$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa File: 5cab320d-a4cf-396c-878a-4196119fbff5.roa (raw, json) Hash identifier: 4F2eZHTfzNbYzZHN5hskctu5i1hGAGfnpn6ArA7OAyg= Subject key identifier: 42:C9:67:0F:60:61:28:97:12:1C:78:FE:7C:1F:8E:94:91:02:17:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEBFA64D3664C219271880B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa Signing time: Wed 20 Aug 2025 18:20:14 +0000 ROA not before: Wed 20 Aug 2025 18:20:14 +0000 ROA not after: Tue 18 Nov 2025 19:20:14 +0000 asID: 19905 IP address blocks: 173.28.20.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:fa:64:d3:66:4c:21:92:71:88:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 20 18:20:14 2025 GMT Not After : Nov 18 19:20:14 2025 GMT Subject: CN=095fd151-2baf-4c7b-b15c-a789ae075eaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:da:26:98:3b:d0:67:0e:d6:24:41:3e:ba:c1: 72:31:ff:84:a4:2b:6e:31:18:5e:c5:c7:6f:26:a5: 05:a2:5b:48:16:0f:82:2d:ef:7e:5c:fa:d2:00:7d: 99:95:3d:c4:0e:29:64:97:f4:8a:c3:cf:a2:ae:b9: ce:37:fe:b2:30:8d:2d:e0:36:a4:0c:9f:00:0d:59: c4:44:82:4e:b1:4f:c4:64:98:c2:b8:88:11:82:87: 1c:22:26:c5:ad:37:66:52:72:f5:8d:c6:b8:ff:8a: fe:9c:d6:47:ec:2b:c2:76:a9:ff:9b:3a:3b:2c:50: 1b:9c:60:b2:87:62:e6:23:dd:63:0b:bf:78:af:65: 5f:20:5a:d5:9e:79:4d:1e:46:97:1c:9c:ed:34:4f: 19:f2:36:18:1e:39:5b:81:f1:cb:76:f1:ba:75:ab: 2c:3d:2b:73:cd:12:5e:54:66:97:fb:d3:3a:a9:a5: 96:1f:91:d3:5a:ef:de:ca:0c:d7:01:dc:0f:f9:8b: d7:02:e9:03:31:5a:a8:cb:a3:fb:ac:a5:67:54:66: 98:a1:7e:e4:ce:a3:b4:07:5e:4d:56:45:42:e9:37: 8f:3a:f3:56:87:48:49:6f:bf:4f:fd:86:72:54:f1: 5a:eb:12:d2:2a:69:ac:fb:ed:42:c9:1f:61:cd:f0: 4e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:C9:67:0F:60:61:28:97:12:1C:78:FE:7C:1F:8E:94:91:02:17:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5cab320d-a4cf-396c-878a-4196119fbff5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:ea:44:6a:39:c3:52:7e:5a:58:49:55:4e:da:80:8b:3c:fe: 5f:de:2a:3f:0f:50:02:fc:ad:5f:0c:d1:48:2c:3e:c0:16:0f: f5:ca:04:d4:ca:a0:ac:c9:9c:4b:08:20:90:4b:1d:16:27:e0: b5:b0:b8:bc:27:c4:7a:83:9e:3f:57:6b:09:25:f7:49:30:48: f9:45:b0:2b:10:16:83:a2:fd:64:05:43:3b:5d:46:e6:99:c0: 8d:8a:26:3b:f5:bb:48:62:90:39:01:dd:8d:2e:b3:fe:93:19: 24:59:99:ae:45:a7:08:a8:c8:88:68:07:e5:25:13:86:53:76: 95:35:88:cb:d2:9a:88:13:b8:81:7e:e8:dd:bf:61:52:09:1b: 8d:a7:3c:1b:8d:5d:4e:d0:dc:14:f8:51:c1:14:b1:ad:9f:10: 20:93:e2:b7:b0:c9:84:72:6b:df:b2:4b:62:23:18:87:66:7a: 90:1b:24:27:33:bb:1d:65:46:ac:69:a8:b9:0f:6b:ef:b5:a4: 3f:73:82:78:60:96:81:a0:71:e4:cd:61:f5:76:b3:2b:c6:42: 7a:a2:17:c3:eb:92:22:a7:e8:0f:d8:80:1e:71:fe:4c:2c:a8: b7:aa:be:d6:b2:03:7d:8d:30:3e:4b:ed:3f:f9:18:3f:0c:e0: b7:c8:51:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErr+mTTZkwhknGICwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMDE4MjAxNFoXDTI1MTExODE5MjAxNFowLzEtMCsGA1UEAxMk MDk1ZmQxNTEtMmJhZi00YzdiLWIxNWMtYTc4OWFlMDc1ZWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtommDvQZw7WJEE+usFyMf+EpCtuMRhexcdv JqUFoltIFg+CLe9+XPrSAH2ZlT3EDilkl/SKw8+irrnON/6yMI0t4DakDJ8ADVnE RIJOsU/EZJjCuIgRgoccIibFrTdmUnL1jca4/4r+nNZH7CvCdqn/mzo7LFAbnGCy h2LmI91jC794r2VfIFrVnnlNHkaXHJztNE8Z8jYYHjlbgfHLdvG6dassPStzzRJe VGaX+9M6qaWWH5HTWu/eygzXAdwP+YvXAukDMVqoy6P7rKVnVGaYoX7kzqO0B15N VkVC6TePOvNWh0hJb79P/YZyVPFa6xLSKmms++1CyR9hzfBOKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELJZw9gYSiXEhx4/nwfjpSRAhdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWNhYjMyMGQtYTRjZi0z OTZjLTg3OGEtNDE5NjExOWZiZmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzqRGo5w1J+WlhJVU7agIs8/l/eKj8PUAL8rV8M0UgsPsAWD/XKBNTK oKzJnEsIIJBLHRYn4LWwuLwnxHqDnj9Xawkl90kwSPlFsCsQFoOi/WQFQztdRuaZ wI2KJjv1u0hikDkB3Y0us/6TGSRZma5FpwioyIhoB+UlE4ZTdpU1iMvSmogTuIF+ 6N2/YVIJG42nPBuNXU7Q3BT4UcEUsa2fECCT4rewyYRya9+yS2IjGIdmepAbJCcz ux1lRqxpqLkPa++1pD9zgnhgloGgceTNYfV2syvGQnqiF8PrkiKn6A/YgB5x/kws qLeqvtayA32NMD5L7T/5GD8M4LfIUW8= -----END CERTIFICATE-----Generated at Sat Aug 23 08:13:40 2025 by rpki-client