$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa File: 4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa (raw, json) Hash identifier: CHKuZF+ZYS5AMgKGyw4mqD7+jydbbuu7/uPiYdnwUV4= Subject key identifier: D1:17:53:05:59:4C:9D:D9:46:7B:CF:06:31:5F:EC:B3:32:A8:1D:A1 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201E5B3BC50328B5CE01180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.28.168.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e5:b3:bc:50:32:8b:5c:e0:11:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6b967b0d-d85d-4691-a7d6-b5d6daedc59a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fd:3e:6c:13:bb:2b:a6:78:24:9f:23:a3:0d: ff:ec:15:1a:27:46:ff:d7:bf:b0:69:e0:95:19:b5: 63:e2:5a:df:e8:21:9c:d5:9d:29:93:dd:b9:00:5e: 6e:e7:61:00:0b:24:1e:d6:9b:73:12:cd:19:90:36: e9:8e:62:cd:48:25:db:0e:01:91:a7:af:1f:ce:8d: 79:87:14:19:41:a4:ea:85:a2:63:14:93:02:6e:db: c8:73:f2:71:bc:ec:13:5d:1d:55:a6:0c:63:5a:df: 57:fe:5f:5a:a4:3c:dc:9c:e0:94:5d:d2:3f:4e:77: a2:0b:41:ea:4f:20:a2:da:54:99:8e:b3:b0:cb:4a: 8e:59:2a:2d:57:e2:ce:52:4b:5b:3d:f8:11:24:52: 5d:36:37:05:9d:52:15:86:de:1f:70:27:d6:56:e7: 87:18:54:f7:aa:be:61:49:a6:d0:bd:79:63:45:ca: 42:75:a3:1c:cd:ec:84:9d:27:2a:e5:40:73:63:c1: 13:79:70:6f:05:92:14:a8:d1:9c:9b:b8:02:be:5f: 13:61:48:68:ac:7f:c3:3c:f2:a5:b4:d7:53:2e:4b: 75:86:b0:51:5f:5a:30:94:73:a4:fe:4a:36:f5:9c: 14:3b:d0:64:16:90:bc:a7:65:e3:18:fd:e1:97:c9: 08:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:17:53:05:59:4C:9D:D9:46:7B:CF:06:31:5F:EC:B3:32:A8:1D:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4a931eb3-a0cc-315c-b66f-3ee15c2688b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.168.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:13:bd:de:35:03:15:50:99:43:84:32:b1:ae:59:96:11:d4: 34:90:42:77:34:8e:1b:7e:4e:c3:72:4c:98:ef:51:5f:d8:c0: 8e:73:77:2a:2c:9c:f4:f7:a0:9d:6d:8d:21:cd:a1:ea:ad:0f: c7:cf:bb:46:7f:6e:21:8e:c7:c3:b4:05:00:94:a5:c5:2d:d6: b9:60:f0:74:df:fe:46:3f:c3:49:91:c4:67:3e:e8:29:3f:95: 7d:63:dd:59:4a:53:b8:4d:cd:cc:e5:0a:fc:4b:6f:23:21:05: 67:50:1a:14:71:1d:7a:a9:ba:c0:0e:0b:cc:48:b1:4f:98:c7: 07:39:d4:75:84:a4:fb:c2:c8:d3:4d:3d:31:8c:63:9c:b4:f4: be:e0:0f:5f:92:b9:53:4c:30:34:7d:8e:8b:e2:2d:78:b5:91: 26:98:ee:14:0d:56:a1:0e:26:7f:02:63:d9:21:af:6b:19:43: ea:de:7f:1a:d1:d6:41:7d:34:0e:19:bf:ac:4a:9b:d5:df:5b: f4:5c:df:cf:6b:80:f5:47:d9:e0:df:15:d2:39:52:b5:62:ad: aa:0d:af:ae:05:9e:6b:48:c9:90:2a:ee:b0:b9:e3:1f:99:b9: 0c:b4:d0:ba:4d:08:88:e1:9d:54:32:a6:08:75:f4:34:2b:f2: a5:eb:0d:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeWzvFAyi1zgEYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmI5NjdiMGQtZDg1ZC00NjkxLWE3ZDYtYjVkNmRhZWRjNTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvP0+bBO7K6Z4JJ8jow3/7BUaJ0b/17+waeCV GbVj4lrf6CGc1Z0pk925AF5u52EACyQe1ptzEs0ZkDbpjmLNSCXbDgGRp68fzo15 hxQZQaTqhaJjFJMCbtvIc/JxvOwTXR1VpgxjWt9X/l9apDzcnOCUXdI/TneiC0Hq TyCi2lSZjrOwy0qOWSotV+LOUktbPfgRJFJdNjcFnVIVht4fcCfWVueHGFT3qr5h SabQvXljRcpCdaMczeyEnScq5UBzY8ETeXBvBZIUqNGcm7gCvl8TYUhorH/DPPKl tNdTLkt1hrBRX1owlHOk/ko29ZwUO9BkFpC8p2XjGP3hl8kIVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNEXUwVZTJ3ZRnvPBjFf7LMyqB2hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGE5MzFlYjMtYTBjYy0z MTVjLWI2NmYtM2VlMTVjMjY4OGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRyoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEETvd41AxVQmUOEMrGuWZYR1DSQQnc0jht+TsNyTJjvUV/YwI5zdyos nPT3oJ1tjSHNoeqtD8fPu0Z/biGOx8O0BQCUpcUt1rlg8HTf/kY/w0mRxGc+6Ck/ lX1j3VlKU7hNzczlCvxLbyMhBWdQGhRxHXqpusAOC8xIsU+Yxwc51HWEpPvCyNNN PTGMY5y09L7gD1+SuVNMMDR9joviLXi1kSaY7hQNVqEOJn8CY9khr2sZQ+refxrR 1kF9NA4Zv6xKm9XfW/Rc389rgPVH2eDfFdI5UrViraoNr64FnmtIyZAq7rC54x+Z uQy00LpNCIjhnVQypgh19DQr8qXrDRI= -----END CERTIFICATE-----Generated at Wed Nov 5 11:43:47 2025 by rpki-client