$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa File: 0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa (raw, json) Hash identifier: qi8iwVUsTe6Vnmfn9kc5W7F+grs2XOxb+Y9Zfc3ds2c= Subject key identifier: 7B:77:79:8A:52:12:77:A1:49:D1:6B:9C:04:17:F6:CD:86:E2:A2:8E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B755E3C7AEAF575F147FA9800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa Signing time: Wed 08 Oct 2025 23:27:09 +0000 ROA not before: Wed 08 Oct 2025 23:27:09 +0000 ROA not after: Wed 07 Jan 2026 00:27:09 +0000 asID: 30036 IP address blocks: 173.28.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:5e:3c:7a:ea:f5:75:f1:47:fa:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 8 23:27:09 2025 GMT Not After : Jan 7 00:27:09 2026 GMT Subject: CN=4973ef87-2119-440e-ac39-9cb174cbe425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c5:60:e4:08:0e:68:00:4f:2b:74:ee:a5:c7: 86:16:af:71:4e:35:ec:fe:1a:31:a9:92:f2:db:3e: 06:5f:ae:0c:0c:13:f1:89:15:f4:cc:27:ef:f9:13: fd:26:de:7b:62:88:75:e5:9f:23:48:d6:90:4a:87: 4f:e4:05:5f:46:df:7c:b2:80:68:de:6d:ec:6e:78: 8e:b4:59:8b:21:ec:55:c0:36:35:80:8b:cf:57:73: 59:28:09:2f:9b:bd:37:ce:40:e0:89:99:be:e5:88: b9:22:02:53:b0:88:70:a8:f6:29:59:f7:7b:ee:28: 4b:84:a1:ac:65:83:7a:09:b8:ea:c7:ec:b8:bf:50: 3e:9f:18:f3:89:da:6a:a0:73:f8:d2:04:66:ec:48: 00:17:c8:54:53:16:e5:75:fa:f8:d0:be:16:fb:ad: b6:a1:e9:26:11:73:83:49:9f:38:ed:09:77:03:cc: cf:8a:55:b0:98:36:85:d8:3c:c6:58:8a:06:19:f2: 64:05:ce:9b:a9:b9:aa:fb:ea:e0:4d:5e:2a:26:38: 5b:72:4a:75:9a:a1:8b:f7:20:e1:14:13:57:a0:ae: 03:59:6e:4f:66:91:2c:cd:5c:02:1c:94:ed:74:fd: f6:3b:93:c9:e8:84:94:63:4b:65:f8:71:88:83:05: 51:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:77:79:8A:52:12:77:A1:49:D1:6B:9C:04:17:F6:CD:86:E2:A2:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0038d472-acfa-32c8-9dd0-907eb07f7b4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:14:0d:22:63:8a:25:15:74:04:83:cd:51:bc:0b:a7:3b:56: 41:3f:0e:69:e2:41:8e:b5:5e:dc:48:5e:1c:c4:f5:a9:dd:79: 24:37:f3:d7:1a:fd:5c:d4:5e:0b:b8:ab:d7:46:58:17:99:3a: 3e:4b:ae:c2:da:aa:aa:24:33:b1:b0:33:87:f4:2e:65:07:fd: 88:19:8d:cb:c8:17:fa:6e:48:b0:c9:71:03:f8:f7:02:85:22: 85:85:1a:6d:4f:65:3c:28:67:88:b2:13:7f:ae:f2:16:be:e6: bf:da:2b:d9:c5:09:20:7f:47:63:0b:12:42:7b:4d:00:4b:9a: d9:7a:ff:ff:64:2b:06:fe:56:b0:2b:83:3a:de:66:7e:70:b1: fe:62:4e:07:d6:29:4e:f6:4f:12:e4:4e:c3:57:b6:4d:d6:2b: c3:e2:57:16:e2:de:c0:2e:3d:78:87:53:08:f4:f4:93:65:4d: 46:a9:de:12:75:fa:52:5e:0b:12:a5:3c:a5:fe:49:55:93:65: 97:ca:ff:20:96:ea:08:9c:5a:34:37:68:9c:3d:28:ec:21:31: 5f:62:cc:9e:76:08:4f:28:9d:d5:1e:34:49:44:4b:13:3c:65: dc:34:f1:1c:20:40:13:9e:90:51:9a:04:dc:68:e3:09:3a:05: d3:23:d3:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1Xjx66vV18Uf6mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwODIzMjcwOVoXDTI2MDEwNzAwMjcwOVowLzEtMCsGA1UEAxMk NDk3M2VmODctMjExOS00NDBlLWFjMzktOWNiMTc0Y2JlNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMVg5AgOaABPK3TupceGFq9xTjXs/hoxqZLy 2z4GX64MDBPxiRX0zCfv+RP9Jt57Yoh15Z8jSNaQSodP5AVfRt98soBo3m3sbniO tFmLIexVwDY1gIvPV3NZKAkvm703zkDgiZm+5Yi5IgJTsIhwqPYpWfd77ihLhKGs ZYN6Cbjqx+y4v1A+nxjzidpqoHP40gRm7EgAF8hUUxbldfr40L4W+622oekmEXOD SZ847Ql3A8zPilWwmDaF2DzGWIoGGfJkBc6bqbmq++rgTV4qJjhbckp1mqGL9yDh FBNXoK4DWW5PZpEszVwCHJTtdP32O5PJ6ISUY0tl+HGIgwVRxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHt3eYpSEnehSdFrnAQX9s2G4qKOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDAzOGQ0NzItYWNmYS0z MmM4LTlkZDAtOTA3ZWIwN2Y3YjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUUDSJjiiUVdASDzVG8C6c7VkE/DmniQY61XtxIXhzE9andeSQ389ca /VzUXgu4q9dGWBeZOj5LrsLaqqokM7GwM4f0LmUH/YgZjcvIF/puSLDJcQP49wKF IoWFGm1PZTwoZ4iyE3+u8ha+5r/aK9nFCSB/R2MLEkJ7TQBLmtl6//9kKwb+VrAr gzreZn5wsf5iTgfWKU72TxLkTsNXtk3WK8PiVxbi3sAuPXiHUwj09JNlTUap3hJ1 +lJeCxKlPKX+SVWTZZfK/yCW6gicWjQ3aJw9KOwhMV9izJ52CE8ondUeNElESxM8 Zdw08RwgQBOekFGaBNxo4wk6BdMj0/U= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:43 2025 by rpki-client