$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa File: 85af895f-0757-3ea8-a007-a06abab08648.roa (raw, json) Hash identifier: RpGPLOEIQ2SdPyDJF4mwrnviG6/eqxe1xsGPP08iWRU= Subject key identifier: 42:9B:86:52:C4:81:6E:FA:5D:3E:08:15:E4:7B:7D:9D:02:FE:EA:A3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEEA74CBB9065A623741D3CF0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa Signing time: Thu 21 Aug 2025 17:20:14 +0000 ROA not before: Thu 21 Aug 2025 17:20:14 +0000 ROA not after: Wed 19 Nov 2025 18:20:14 +0000 asID: 19905 IP address blocks: 173.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a7:4c:bb:90:65:a6:23:74:1d:3c:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 17:20:14 2025 GMT Not After : Nov 19 18:20:14 2025 GMT Subject: CN=f763b264-5168-43f0-87ed-8da46a7a7b26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c0:50:48:8f:4e:13:de:bc:f3:8d:f1:e1:56: 56:52:83:ac:be:37:f4:65:f1:c6:ab:6a:02:50:1a: b9:5c:3a:03:d6:68:88:3d:59:91:b9:d6:10:6a:00: 2e:96:93:13:59:01:36:d4:63:69:23:a4:dc:e2:88: ee:b3:7f:5c:ee:e5:1a:f6:04:18:c9:e6:d9:29:a8: 25:94:bf:1b:ec:c4:bc:0d:be:3f:ee:68:55:a1:89: 10:1d:30:05:c5:b7:31:f7:5a:af:1a:bc:ad:cd:79: b5:41:64:df:07:b5:b8:ba:56:71:1c:23:e8:54:c2: 35:14:5b:9e:19:9c:ca:fe:ad:fb:43:4e:f1:4b:1f: 2a:3a:9f:07:93:49:85:f5:17:64:94:cc:7f:37:31: 3d:da:36:f4:63:e9:42:a2:0d:f2:eb:dc:d2:d1:38: fc:8e:34:47:0b:6c:44:73:95:d5:ae:1e:73:d1:86: 11:9e:37:d1:b4:00:0b:a2:3f:f6:0a:91:b8:41:0c: 53:26:4e:59:c0:30:98:f4:bb:c8:71:c5:b9:93:f8: 20:a1:50:cf:46:8f:e2:2d:66:aa:2f:39:ab:01:54: 8c:b8:bb:3a:d1:25:1e:76:a4:e9:a4:4e:ed:49:62: 00:c5:04:06:ed:7b:f9:6e:d6:b3:80:3a:f3:ea:11: 47:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9B:86:52:C4:81:6E:FA:5D:3E:08:15:E4:7B:7D:9D:02:FE:EA:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85af895f-0757-3ea8-a007-a06abab08648.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a2:c7:fa:e2:7c:5a:7d:93:a6:d5:3e:4d:bf:c4:12:a0:55: ee:23:8f:79:f3:35:fd:b9:3d:69:0a:94:eb:d4:3c:e1:0e:11: 10:63:9a:28:19:0e:9e:bf:8d:81:88:61:ad:36:cd:88:1c:22: b6:66:ba:e5:c4:29:5a:72:f0:8e:46:e5:ed:0f:27:52:94:6d: 3d:70:13:16:32:ae:17:00:f6:e8:10:92:33:19:1d:86:71:b4: e2:96:03:34:a3:67:35:4b:05:1f:a4:0c:8a:d1:cd:85:8e:33: 87:16:40:14:84:56:b6:eb:fb:06:f7:f0:e9:98:2e:6d:b4:34: 79:f6:88:33:43:16:e8:09:39:dd:f7:c8:2d:91:41:e8:93:56: ce:3c:56:79:59:51:a3:64:c4:42:79:91:5d:4c:a9:d1:87:df: 98:26:d6:f7:35:2a:ae:3a:5f:a6:3f:8b:51:b1:31:6f:b5:98: 80:1f:de:2d:1f:bc:ac:08:e3:71:5b:f8:ef:7a:ae:95:3d:9f: 12:e1:9a:59:35:71:e6:b5:c3:16:7f:cf:aa:28:d0:5e:d1:23: 00:8c:bb:48:26:fc:49:81:9c:72:1f:34:89:7e:35:df:8c:6e: 01:91:3d:6c:6c:ac:d4:4d:2c:8c:96:76:9f:92:f6:eb:2f:2f: 16:c1:67:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErup0y7kGWmI3QdPPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMTE3MjAxNFoXDTI1MTExOTE4MjAxNFowLzEtMCsGA1UEAxMk Zjc2M2IyNjQtNTE2OC00M2YwLTg3ZWQtOGRhNDZhN2E3YjI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMBQSI9OE968843x4VZWUoOsvjf0ZfHGq2oC UBq5XDoD1miIPVmRudYQagAulpMTWQE21GNpI6Tc4ojus39c7uUa9gQYyebZKagl lL8b7MS8Db4/7mhVoYkQHTAFxbcx91qvGrytzXm1QWTfB7W4ulZxHCPoVMI1FFue GZzK/q37Q07xSx8qOp8Hk0mF9RdklMx/NzE92jb0Y+lCog3y69zS0Tj8jjRHC2xE c5XVrh5z0YYRnjfRtAALoj/2CpG4QQxTJk5ZwDCY9LvIccW5k/ggoVDPRo/iLWaq LzmrAVSMuLs60SUedqTppE7tSWIAxQQG7Xv5btazgDrz6hFHRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKbhlLEgW76XT4IFeR7fZ0C/uqjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVhZjg5NWYtMDc1Ny0z ZWE4LWEwMDctYTA2YWJhYjA4NjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiix/rifFp9k6bVPk2/xBKgVe4jj3nzNf25PWkKlOvUPOEOERBjmigZ Dp6/jYGIYa02zYgcIrZmuuXEKVpy8I5G5e0PJ1KUbT1wExYyrhcA9ugQkjMZHYZx tOKWAzSjZzVLBR+kDIrRzYWOM4cWQBSEVrbr+wb38OmYLm20NHn2iDNDFugJOd33 yC2RQeiTVs48VnlZUaNkxEJ5kV1MqdGH35gm1vc1Kq46X6Y/i1GxMW+1mIAf3i0f vKwI43Fb+O96rpU9nxLhmlk1cea1wxZ/z6oo0F7RIwCMu0gm/EmBnHIfNIl+Nd+M bgGRPWxsrNRNLIyWdp+S9usvLxbBZ3g= -----END CERTIFICATE-----Generated at Sat Aug 23 06:40:51 2025 by rpki-client