$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa File: 28c108a8-055a-3386-8983-b364c0e31f14.roa (raw, json) Hash identifier: +2faVdiuciKCVFceAbvKzTvGhpE1IWCfsvnqhKPkNVw= Subject key identifier: 64:CB:08:22:AF:56:7D:A4:F8:A0:59:23:F3:78:AF:6F:16:A6:26:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A7BB0AC1A9A01C63A808D8C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa Signing time: Fri 11 Jul 2025 13:01:05 +0000 ROA not before: Fri 11 Jul 2025 13:01:05 +0000 ROA not after: Thu 09 Oct 2025 13:01:05 +0000 asID: 19905 IP address blocks: 173.28.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7b:b0:ac:1a:9a:01:c6:3a:80:8d:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 11 13:01:05 2025 GMT Not After : Oct 9 13:01:05 2025 GMT Subject: CN=d22b9e3d-bd36-4ab2-aa4f-1e59dcaf4758 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fc:55:e6:e3:c8:f6:dc:2e:ad:8a:1b:24:56: c4:3f:22:85:c3:e7:69:2f:87:fd:ec:8c:95:84:07: db:58:94:84:7d:f2:0a:02:77:c2:84:f7:05:70:b9: 8c:9b:78:c7:66:d5:43:c2:42:32:90:bc:1e:c0:06: 5f:35:42:ee:53:db:26:51:00:4e:7a:fe:c0:47:3f: 0c:1f:f3:ff:87:c6:21:77:44:94:10:ca:67:e1:1f: d1:6a:ce:8c:f5:ec:66:97:29:51:61:5a:19:cc:06: d9:c2:3e:92:b4:f7:c9:61:0d:86:0e:1a:ac:c0:7d: 88:66:2a:04:76:99:25:b0:fd:ed:c3:8e:1f:4b:16: ed:9e:fb:e7:3b:02:18:38:02:7d:ca:3a:60:55:83: 29:29:e9:f0:eb:e4:dd:06:52:b0:27:c0:f2:3e:0f: 77:15:a7:e0:10:5e:af:24:56:6b:68:02:f7:7c:1c: 8e:72:1a:52:82:3b:35:0b:1b:84:c5:e4:da:35:7c: 2f:7a:36:d0:60:4f:a7:c3:e4:63:74:a5:f1:45:d4: d2:6c:cf:b7:be:db:70:7a:73:c6:bf:b6:12:8b:3a: eb:02:55:28:c8:a8:dc:5c:93:d0:46:4b:88:2b:f5: f3:df:db:ad:c1:e1:7b:f9:6a:e5:5a:c5:46:31:fb: 3d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CB:08:22:AF:56:7D:A4:F8:A0:59:23:F3:78:AF:6F:16:A6:26:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/28c108a8-055a-3386-8983-b364c0e31f14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ca:8a:29:a7:64:05:0b:c3:1f:ec:b6:9d:55:f4:00:6d:70: 6e:2e:54:3c:bd:bd:ce:b6:cf:a6:e9:df:69:62:cf:c1:4c:7d: ea:d0:3e:56:e7:ca:4d:1e:5d:6a:55:f2:bb:d5:0c:ec:ee:b0: c1:dc:92:a3:87:c7:a4:1c:15:21:2f:d0:1c:1f:69:44:65:ce: ac:37:18:be:1a:95:c0:d0:41:6d:5f:9e:5c:e7:35:ec:e4:04: ad:50:45:46:43:f2:0b:3c:d9:c4:71:54:01:46:98:91:be:ea: 1e:07:3d:45:11:e5:bf:5c:f3:2b:cf:24:6d:27:72:c9:35:02: 48:89:e1:fe:81:6c:6d:db:ed:87:d3:c8:35:f6:35:a8:73:e0: 6d:e0:fb:38:e4:21:29:7d:47:84:7d:54:99:0c:06:2f:73:38: 19:53:7e:85:52:f8:cb:97:9e:72:4a:63:08:76:8f:89:df:19: da:ac:f5:07:be:d3:34:be:da:b1:2a:31:19:41:1c:2e:99:aa: c4:18:eb:59:57:db:80:2b:ba:41:ab:b5:f1:1b:a0:bb:3e:fe: fc:05:a7:39:e3:91:27:48:4f:b3:eb:82:fb:b2:3d:26:b3:82: e9:ef:fa:09:f4:a9:e0:9a:22:25:03:56:f4:1f:1b:87:fb:08: c7:1f:d5:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp7sKwamgHGOoCNjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk ZDIyYjllM2QtYmQzNi00YWIyLWFhNGYtMWU1OWRjYWY0NzU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPxV5uPI9twurYobJFbEPyKFw+dpL4f97IyV hAfbWJSEffIKAnfChPcFcLmMm3jHZtVDwkIykLwewAZfNULuU9smUQBOev7ARz8M H/P/h8Yhd0SUEMpn4R/Ras6M9exmlylRYVoZzAbZwj6StPfJYQ2GDhqswH2IZioE dpklsP3tw44fSxbtnvvnOwIYOAJ9yjpgVYMpKenw6+TdBlKwJ8DyPg93FafgEF6v JFZraAL3fByOchpSgjs1CxuExeTaNXwvejbQYE+nw+RjdKXxRdTSbM+3vttwenPG v7YSizrrAlUoyKjcXJPQRkuIK/Xz39utweF7+WrlWsVGMfs9zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTLCCKvVn2k+KBZI/N4r28Wpia7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjhjMTA4YTgtMDU1YS0z Mzg2LTg5ODMtYjM2NGMwZTMxZjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADnKiimnZAULwx/stp1V9ABtcG4uVDy9vc62z6bp32liz8FMferQPlbn yk0eXWpV8rvVDOzusMHckqOHx6QcFSEv0BwfaURlzqw3GL4alcDQQW1fnlznNezk BK1QRUZD8gs82cRxVAFGmJG+6h4HPUUR5b9c8yvPJG0ncsk1AkiJ4f6BbG3b7YfT yDX2Nahz4G3g+zjkISl9R4R9VJkMBi9zOBlTfoVS+MuXnnJKYwh2j4nfGdqs9Qe+ 0zS+2rEqMRlBHC6ZqsQY61lX24ArukGrtfEboLs+/vwFpznjkSdIT7PrgvuyPSaz gunv+gn0qeCaIiUDVvQfG4f7CMcf1dM= -----END CERTIFICATE-----Generated at Wed Aug 6 16:05:43 2025 by rpki-client