$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a78b094-6202-3990-9cfa-3391e73f5d0e.roa File: 7a78b094-6202-3990-9cfa-3391e73f5d0e.roa (raw, json) Hash identifier: qUF1h68vLV2gm5hBhsj7FFOeZqRgQY8zjELsVE1XYBo= Subject key identifier: 2A:82:23:AE:F0:5A:C8:81:9A:5D:4E:50:F7:2A:D5:FB:0F:31:03:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6631F94672CD7DEEAF11EE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a78b094-6202-3990-9cfa-3391e73f5d0e.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.28.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:f9:46:72:cd:7d:ee:af:11:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=7ee5ea54-a482-40d0-a1b2-b20c0b45ea50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b0:ab:06:44:99:5e:50:fb:8a:10:1f:ec:38: 4c:1c:fd:6f:67:12:eb:4e:de:89:34:a7:d4:30:12: 43:e4:be:fc:c7:45:f0:6e:99:a2:bc:9b:0f:3a:0f: b5:dc:6c:5a:50:c2:65:51:6e:02:74:98:41:db:37: 70:9e:f5:95:23:77:09:88:b2:7f:a8:75:db:d0:dc: c2:ae:b3:c4:e4:0e:ab:a2:b9:3b:95:1e:95:6a:0e: 12:90:03:7c:46:7f:41:77:b0:ce:f0:c0:21:9f:91: de:10:12:e7:fb:dc:86:6a:de:8a:60:a9:f5:c2:c5: 36:68:9f:73:c5:9a:7c:70:d7:32:0d:a8:f1:7c:e4: 17:ed:5e:8e:64:ba:d0:26:5c:9d:61:ce:eb:32:f2: 54:cd:71:4d:05:e1:99:c9:5c:f5:18:ce:3c:21:12: d4:51:2b:88:67:62:cd:1e:36:f3:68:6a:d6:3e:44: aa:98:ae:a5:89:1e:48:ae:7d:43:d9:f3:e8:8b:e2: e9:48:73:93:78:aa:01:df:a6:30:1b:da:6f:64:27: b0:3a:58:90:80:64:04:c8:54:bc:89:a6:e6:71:4d: 36:2d:ae:50:8a:3d:b1:45:9b:ba:6d:d8:de:3f:51: 4c:25:f4:3e:6b:db:85:76:6a:51:18:8c:61:2f:94: 64:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:82:23:AE:F0:5A:C8:81:9A:5D:4E:50:F7:2A:D5:FB:0F:31:03:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/7a78b094-6202-3990-9cfa-3391e73f5d0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:44:c8:a1:14:80:ce:05:e7:ab:9f:26:52:70:7b:af:48:a0: 01:e4:17:d6:50:f0:47:94:6d:57:b3:4e:e1:38:57:00:68:71: 1b:86:52:a1:39:22:dc:78:81:4a:69:17:65:0c:c3:32:6b:b7: 26:fe:c7:c1:e9:ae:73:c9:48:a2:f9:92:a4:b0:60:23:89:9b: 74:c8:69:b0:ff:3c:f5:eb:da:64:41:1d:9c:49:a1:7a:29:71: f8:d7:f2:b3:ae:15:97:aa:79:46:eb:cf:0c:c8:dd:71:a8:00: 37:45:9c:62:6a:0c:77:ed:70:5c:ed:c8:3c:fb:e8:45:fe:83: 8f:d4:5a:58:9b:5e:89:16:87:61:54:2b:92:e8:fa:e9:52:22: 9c:e6:0f:b0:f2:21:de:f8:36:e8:ce:9c:64:f3:9f:d5:b9:dc: 28:de:21:f1:75:1c:60:50:a5:ec:1b:31:1b:e3:f3:96:f2:ae: 3b:25:25:93:db:10:69:e9:e5:5b:cc:8d:8d:84:c5:18:30:18: c6:31:4f:30:c7:4b:16:ba:d9:9d:51:d0:a6:16:59:a3:2d:06: 47:be:3c:f2:ff:2f:08:43:86:34:91:52:97:16:2d:c7:10:95: 37:b7:be:3e:63:91:4f:f4:ca:ba:ba:cc:a5:46:86:8a:97:b9: 02:84:29:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMflGcs197q8R7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk N2VlNWVhNTQtYTQ4Mi00MGQwLWExYjItYjIwYzBiNDVlYTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLCrBkSZXlD7ihAf7DhMHP1vZxLrTt6JNKfU MBJD5L78x0XwbpmivJsPOg+13GxaUMJlUW4CdJhB2zdwnvWVI3cJiLJ/qHXb0NzC rrPE5A6rork7lR6Vag4SkAN8Rn9Bd7DO8MAhn5HeEBLn+9yGat6KYKn1wsU2aJ9z xZp8cNcyDajxfOQX7V6OZLrQJlydYc7rMvJUzXFNBeGZyVz1GM48IRLUUSuIZ2LN HjbzaGrWPkSqmK6liR5Irn1D2fPoi+LpSHOTeKoB36YwG9pvZCewOliQgGQEyFS8 iabmcU02La5Qij2xRZu6bdjeP1FMJfQ+a9uFdmpRGIxhL5RkuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqCI67wWsiBml1OUPcq1fsPMQPrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvN2E3OGIwOTQtNjIwMi0z OTkwLTljZmEtMzM5MWU3M2Y1ZDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRysMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxEyKEUgM4F56ufJlJwe69IoAHkF9ZQ8EeUbVezTuE4VwBocRuGUqE5 Itx4gUppF2UMwzJrtyb+x8HprnPJSKL5kqSwYCOJm3TIabD/PPXr2mRBHZxJoXop cfjX8rOuFZeqeUbrzwzI3XGoADdFnGJqDHftcFztyDz76EX+g4/UWlibXokWh2FU K5Lo+ulSIpzmD7DyId74NujOnGTzn9W53CjeIfF1HGBQpewbMRvj85byrjslJZPb EGnp5VvMjY2ExRgwGMYxTzDHSxa62Z1R0KYWWaMtBke+PPL/LwhDhjSRUpcWLccQ lTe3vj5jkU/0yrq6zKVGhoqXuQKEKXI= -----END CERTIFICATE-----Generated at Wed Nov 5 06:54:09 2025 by rpki-client