$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa File: 9b005c65-376f-3814-9c4b-33d2d6b1966f.roa (raw, json) Hash identifier: fPTh3CipB3f+jnkOra/2+dO1/By+9V2CEoZCXSG0FQM= Subject key identifier: F4:AB:7E:42:3A:A7:EB:BA:E5:B9:5E:AD:01:AF:21:7A:72:D7:3C:28 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEEA74CBED62BE3848C18E380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa Signing time: Thu 21 Aug 2025 17:20:14 +0000 ROA not before: Thu 21 Aug 2025 17:20:14 +0000 ROA not after: Wed 19 Nov 2025 18:20:14 +0000 asID: 30036 IP address blocks: 173.28.116.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:a7:4c:be:d6:2b:e3:84:8c:18:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 21 17:20:14 2025 GMT Not After : Nov 19 18:20:14 2025 GMT Subject: CN=538bd5a3-8168-4ab1-8846-3aa3ce260e13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:81:c7:78:a9:f0:0a:cf:fd:85:40:ad:8c: 73:fe:66:5d:37:7c:ab:41:a3:80:86:29:29:41:3b: 52:94:d0:a2:0c:d2:bf:9c:8e:a5:03:34:57:89:a3: d5:7b:6a:ef:05:54:63:bf:c6:9b:14:a6:90:7d:2a: bd:10:a5:f6:17:4c:77:66:a4:68:43:45:b3:e8:90: 44:c0:6d:0d:29:60:fb:97:be:93:5c:dc:6b:e1:fe: 98:a7:52:97:3c:06:47:f2:76:c2:4b:98:4c:4c:a4: c5:8b:d6:54:bd:11:7e:c9:4a:b1:cc:6f:af:1a:4f: a7:ab:4f:cf:f3:9a:e8:be:9b:27:52:3e:17:c4:d1: c6:0e:bd:51:ff:7a:94:6f:9e:7f:cd:4b:a4:83:30: 52:20:e7:a3:fe:12:c3:12:7b:ba:8a:35:b3:08:18: 1b:fa:b9:25:df:3f:bc:d7:f7:ef:c3:98:16:36:d3: 6a:a5:dd:ba:8c:7b:51:4b:22:f3:24:83:07:68:a1: 81:0a:2c:51:85:dd:3f:3a:04:0c:c8:04:5c:08:6d: f7:4c:ae:bb:2f:97:97:06:7e:fb:11:45:eb:ea:78: e5:1f:f0:27:44:b1:9c:e2:ea:0a:72:5c:67:f9:f8: 64:b7:e8:89:df:8a:be:79:5f:1a:57:c4:99:2b:cb: 9d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AB:7E:42:3A:A7:EB:BA:E5:B9:5E:AD:01:AF:21:7A:72:D7:3C:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9b005c65-376f-3814-9c4b-33d2d6b1966f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:41:b8:11:c3:ac:06:06:56:9c:e3:66:68:d1:bb:91:4d:b7: 7a:5e:35:63:c2:b8:41:d0:0e:9b:f4:f6:59:81:2c:93:be:57: 34:96:df:d1:73:94:30:07:42:8c:04:40:3b:fe:29:20:93:50: 06:2a:1a:6f:fb:aa:d3:5d:8d:d6:3b:f0:e7:39:90:0c:e2:68: 70:8a:5c:72:37:1c:25:8d:4b:30:9c:b7:46:20:e3:46:39:88: 37:f8:81:ad:b6:07:4c:0f:a8:42:25:a4:d7:58:0a:3b:bc:2e: 02:fa:50:44:57:34:55:f0:84:92:47:62:50:3c:c8:6e:e9:2b: 7a:f7:0a:93:c1:a3:fd:08:cb:e8:f4:0e:6e:10:4d:8f:26:f6: 06:83:bc:e7:20:a4:ee:86:77:bd:b3:ce:c8:e7:72:62:f7:4d: 7b:77:d7:b1:3f:59:52:68:5f:db:91:67:07:cd:da:d5:8a:f6: f9:65:65:07:ca:0c:a1:16:0b:ed:bb:cb:59:de:e8:22:b5:d4: cf:bf:77:e5:17:4c:5c:9c:d4:36:75:61:71:23:b8:11:04:d0: d5:3a:5b:52:ec:0b:e6:f0:0f:51:ec:d8:f1:ce:fc:db:98:8e: fa:df:11:93:61:9f:55:9a:e1:cb:e6:94:fd:2c:ee:0f:53:50: ea:52:0b:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErup0y+1ivjhIwY44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMTE3MjAxNFoXDTI1MTExOTE4MjAxNFowLzEtMCsGA1UEAxMk NTM4YmQ1YTMtODE2OC00YWIxLTg4NDYtM2FhM2NlMjYwZTEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneKBx3ip8ArP/YVArYxz/mZdN3yrQaOAhikp QTtSlNCiDNK/nI6lAzRXiaPVe2rvBVRjv8abFKaQfSq9EKX2F0x3ZqRoQ0Wz6JBE wG0NKWD7l76TXNxr4f6Yp1KXPAZH8nbCS5hMTKTFi9ZUvRF+yUqxzG+vGk+nq0/P 85rovpsnUj4XxNHGDr1R/3qUb55/zUukgzBSIOej/hLDEnu6ijWzCBgb+rkl3z+8 1/fvw5gWNtNqpd26jHtRSyLzJIMHaKGBCixRhd0/OgQMyARcCG33TK67L5eXBn77 EUXr6njlH/AnRLGc4uoKclxn+fhkt+iJ34q+eV8aV8SZK8udkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPSrfkI6p+u65blerQGvIXpy1zwoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWIwMDVjNjUtMzc2Zi0z ODE0LTljNGItMzNkMmQ2YjE5NjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRx0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChBuBHDrAYGVpzjZmjRu5FNt3peNWPCuEHQDpv09lmBLJO+VzSW39Fz lDAHQowEQDv+KSCTUAYqGm/7qtNdjdY78Oc5kAziaHCKXHI3HCWNSzCct0Yg40Y5 iDf4ga22B0wPqEIlpNdYCju8LgL6UERXNFXwhJJHYlA8yG7pK3r3CpPBo/0Iy+j0 Dm4QTY8m9gaDvOcgpO6Gd72zzsjncmL3TXt317E/WVJoX9uRZwfN2tWK9vllZQfK DKEWC+27y1ne6CK11M+/d+UXTFyc1DZ1YXEjuBEE0NU6W1LsC+bwD1Hs2PHO/NuY jvrfEZNhn1Wa4cvmlP0s7g9TUOpSC8g= -----END CERTIFICATE-----Generated at Sat Aug 23 14:58:32 2025 by rpki-client