$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa File: 8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa (raw, json) Hash identifier: 3N51T8Ae3ruGAVArm5RkFfn0u1212d5LscR4VNfb2Ss= Subject key identifier: A0:E7:40:F8:FE:B0:1E:C9:AB:65:65:5E:47:10:30:99:4B:39:9B:EA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFC9F5FF9104FAAD213755600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa Signing time: Tue 26 Aug 2025 17:25:35 +0000 ROA not before: Tue 26 Aug 2025 17:25:35 +0000 ROA not after: Mon 24 Nov 2025 18:25:35 +0000 asID: 30036 IP address blocks: 173.28.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:9f:5f:f9:10:4f:aa:d2:13:75:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 17:25:35 2025 GMT Not After : Nov 24 18:25:35 2025 GMT Subject: CN=da831a6a-5bf1-45b7-9dfc-33e83b75b52c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:41:d5:2a:66:9d:e8:0f:2e:f3:cf:08:eb: 17:e5:f0:d3:19:04:08:14:74:e0:57:9c:21:db:b8: 2b:6c:cc:d1:66:5d:b9:a1:29:27:00:44:7a:fc:e1: e5:7a:bf:b5:35:90:04:17:28:f4:de:b7:b1:7c:db: f5:18:f7:2c:1d:62:e3:b9:ac:02:ed:a3:82:23:2c: 76:51:4c:f7:dc:5d:b7:45:a1:48:d0:b0:85:bf:ef: c5:b8:d1:88:f6:17:9d:a8:da:d2:d8:ff:67:84:a3: 8b:61:7f:6a:0f:a5:79:07:ac:cd:9c:14:e0:44:b5: fb:1d:b9:66:59:89:ae:9f:c6:b0:3a:dc:88:3c:43: c9:89:e2:f5:aa:7a:f2:3f:7e:f4:78:0c:f7:82:1b: 86:37:f9:5c:15:2d:23:79:16:6b:f4:aa:0a:a6:26: 02:f1:a2:05:c3:c0:ea:01:91:c7:46:9e:44:eb:16: c8:cc:ad:b2:cc:b0:36:60:93:16:ea:1b:2b:3e:11: b3:37:0a:5b:da:d3:0d:e4:9f:3d:b0:60:3b:7b:2b: 1f:af:71:f0:58:f3:a7:f9:d5:c5:4b:39:d8:08:2c: 81:b5:2f:74:11:55:e1:14:e7:e0:84:df:11:65:9f: f8:03:b0:fd:62:de:44:92:ce:4b:02:3b:93:92:24: 88:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E7:40:F8:FE:B0:1E:C9:AB:65:65:5E:47:10:30:99:4B:39:9B:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8af21ae3-45ad-3beb-9f38-c30c6ea35548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:8d:6c:6e:2d:58:0a:36:6a:16:35:35:ab:64:b6:67:a5:4e: b0:db:e8:24:d8:c9:cc:e8:e9:46:a3:0e:d3:ae:65:f4:00:ea: 1b:77:07:9d:e0:c8:05:a3:5f:93:11:78:b9:0c:79:50:d1:91: a3:72:a2:c8:f7:be:c1:c4:a6:6f:e3:f7:ea:8f:64:15:c2:2e: 4d:15:2d:08:8f:8c:47:36:c8:5b:5d:d5:72:1d:ab:44:f0:39: 55:46:b5:19:04:ac:cb:36:0e:d4:37:0b:b0:87:ad:8b:c5:90: f6:47:72:6d:08:c9:17:e2:7b:fa:2d:81:3a:b2:73:34:b1:83: 05:e2:b8:8e:4a:2e:83:51:cd:b2:eb:c5:3e:9a:35:d7:75:10: d4:c3:44:f7:e0:97:eb:de:d1:ae:68:19:33:fc:0c:d1:a0:57: d2:4f:38:f0:b8:aa:c4:14:fd:81:3e:65:e1:fb:14:bf:87:04: 8f:6b:37:bb:48:c2:e1:6c:f0:a9:7b:0b:4c:66:5f:72:de:73: 56:fc:da:db:2c:15:99:82:eb:f8:72:73:98:79:4c:82:db:dd: c7:90:64:e1:ae:1a:2d:61:f4:53:d9:5f:4c:a2:ad:73:e4:60: 5e:7b:92:3d:90:61:0a:4d:67:fe:33:a8:3b:3f:a6:a7:27:a8: 1a:8a:2e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8n1/5EE+q0hN1VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjE3MjUzNVoXDTI1MTEyNDE4MjUzNVowLzEtMCsGA1UEAxMk ZGE4MzFhNmEtNWJmMS00NWI3LTlkZmMtMzNlODNiNzViNTJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZpB1SpmnegPLvPPCOsX5fDTGQQIFHTgV5wh 27grbMzRZl25oSknAER6/OHler+1NZAEFyj03rexfNv1GPcsHWLjuawC7aOCIyx2 UUz33F23RaFI0LCFv+/FuNGI9hedqNrS2P9nhKOLYX9qD6V5B6zNnBTgRLX7Hblm WYmun8awOtyIPEPJieL1qnryP370eAz3ghuGN/lcFS0jeRZr9KoKpiYC8aIFw8Dq AZHHRp5E6xbIzK2yzLA2YJMW6hsrPhGzNwpb2tMN5J89sGA7eysfr3HwWPOn+dXF SznYCCyBtS90EVXhFOfghN8RZZ/4A7D9Yt5Eks5LAjuTkiSIXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKDnQPj+sB7Jq2VlXkcQMJlLOZvqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOGFmMjFhZTMtNDVhZC0z YmViLTlmMzgtYzMwYzZlYTM1NTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqNbG4tWAo2ahY1NatktmelTrDb6CTYyczo6UajDtOuZfQA6ht3B53g yAWjX5MReLkMeVDRkaNyosj3vsHEpm/j9+qPZBXCLk0VLQiPjEc2yFtd1XIdq0Tw OVVGtRkErMs2DtQ3C7CHrYvFkPZHcm0IyRfie/otgTqyczSxgwXiuI5KLoNRzbLr xT6aNdd1ENTDRPfgl+ve0a5oGTP8DNGgV9JPOPC4qsQU/YE+ZeH7FL+HBI9rN7tI wuFs8Kl7C0xmX3Lec1b82tssFZmC6/hyc5h5TILb3ceQZOGuGi1h9FPZX0yirXPk YF57kj2QYQpNZ/4zqDs/pqcnqBqKLo4= -----END CERTIFICATE-----Generated at Wed Nov 5 02:28:23 2025 by rpki-client