7c29-3d09-986c-a7b587cc8892.roa Signing time: Thu 21 Aug 2025 18:20:23 +0000 ROA not before: Thu 21 Aug 2025 18:20:23 +0000 ROA not after: Wed 19 Nov 2025 19:20:23 +0000 asID: 19905 IP address blocks: 173.28.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:c5:27:3c:5a:af:c0:35:8a:db:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 18:20:23 2025 GMT Not After : Nov 19 19:20:23 2025 GMT Subject: CN=0e38d454-90f0-4805-b9b7-d41e055983da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6e:9a:bd:32:68:c8:90:cf:b7:46:e6:ca:6b: 54:d4:bf:e4:61:a3:91:6c:f6:25:a1:a2:ec:18:c7: e2:82:b6:44:2c:de:b7:ab:e0:df:e7:14:d9:75:23: 7f:36:80:72:06:be:bd:d6:8e:70:ba:95:95:b2:9e: 1c:d9:b1:ff:32:f1:83:19:4e:b7:04:67:ad:7a:8f: 91:34:65:f8:5c:ac:9e:fa:1b:13:17:1b:0c:5d:91: 2d:1b:ff:b3:7d:98:18:79:1b:8b:0f:5f:6e:21:6e: 30:c8:5a:65:8e:4b:af:d7:94:ef:20:35:b2:0a:19: 75:16:72:5f:86:bd:49:82:8f:cd:e6:e0:6e:5c:ef: 7c:ca:0c:c6:3d:d3:b5:aa:a3:6b:87:3a:51:7e:8d: 03:0d:ee:79:ff:d7:2a:31:5a:df:61:7d:19:7f:88: 76:2c:77:23:05:b7:54:d2:6e:1a:73:20:02:73:e2: 23:bf:1c:e1:9e:70:87:a0:87:b6:a6:54:f2:a0:c0: 50:d4:60:6c:29:d0:c8:f7:7d:7d:74:94:6c:ef:d3: 51:7a:c9:8f:a5:5b:1b:1a:26:de:7c:08:bf:97:2d: b9:e8:b9:db:70:c1:ae:ba:22:ea:d3:73:a7:15:fc: 30:a9:60:b4:d4:88:2e:e2:4a:e4:52:5e:67:3e:11: aa:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:ED:E7:27:F3:50:C7:AF:89:53:6F:B4:1C:05:F6:B2:1E:E8:84:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f4b7779-7c29-3d09-986c-a7b587cc8892.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:2b:65:f2:8c:01:1d:d8:c6:5e:27:43:8e:24:b9:f0:0d:84: 5a:30:be:10:c0:9d:c1:70:b6:62:10:5f:bb:51:c2:f7:06:f3: b3:e3:10:0d:ae:cc:8c:c5:30:67:12:c2:d9:ad:dc:17:a0:9c: cd:6f:49:09:e5:0e:9f:df:d9:74:8a:8e:87:3f:76:02:f4:c3: 5f:59:eb:1f:76:1d:ef:ed:97:80:07:de:44:5a:4a:9f:c3:11: 60:8f:5c:b5:8a:f5:67:01:a8:fa:99:79:9c:0c:71:d5:9f:50: 7c:9f:98:33:fa:70:6a:ff:fc:8c:25:a1:92:61:29:f9:42:bc: ea:48:73:33:57:b4:5c:7c:f7:ad:c4:99:f1:91:c6:c8:91:78: a3:7c:d7:e7:6f:74:d5:12:4b:34:8b:12:8e:0f:54:af:6a:4b: 88:7f:61:21:ce:e8:8d:fc:3e:2c:9d:4d:79:02:62:37:ff:26: ac:ba:8c:d2:22:53:17:d7:46:fc:3e:a4:fa:8a:9c:fe:dd:22: 29:96:7c:cc:cc:28:c7:ca:17:13:c9:ba:e4:83:40:cc:c4:6f: 76:ca:08:c0:52:59:64:1a:18:a8:94:21:8c:25:7e:3d:b2:dd: 95:07:1e:d0:92:79:73:6d:e8:a2:90:ce:a5:bb:04:2e:bf:b4: d9:ee:c4:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruxSc8Wq/ANYrbe0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMTE4MjAyM1oXDTI1MTExOTE5MjAyM1owLzEtMCsGA1UEAxMk MGUzOGQ0NTQtOTBmMC00ODA1LWI5YjctZDQxZTA1NTk4M2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW6avTJoyJDPt0bmymtU1L/kYaORbPYloaLs GMfigrZELN63q+Df5xTZdSN/NoByBr691o5wupWVsp4c2bH/MvGDGU63BGeteo+R NGX4XKye+hsTFxsMXZEtG/+zfZgYeRuLD19uIW4wyFpljkuv15TvIDWyChl1FnJf hr1Jgo/N5uBuXO98ygzGPdO1qqNrhzpRfo0DDe55/9cqMVrfYX0Zf4h2LHcjBbdU 0m4acyACc+IjvxzhnnCHoIe2plTyoMBQ1GBsKdDI9319dJRs79NResmPpVsbGibe fAi/ly256LnbcMGuuiLq03OnFfwwqWC01Igu4krkUl5nPhGqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnt5yfzUMeviVNvtBwF9rIe6IQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY0Yjc3NzktN2MyOS0z ZDA5LTk4NmMtYTdiNTg3Y2M4ODkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB8rZfKMAR3Yxl4nQ44kufANhFowvhDAncFwtmIQX7tRwvcG87PjEA2u zIzFMGcSwtmt3BegnM1vSQnlDp/f2XSKjoc/dgL0w19Z6x92He/tl4AH3kRaSp/D EWCPXLWK9WcBqPqZeZwMcdWfUHyfmDP6cGr//IwloZJhKflCvOpIczNXtFx8963E mfGRxsiReKN81+dvdNUSSzSLEo4PVK9qS4h/YSHO6I38PiydTXkCYjf/Jqy6jNIi UxfXRvw+pPqKnP7dIimWfMzMKMfKFxPJuuSDQMzEb3bKCMBSWWQaGKiUIYwlfj2y 3ZUHHtCSeXNt6KKQzqW7BC6/tNnuxIg= -----END CERTIFICATE-----Generated at Sat Aug 23 06:38:40 2025 by rpki-client