$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f296c396-1442-32eb-b6ae-430a94b7a364.roa File: f296c396-1442-32eb-b6ae-430a94b7a364.roa (raw, json) Hash identifier: VWjJ8Gg3AVdB7x/aWrtOdk7css9yLe1SXVWTfYAPIPk= Subject key identifier: 27:CF:5B:AC:41:18:69:ED:B7:89:DE:AD:0A:92:2C:49:44:B2:AD:FF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6173A1AF3B34AEB78443B000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f296c396-1442-32eb-b6ae-430a94b7a364.roa Signing time: Wed 01 Oct 2025 20:14:06 +0000 ROA not before: Wed 01 Oct 2025 20:14:06 +0000 ROA not after: Tue 30 Dec 2025 21:14:06 +0000 asID: 19905 IP address blocks: 173.28.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:73:a1:af:3b:34:ae:b7:84:43:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:14:06 2025 GMT Not After : Dec 30 21:14:06 2025 GMT Subject: CN=0b53abdf-5854-4102-8c13-5c042307b333 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b9:44:82:c8:25:d0:c5:f7:29:79:22:d7:04: e9:69:70:21:e0:54:22:e2:da:55:88:80:ad:fc:cb: 64:75:85:48:99:67:6e:a9:e3:d0:86:ce:56:df:f7: a9:d6:ae:40:b1:11:21:be:bb:4d:2b:3b:2c:65:03: 2a:38:92:59:80:1b:aa:ec:5c:d9:99:da:de:d0:6b: fc:6b:4a:72:cb:de:a8:d3:2c:c5:d0:c6:33:bf:c6: 28:89:0d:48:35:8b:0b:7a:01:73:2b:28:83:b7:60: 1e:ea:0d:8b:b6:e9:84:1d:87:f6:73:ef:be:2b:06: b3:cc:cf:7f:ca:b4:8a:51:22:65:06:7e:fb:f6:93: c6:dd:c4:fd:fd:f7:ed:dc:4e:e0:c1:4f:1b:47:d3: c8:12:e6:0e:1a:28:be:66:f5:ea:36:ad:e4:93:55: 2a:9f:f1:e5:23:db:2f:13:4e:30:a8:db:b1:ad:80: fa:20:20:86:97:8b:0a:16:c7:5f:af:97:b6:06:56: e4:46:dc:cd:3c:34:90:82:87:bd:df:40:e5:15:a6: 65:e0:f4:1f:45:dc:c1:ac:21:70:c7:c3:04:5e:d5: a3:a7:a6:3b:14:19:13:a0:9e:27:2a:e4:b5:ff:b0: 05:c8:78:71:45:49:5f:7e:04:f5:a3:21:6b:c1:ef: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:CF:5B:AC:41:18:69:ED:B7:89:DE:AD:0A:92:2C:49:44:B2:AD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f296c396-1442-32eb-b6ae-430a94b7a364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:c0:43:9a:74:dd:12:49:90:d9:58:26:32:5e:c0:36:00:57: c6:8c:7e:fa:43:4f:5e:e4:0f:d4:83:2d:97:48:b1:3a:c3:a3: 38:b9:4f:52:46:6d:c8:08:b6:63:f7:b0:98:bc:35:13:17:4f: 37:78:7d:5e:48:52:63:23:36:2e:ac:b2:49:27:b9:62:07:f2: 73:77:45:7f:f5:57:bd:71:38:5f:45:02:bf:48:c2:f7:b9:09: 2c:a0:49:c5:76:72:74:50:0b:31:2a:5a:b3:05:31:1e:03:0b: a3:1e:66:10:0c:71:a0:34:9a:a2:10:80:e8:b3:41:8e:2e:b6: b1:f1:28:0b:4e:48:d9:88:f0:2a:2f:68:57:45:72:1d:b2:cc: bf:02:03:0c:6c:03:56:db:f5:f0:a8:b7:e1:23:c5:5d:45:1b: 3b:98:c6:09:c1:fc:5d:9c:ab:ab:8a:19:73:53:0d:3d:be:35: 07:47:41:88:35:0d:51:33:f7:ed:06:68:64:ac:e5:58:08:a6: bc:16:cc:eb:c5:c4:ee:55:af:c6:57:5d:ef:d6:35:28:ff:7a: f9:59:3b:f8:11:cd:c3:c9:76:80:01:c8:32:0f:6d:3b:40:b9: dd:7b:e9:e7:21:4a:55:18:37:9c:6d:35:0d:f7:2d:22:64:58: 2e:49:14:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthc6GvOzSut4RDsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTQwNloXDTI1MTIzMDIxMTQwNlowLzEtMCsGA1UEAxMk MGI1M2FiZGYtNTg1NC00MTAyLThjMTMtNWMwNDIzMDdiMzMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLlEgsgl0MX3KXki1wTpaXAh4FQi4tpViICt /MtkdYVImWduqePQhs5W3/ep1q5AsREhvrtNKzssZQMqOJJZgBuq7FzZmdre0Gv8 a0pyy96o0yzF0MYzv8YoiQ1INYsLegFzKyiDt2Ae6g2LtumEHYf2c+++KwazzM9/ yrSKUSJlBn779pPG3cT9/fft3E7gwU8bR9PIEuYOGii+ZvXqNq3kk1Uqn/HlI9sv E04wqNuxrYD6ICCGl4sKFsdfr5e2BlbkRtzNPDSQgoe930DlFaZl4PQfRdzBrCFw x8MEXtWjp6Y7FBkToJ4nKuS1/7AFyHhxRUlffgT1oyFrwe9pDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCfPW6xBGGntt4nerQqSLElEsq3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjI5NmMzOTYtMTQ0Mi0z MmViLWI2YWUtNDMwYTk0YjdhMzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRw5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7AQ5p03RJJkNlYJjJewDYAV8aMfvpDT17kD9SDLZdIsTrDozi5T1JG bcgItmP3sJi8NRMXTzd4fV5IUmMjNi6sskknuWIH8nN3RX/1V71xOF9FAr9Iwve5 CSygScV2cnRQCzEqWrMFMR4DC6MeZhAMcaA0mqIQgOizQY4utrHxKAtOSNmI8Cov aFdFch2yzL8CAwxsA1bb9fCot+EjxV1FGzuYxgnB/F2cq6uKGXNTDT2+NQdHQYg1 DVEz9+0GaGSs5VgIprwWzOvFxO5Vr8ZXXe/WNSj/evlZO/gRzcPJdoAByDIPbTtA ud176echSlUYN5xtNQ33LSJkWC5JFMI= -----END CERTIFICATE-----Generated at Tue Nov 4 19:20:38 2025 by rpki-client