$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/576c1961-e4f9-37db-9405-56d9c89bd942.roa File: 576c1961-e4f9-37db-9405-56d9c89bd942.roa (raw, json) Hash identifier: SEFxyaq1As/XGBeQcnKIreqlmm/Iyew1i6Tsa/JJQWw= Subject key identifier: F8:59:AE:41:93:0D:36:4F:78:33:49:DB:76:C9:5C:A7:A1:C6:9A:85 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEC62D8ED6DC6D7A60EE1F298 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/576c1961-e4f9-37db-9405-56d9c89bd942.roa Signing time: Wed 20 Aug 2025 21:50:42 +0000 ROA not before: Wed 20 Aug 2025 21:50:42 +0000 ROA not after: Tue 18 Nov 2025 22:50:42 +0000 asID: 19905 IP address blocks: 173.28.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ec:62:d8:ed:6d:c6:d7:a6:0e:e1:f2:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 20 21:50:42 2025 GMT Not After : Nov 18 22:50:42 2025 GMT Subject: CN=d509fa5f-cd2f-4514-bb11-513080296ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4c:64:8a:02:43:ec:0d:b4:63:69:ae:ea:2a: d7:52:09:75:8c:d9:d5:a1:7f:a1:23:62:06:ef:53: dc:74:ba:98:b1:49:0e:32:c2:d0:81:ab:b0:2b:8e: 60:2b:b4:da:ef:3a:ce:f8:18:d2:c1:8b:e3:fc:8c: d1:11:84:aa:78:95:cd:29:8f:41:d6:01:5f:1d:ed: bf:11:9e:66:11:5b:58:73:25:cc:9e:9b:03:e3:17: 2b:2b:af:9d:d5:4f:a4:2e:f0:64:8b:97:09:bc:72: f1:df:f5:60:bc:64:fb:f0:df:12:22:95:15:57:e4: e0:2f:41:86:bb:61:46:59:2a:69:9d:d5:9a:84:da: d2:94:a8:46:23:6b:a6:b5:fb:eb:ea:7a:56:15:1b: 8e:01:97:94:0a:86:31:a4:38:3d:17:87:ad:75:1f: d7:ad:b7:43:40:25:07:b4:06:b4:86:f5:9d:a9:47: e5:cb:c2:8d:31:c1:3c:a1:a5:43:4a:b8:3b:3e:f0: 06:52:18:8e:3a:b6:7f:81:d1:de:2e:a5:41:81:51: 4a:59:50:0c:dc:80:eb:16:6e:dc:8d:79:0a:58:97: 8f:4a:f9:cd:f6:27:c6:82:39:10:2a:36:ae:02:a3: 0a:c7:b4:a9:5d:a5:44:07:0b:27:2e:89:fd:57:82: 32:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:AE:41:93:0D:36:4F:78:33:49:DB:76:C9:5C:A7:A1:C6:9A:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/576c1961-e4f9-37db-9405-56d9c89bd942.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d4:df:f3:22:29:16:7d:a8:c2:ef:2e:1a:b4:02:42:de:8c: ff:ea:4f:29:2b:5a:63:e6:30:c6:36:1e:14:48:24:cd:12:7d: 2f:63:fa:ef:82:41:1e:d0:6f:72:21:25:fa:38:0a:37:d9:b6: 13:d4:2a:49:83:eb:71:59:86:5c:c7:37:ce:5f:25:e0:27:b8: 24:25:aa:55:f0:15:9d:a2:83:07:7e:e3:9c:44:54:5e:1b:cb: ea:4a:a1:46:87:1b:5f:7e:ce:d8:63:74:00:3d:be:f4:49:7c: 51:28:3b:96:44:02:63:83:47:26:cb:a2:46:a7:9d:41:32:03: 4d:c0:f4:4a:f4:43:84:1c:0d:53:e9:17:32:ab:d3:e2:3c:c3: a0:5f:84:29:1e:5f:82:d9:a1:4a:1b:aa:47:20:f6:01:e3:6c: 82:97:77:4f:fb:6b:aa:c0:50:f0:42:08:d3:3d:8a:06:31:8e: 74:a6:75:f1:27:f4:0b:24:df:e6:fd:9a:f0:87:a3:d0:e7:c4: d0:d9:a1:cb:62:cc:4f:6c:9a:19:6d:b6:54:fb:e2:a9:81:d3: 42:11:27:2e:59:90:93:6f:9c:68:c6:b5:fc:94:c9:ee:cb:1b: f2:f4:72:a4:b3:b5:53:86:fc:64:9c:9e:62:a1:0a:dc:1a:10: b1:25:22:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErsYtjtbcbXpg7h8pgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMDIxNTA0MloXDTI1MTExODIyNTA0MlowLzEtMCsGA1UEAxMk ZDUwOWZhNWYtY2QyZi00NTE0LWJiMTEtNTEzMDgwMjk2YWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnExkigJD7A20Y2mu6irXUgl1jNnVoX+hI2IG 71PcdLqYsUkOMsLQgauwK45gK7Ta7zrO+BjSwYvj/IzREYSqeJXNKY9B1gFfHe2/ EZ5mEVtYcyXMnpsD4xcrK6+d1U+kLvBki5cJvHLx3/VgvGT78N8SIpUVV+TgL0GG u2FGWSppndWahNrSlKhGI2umtfvr6npWFRuOAZeUCoYxpDg9F4etdR/XrbdDQCUH tAa0hvWdqUfly8KNMcE8oaVDSrg7PvAGUhiOOrZ/gdHeLqVBgVFKWVAM3IDrFm7c jXkKWJePSvnN9ifGgjkQKjauAqMKx7SpXaVEBwsnLon9V4IyxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhZrkGTDTZPeDNJ23bJXKehxpqFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTc2YzE5NjEtZTRmOS0z N2RiLTk0MDUtNTZkOWM4OWJkOTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHU3/MiKRZ9qMLvLhq0AkLejP/qTykrWmPmMMY2HhRIJM0SfS9j+u+C QR7Qb3IhJfo4CjfZthPUKkmD63FZhlzHN85fJeAnuCQlqlXwFZ2igwd+45xEVF4b y+pKoUaHG19+zthjdAA9vvRJfFEoO5ZEAmODRybLokannUEyA03A9Er0Q4QcDVPp FzKr0+I8w6BfhCkeX4LZoUobqkcg9gHjbIKXd0/7a6rAUPBCCNM9igYxjnSmdfEn 9Ask3+b9mvCHo9DnxNDZoctizE9smhlttlT74qmB00IRJy5ZkJNvnGjGtfyUye7L G/L0cqSztVOG/GScnmKhCtwaELElIkQ= -----END CERTIFICATE-----Generated at Sat Aug 23 06:41:58 2025 by rpki-client