$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa File: ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa (raw, json) Hash identifier: hIRYDs5twjrgesLkuB9N2rUYlqzZBjXa+B99Ufify6U= Subject key identifier: D4:AC:25:F0:10:DC:02:63:25:D7:B5:F3:B0:95:A7:8D:17:4A:65:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AE7CA5DEDB7D6D72516BD7440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa Signing time: Tue 19 Aug 2025 06:20:14 +0000 ROA not before: Tue 19 Aug 2025 06:20:14 +0000 ROA not after: Mon 17 Nov 2025 07:20:14 +0000 asID: 30036 IP address blocks: 173.28.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e7:ca:5d:ed:b7:d6:d7:25:16:bd:74:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 19 06:20:14 2025 GMT Not After : Nov 17 07:20:14 2025 GMT Subject: CN=91f5864c-6bbb-416f-8f45-93ca4260386b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:61:d7:f2:e0:e8:0f:6a:fd:67:26:c1:44: 30:8e:1f:3b:b3:0a:41:6f:c6:bd:69:45:6c:07:68: 00:63:c2:d7:f3:0f:a0:71:96:8a:fd:8c:d2:15:7d: 97:30:4c:69:fd:71:33:79:1e:05:8a:58:0c:38:08: 85:88:95:4e:0f:98:6d:a6:cb:17:2d:63:4d:ac:4f: dd:e8:85:95:97:be:33:26:8d:73:19:de:76:6a:89: 07:b2:4d:0e:86:ee:35:2c:fe:88:54:a8:82:0a:b3: ec:ac:85:04:8a:67:d6:3e:43:12:d4:14:97:ab:1c: 68:82:2f:2b:5a:3f:08:c1:61:5c:4f:4a:2d:12:d5: 10:21:79:98:b4:d0:19:de:9f:73:d9:b7:8e:89:dd: fe:d6:a3:ab:e8:b4:5a:11:94:b0:58:5f:4f:a7:d1: 7f:a8:14:d9:3d:68:b3:a3:4d:ec:fd:72:fb:b8:3e: 8f:41:7e:ec:70:c6:0a:a5:7e:2e:d3:76:cb:63:74: 03:57:b0:13:90:c6:dc:3e:f3:73:d5:ff:dd:4f:68: c3:a3:6b:3f:ea:1e:06:d3:b2:f7:43:89:6c:76:70: 7d:e0:b9:c7:8b:51:66:00:9b:47:b5:e6:96:eb:79: 69:a8:af:de:3a:9c:e1:d4:a3:77:33:c3:43:69:35: 99:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AC:25:F0:10:DC:02:63:25:D7:B5:F3:B0:95:A7:8D:17:4A:65:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea3b8a9a-0855-394d-a31a-8c5f7e57d900.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:34:71:88:ff:91:81:d6:7f:84:ef:ab:9a:4c:82:f5:2f:bf: 31:4a:6c:a8:69:b7:f5:3e:58:b9:b9:48:ec:56:3f:5f:6d:73: 22:1f:27:e6:e6:ca:25:af:29:9e:e0:18:00:05:f2:de:04:13: d3:7b:e3:bc:2b:94:d3:55:e2:94:12:50:43:3c:97:97:34:ab: 78:26:02:4a:0e:1d:f6:49:86:7b:4a:87:7d:70:d5:f4:e9:7d: ed:45:11:95:f7:b7:6f:c2:94:ba:80:45:2a:8a:dd:f1:90:10: bd:ea:e5:55:4a:1e:3c:bf:4a:7b:a0:4d:d8:59:9f:67:b3:d6: 97:a1:2d:5f:43:39:69:1d:7b:69:5e:bd:14:eb:53:45:78:80: d0:d8:f0:68:6f:a9:a8:81:f0:cc:01:a6:44:37:d0:72:71:96: 48:16:2b:ec:3a:02:7d:25:e5:5d:6b:55:82:4d:a2:79:e1:2e: bb:64:55:27:8f:15:c8:a8:f4:31:a8:0a:2e:3c:4f:2e:5c:f0: a3:29:f2:4b:4b:ab:4d:83:37:93:91:19:72:15:bc:07:88:4a: 6d:7f:99:96:72:d8:2a:22:5a:19:dd:70:37:3c:e4:23:61:e3: 26:a8:06:b9:79:ec:b0:90:45:9c:c3:49:d4:f5:c3:9c:6c:a1: 69:52:2d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErnyl3tt9bXJRa9dEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxOTA2MjAxNFoXDTI1MTExNzA3MjAxNFowLzEtMCsGA1UEAxMk OTFmNTg2NGMtNmJiYi00MTZmLThmNDUtOTNjYTQyNjAzODZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/Rh1/Lg6A9q/WcmwUQwjh87swpBb8a9aUVs B2gAY8LX8w+gcZaK/YzSFX2XMExp/XEzeR4FilgMOAiFiJVOD5htpssXLWNNrE/d 6IWVl74zJo1zGd52aokHsk0Ohu41LP6IVKiCCrPsrIUEimfWPkMS1BSXqxxogi8r Wj8IwWFcT0otEtUQIXmYtNAZ3p9z2beOid3+1qOr6LRaEZSwWF9Pp9F/qBTZPWiz o03s/XL7uD6PQX7scMYKpX4u03bLY3QDV7ATkMbcPvNz1f/dT2jDo2s/6h4G07L3 Q4lsdnB94LnHi1FmAJtHteaW63lpqK/eOpzh1KN3M8NDaTWZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSsJfAQ3AJjJde187CVp40XSmUAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWEzYjhhOWEtMDg1NS0z OTRkLWEzMWEtOGM1ZjdlNTdkOTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACY0cYj/kYHWf4Tvq5pMgvUvvzFKbKhpt/U+WLm5SOxWP19tcyIfJ+bm yiWvKZ7gGAAF8t4EE9N747wrlNNV4pQSUEM8l5c0q3gmAkoOHfZJhntKh31w1fTp fe1FEZX3t2/ClLqARSqK3fGQEL3q5VVKHjy/SnugTdhZn2ez1pehLV9DOWkde2le vRTrU0V4gNDY8GhvqaiB8MwBpkQ30HJxlkgWK+w6An0l5V1rVYJNonnhLrtkVSeP Fcio9DGoCi48Ty5c8KMp8ktLq02DN5ORGXIVvAeISm1/mZZy2CoiWhndcDc85CNh 4yaoBrl57LCQRZzDSdT1w5xsoWlSLZc= -----END CERTIFICATE-----Generated at Sat Aug 23 14:50:58 2025 by rpki-client