$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/607a34b6-99c1-3c14-91b8-97106f5c18b3.roa File: 607a34b6-99c1-3c14-91b8-97106f5c18b3.roa (raw, json) Hash identifier: 0wlM28gfXCRCVMsmNYVDfltubLP2JZQz2OqWxilqTR0= Subject key identifier: 2C:F1:D0:1B:0A:79:8D:E3:23:BD:AD:3D:FD:EA:AE:7B:66:BB:27:20 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B99D778FEA7C7B77658F06180 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/607a34b6-99c1-3c14-91b8-97106f5c18b3.roa Signing time: Wed 22 Oct 2025 01:00:31 +0000 ROA not before: Wed 22 Oct 2025 01:00:31 +0000 ROA not after: Tue 20 Jan 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.28.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:99:d7:78:fe:a7:c7:b7:76:58:f0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 22 01:00:31 2025 GMT Not After : Jan 20 02:00:31 2026 GMT Subject: CN=9493d9f9-3045-4551-8e48-5d11437ede23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:ed:2f:f3:ea:4b:d6:6e:33:94:fc:e6:23: 82:dd:cc:b9:38:b8:c2:78:0e:9c:57:77:25:7e:83: e6:a8:5b:84:e3:6f:fe:e4:23:94:d7:c8:2d:dc:9f: 91:2a:b4:47:14:15:05:98:32:7e:a5:6a:63:a1:53: 0b:de:95:d9:e7:a6:ae:68:55:2d:9a:80:bb:bb:12: 39:9a:ca:f9:f6:a8:86:5e:6c:08:c6:24:fa:2f:7e: 41:ef:3e:34:c3:fa:4a:e0:02:00:86:a4:32:7f:39: 90:e6:96:72:9f:5d:65:2c:ce:46:c7:e2:51:e9:e2: 53:54:d6:8d:28:31:8f:2f:21:e8:82:94:1b:cc:52: e2:c4:8c:89:1e:ba:8c:95:88:7d:e1:c5:b4:d9:af: 60:a4:7f:9e:67:5b:9d:49:ce:fe:00:a4:10:e5:92: 9e:11:be:ea:9e:d6:93:02:e4:4a:8f:6b:c7:e9:6c: a7:66:ad:af:61:0d:bf:df:6a:98:39:dc:da:9a:4c: c1:00:5b:9c:31:ad:87:31:b7:ad:aa:e5:55:77:2e: aa:5a:59:83:d0:3d:bc:40:f4:11:fc:65:07:85:ef: 3d:6d:e2:ff:31:2b:f8:2a:3f:99:66:7d:a1:7a:a5: 37:f0:05:d7:28:b4:0f:51:5e:c8:f2:50:ff:7e:7b: f1:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F1:D0:1B:0A:79:8D:E3:23:BD:AD:3D:FD:EA:AE:7B:66:BB:27:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/607a34b6-99c1-3c14-91b8-97106f5c18b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:4e:b5:e7:71:11:79:32:ee:38:ea:16:5e:68:8d:74:fa:33: 5f:c6:d9:64:95:6b:a6:31:c2:87:90:7e:11:b4:73:a2:5c:31: 22:74:71:cc:70:ce:d3:8c:7e:1e:31:11:c5:64:57:d9:0e:b2: 96:24:08:93:8e:8c:55:2a:38:7e:c0:b1:82:10:b2:fb:3d:c3: 76:2c:38:de:90:b3:8d:ce:3c:e3:f5:4f:cb:81:4b:a1:ae:09: 24:e5:bb:9a:90:52:5c:2d:1b:6f:55:63:02:ec:9d:be:b4:9b: a6:7a:d0:2e:41:97:29:67:40:7a:98:3c:d8:15:84:1b:ff:be: b1:cd:02:3a:1e:56:fe:eb:e5:f5:bd:5a:01:28:e0:32:ac:5c: 4c:05:22:ba:8b:33:88:08:3e:46:a5:b2:e7:f8:77:4c:a9:b4: 84:45:19:fb:6c:0d:f3:20:02:c2:15:c8:f3:26:a7:0f:bc:d3: a2:6a:d4:d8:71:2d:db:91:a7:ef:4d:4c:32:cb:fd:54:b7:a7: 91:5d:d0:89:1c:e2:e3:6c:04:60:13:fe:0b:0a:f1:68:2e:b9: 87:04:73:f2:1f:47:0e:ac:d0:18:49:97:48:7c:82:0b:3e:7c: 28:55:46:09:84:f7:91:2e:af:93:e1:dc:b7:45:1d:04:ca:d9: ca:d7:df:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuZ13j+p8e3dljwYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyMjAxMDAzMVoXDTI2MDEyMDAyMDAzMVowLzEtMCsGA1UEAxMk OTQ5M2Q5ZjktMzA0NS00NTUxLThlNDgtNWQxMTQzN2VkZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUrtL/PqS9ZuM5T85iOC3cy5OLjCeA6cV3cl foPmqFuE42/+5COU18gt3J+RKrRHFBUFmDJ+pWpjoVML3pXZ56auaFUtmoC7uxI5 msr59qiGXmwIxiT6L35B7z40w/pK4AIAhqQyfzmQ5pZyn11lLM5Gx+JR6eJTVNaN KDGPLyHogpQbzFLixIyJHrqMlYh94cW02a9gpH+eZ1udSc7+AKQQ5ZKeEb7qntaT AuRKj2vH6WynZq2vYQ2/32qYOdzamkzBAFucMa2HMbetquVVdy6qWlmD0D28QPQR /GUHhe89beL/MSv4Kj+ZZn2heqU38AXXKLQPUV7I8lD/fnvxlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzx0BsKeY3jI72tPf3qrntmuycgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNjA3YTM0YjYtOTljMS0z YzE0LTkxYjgtOTcxMDZmNWMxOGIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5OtedxEXky7jjqFl5ojXT6M1/G2WSVa6YxwoeQfhG0c6JcMSJ0ccxw ztOMfh4xEcVkV9kOspYkCJOOjFUqOH7AsYIQsvs9w3YsON6Qs43OPOP1T8uBS6Gu CSTlu5qQUlwtG29VYwLsnb60m6Z60C5BlylnQHqYPNgVhBv/vrHNAjoeVv7r5fW9 WgEo4DKsXEwFIrqLM4gIPkalsuf4d0yptIRFGftsDfMgAsIVyPMmpw+806Jq1Nhx LduRp+9NTDLL/VS3p5Fd0Ikc4uNsBGAT/gsK8WguuYcEc/IfRw6s0BhJl0h8ggs+ fChVRgmE95Eur5Ph3LdFHQTK2crX3xM= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:25 2025 by rpki-client