$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa File: fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa (raw, json) Hash identifier: s8cj9MCWe6zuuAxMnvVAXHBqMoCoMM/Mlg7C0eiO0lU= Subject key identifier: 47:09:42:EA:04:15:ED:F9:07:40:23:8C:76:78:32:38:34:CC:32:6D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AEBC647D745C476C8F0D1BE40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa Signing time: Wed 20 Aug 2025 16:35:14 +0000 ROA not before: Wed 20 Aug 2025 16:35:14 +0000 ROA not after: Tue 18 Nov 2025 17:35:14 +0000 asID: 19905 IP address blocks: 173.28.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:eb:c6:47:d7:45:c4:76:c8:f0:d1:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 20 16:35:14 2025 GMT Not After : Nov 18 17:35:14 2025 GMT Subject: CN=984a8b1a-b1de-49e7-8757-c4a5b38e45ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d5:54:1b:2e:0e:20:65:27:95:5e:4b:f8:1f: c3:a9:71:43:c2:8d:ae:2b:bf:a0:5b:d8:2e:1d:0b: 41:b1:99:39:12:7d:ce:03:d6:ac:7f:a8:19:5c:fd: 39:a5:a5:45:7a:6e:de:3d:4b:4f:51:c9:71:59:39: 6c:bb:46:3d:6a:93:e9:5e:3d:36:f1:17:d9:e5:77: 61:41:10:d3:6c:21:40:19:55:ed:d8:12:f1:4e:f7: fe:2b:6e:df:d2:f1:24:ee:a4:03:77:ec:89:ab:b6: 2e:97:9b:26:1a:0e:55:94:6e:e5:1a:79:87:20:36: 81:28:fa:59:6a:d7:1c:e8:14:04:49:9f:c9:1e:4e: 84:53:d1:5d:2c:cb:66:31:e2:6d:95:49:46:38:0c: d4:81:31:1d:fd:a3:a6:08:2a:87:3f:b4:e9:62:1d: 0c:bf:06:4e:10:89:c3:61:a6:da:b8:47:3f:3c:76: b4:31:6e:5f:bb:24:de:3f:02:3c:6d:74:5a:36:fe: c6:63:93:28:b4:7b:da:09:ed:ca:68:bb:c8:71:1f: f0:a9:9a:c5:e0:da:c9:98:83:bf:83:c8:21:a7:35: 33:26:5c:94:ec:d4:81:a7:40:b6:2c:65:3b:f9:e5: 00:fc:3d:77:cf:33:18:98:c3:1d:4a:2c:c1:50:b9: ad:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:09:42:EA:04:15:ED:F9:07:40:23:8C:76:78:32:38:34:CC:32:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fb7f2e9c-c6f0-3924-a734-9620a3cb44dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:c6:a4:41:0a:e2:e5:7b:31:9a:13:8f:a0:47:bd:3b:0e:d8: d0:b4:33:85:ba:e3:5e:06:2d:9e:33:dc:31:b7:fc:22:71:3a: a6:f4:b7:70:55:54:ea:16:53:df:ca:8d:f8:2c:de:fa:e3:5c: 5c:25:5c:a0:4d:4f:88:0e:7d:f5:31:36:90:93:3a:30:19:09: 96:1b:5b:b1:ff:81:eb:84:46:e1:a6:e1:22:c9:a5:c8:a5:cc: f8:f3:88:3a:7f:46:3a:1f:2d:82:c9:9e:0b:cd:6d:a7:95:70: 8b:3d:c7:0b:93:29:da:77:c9:9b:dd:b7:39:b8:dd:2b:a9:a3: 77:7d:ef:7b:7b:ff:07:e6:76:85:c6:30:b7:d4:6f:7a:e3:98: cf:37:22:b1:94:c7:cb:42:46:f1:82:ad:be:cb:96:f7:ae:46: 61:bb:b1:a4:90:10:ad:81:22:6e:4b:05:3b:88:b7:bb:6c:2a: c6:d4:82:c0:f1:4d:a7:5a:17:fa:86:96:f9:3b:28:b9:39:ea: af:64:58:3e:81:b4:ad:90:cc:e6:94:72:62:70:95:a6:9f:cf: 4d:1b:01:7d:c2:46:40:d1:3f:10:b2:e1:2f:c9:5b:a3:1a:32: 10:6d:f7:3c:a9:a4:e2:30:b8:f4:66:02:b0:40:1a:dc:16:3e: 06:16:a2:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErrxkfXRcR2yPDRvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMDE2MzUxNFoXDTI1MTExODE3MzUxNFowLzEtMCsGA1UEAxMk OTg0YThiMWEtYjFkZS00OWU3LTg3NTctYzRhNWIzOGU0NWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdVUGy4OIGUnlV5L+B/DqXFDwo2uK7+gW9gu HQtBsZk5En3OA9asf6gZXP05paVFem7ePUtPUclxWTlsu0Y9apPpXj028RfZ5Xdh QRDTbCFAGVXt2BLxTvf+K27f0vEk7qQDd+yJq7Yul5smGg5VlG7lGnmHIDaBKPpZ atcc6BQESZ/JHk6EU9FdLMtmMeJtlUlGOAzUgTEd/aOmCCqHP7TpYh0MvwZOEInD YabauEc/PHa0MW5fuyTePwI8bXRaNv7GY5MotHvaCe3KaLvIcR/wqZrF4NrJmIO/ g8ghpzUzJlyU7NSBp0C2LGU7+eUA/D13zzMYmMMdSizBULmt9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcJQuoEFe35B0AjjHZ4Mjg0zDJtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmI3ZjJlOWMtYzZmMC0z OTI0LWE3MzQtOTYyMGEzY2I0NGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfGpEEK4uV7MZoTj6BHvTsO2NC0M4W6414GLZ4z3DG3/CJxOqb0t3BV VOoWU9/Kjfgs3vrjXFwlXKBNT4gOffUxNpCTOjAZCZYbW7H/geuERuGm4SLJpcil zPjziDp/RjofLYLJngvNbaeVcIs9xwuTKdp3yZvdtzm43Supo3d973t7/wfmdoXG MLfUb3rjmM83IrGUx8tCRvGCrb7LlveuRmG7saSQEK2BIm5LBTuIt7tsKsbUgsDx TadaF/qGlvk7KLk56q9kWD6BtK2QzOaUcmJwlaafz00bAX3CRkDRPxCy4S/JW6Ma MhBt9zyppOIwuPRmArBAGtwWPgYWonA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:44 2025 by rpki-client