$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28406e49-6b6b-3ffc-91c8-937f36d1008f.roa File: 28406e49-6b6b-3ffc-91c8-937f36d1008f.roa (raw, json) Hash identifier: Gk7b7+n2B1ly2cAur3ZVaXx2J1aJVm/5Gp6Y6WeOlLY= Subject key identifier: 8F:11:09:75:F6:1B:C4:81:01:D4:B2:7C:4D:F5:9B:0C:DB:59:5D:68 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA39D14FCD372FD972780AF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28406e49-6b6b-3ffc-91c8-937f36d1008f.roa Signing time: Sat 25 Oct 2025 13:00:39 +0000 ROA not before: Sat 25 Oct 2025 13:00:39 +0000 ROA not after: Fri 23 Jan 2026 14:00:39 +0000 asID: 30036 IP address blocks: 173.23.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a3:9d:14:fc:d3:72:fd:97:27:80:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 25 13:00:39 2025 GMT Not After : Jan 23 14:00:39 2026 GMT Subject: CN=6ce2b7a0-91a6-4ce5-b39c-9968979dea7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:e0:14:f4:17:27:b0:46:41:ca:50:9a:2a:7a: 0a:d4:45:4b:ff:e7:e9:d2:3a:22:f2:b3:43:d1:09: 2a:96:d3:0f:6b:aa:9a:12:25:84:c9:f3:21:5b:59: 88:86:6b:3b:99:8b:20:3b:75:a7:fe:92:31:df:da: 4b:d9:1d:88:af:80:76:10:9a:8b:3a:03:b0:ed:db: e8:1a:d1:e9:16:30:1d:7a:1c:b6:d2:bb:81:be:45: fa:35:f2:d7:81:b8:12:97:73:6d:fe:99:5c:1c:da: aa:63:4f:53:18:82:c6:7e:c2:ea:d5:f4:bc:6b:68: 2f:88:42:4f:f2:d6:93:fc:27:d2:fd:aa:aa:48:ec: 37:b0:75:27:19:f0:bd:a0:8f:7d:27:3d:19:61:8d: da:57:89:98:14:bc:04:2c:bb:28:93:4d:6b:7f:7a: 77:cb:0f:92:d2:52:2c:97:c9:f5:21:e8:a5:aa:a4: 85:d0:6f:93:a0:e0:64:b5:0f:db:2d:59:10:e6:9d: d0:20:3c:10:02:70:b6:c4:aa:d8:8b:9e:59:49:1e: 09:17:16:e1:00:a8:43:ff:6d:8b:59:74:8e:f0:12: c4:07:f2:be:69:72:83:fa:f8:1b:1e:51:e7:ac:cb: c3:0e:6a:27:ff:0f:e3:d9:43:b6:03:d8:c6:9f:82: 5d:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:11:09:75:F6:1B:C4:81:01:D4:B2:7C:4D:F5:9B:0C:DB:59:5D:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28406e49-6b6b-3ffc-91c8-937f36d1008f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:28:f8:3f:64:68:83:9f:6f:73:fd:0b:3d:48:be:99:39:a8: 80:66:0d:3c:9f:d3:99:fe:0a:dc:82:83:d8:59:41:4d:99:49: d4:79:76:77:3f:f4:4a:d7:66:d4:6c:1f:f8:2b:d2:5d:63:b6: 25:be:74:57:9a:d1:7b:b9:b8:f7:fe:64:f3:a8:1d:a7:ca:64: ee:92:e0:c0:91:1e:cf:3a:12:50:5b:a4:11:5b:72:76:3a:a4: e1:82:d0:ef:02:62:97:f4:3e:9e:e8:06:6d:f7:84:20:97:f2: 76:8d:80:a3:3e:a7:27:e2:1d:be:49:23:54:35:fb:8c:59:cb: 95:95:c9:fe:f4:8f:a7:5f:b0:d6:3f:b9:33:aa:5f:10:0c:2c: 38:b4:38:83:89:cf:c8:6e:79:57:bc:d2:90:a3:01:0c:5d:b6: af:00:9e:4e:c8:e6:b9:41:fd:5e:93:0d:89:b7:60:6f:ed:8a: 9d:12:dd:6d:34:fa:40:79:1c:2d:10:da:8f:77:30:b6:ba:53: 8e:42:ab:c6:4c:f4:ee:c0:1f:bf:11:f9:e7:f1:7d:53:dd:a6: 11:e1:b4:43:90:e5:7e:84:4f:6a:21:c5:20:ad:bb:f1:18:b8: 32:09:2b:41:3a:7b:75:5e:00:6b:3d:75:fb:90:86:e8:db:b8: 91:4c:7c:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEujnRT803L9lyeAr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNTEzMDAzOVoXDTI2MDEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NmNlMmI3YTAtOTFhNi00Y2U1LWIzOWMtOTk2ODk3OWRlYTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhOAU9BcnsEZBylCaKnoK1EVL/+fp0joi8rND 0QkqltMPa6qaEiWEyfMhW1mIhms7mYsgO3Wn/pIx39pL2R2Ir4B2EJqLOgOw7dvo GtHpFjAdehy20ruBvkX6NfLXgbgSl3Nt/plcHNqqY09TGILGfsLq1fS8a2gviEJP 8taT/CfS/aqqSOw3sHUnGfC9oI99Jz0ZYY3aV4mYFLwELLsok01rf3p3yw+S0lIs l8n1IeilqqSF0G+ToOBktQ/bLVkQ5p3QIDwQAnC2xKrYi55ZSR4JFxbhAKhD/22L WXSO8BLEB/K+aXKD+vgbHlHnrMvDDmon/w/j2UO2A9jGn4JdbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8RCXX2G8SBAdSyfE31mwzbWV1oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjg0MDZlNDktNmI2Yi0z ZmZjLTkxYzgtOTM3ZjM2ZDEwMDhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRc6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAo+D9kaIOfb3P9Cz1Ivpk5qIBmDTyf05n+CtyCg9hZQU2ZSdR5dnc/ 9ErXZtRsH/gr0l1jtiW+dFea0Xu5uPf+ZPOoHafKZO6S4MCRHs86ElBbpBFbcnY6 pOGC0O8CYpf0Pp7oBm33hCCX8naNgKM+pyfiHb5JI1Q1+4xZy5WVyf70j6dfsNY/ uTOqXxAMLDi0OIOJz8hueVe80pCjAQxdtq8Ank7I5rlB/V6TDYm3YG/tip0S3W00 +kB5HC0Q2o93MLa6U45Cq8ZM9O7AH78R+efxfVPdphHhtEOQ5X6ET2ohxSCtu/EY uDIJK0E6e3VeAGs9dfuQhujbuJFMfIo= -----END CERTIFICATE-----Generated at Wed Nov 5 04:19:44 2025 by rpki-client