$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1529a0f4-2181-3941-b9fd-02065abcb291.roa File: 1529a0f4-2181-3941-b9fd-02065abcb291.roa (raw, json) Hash identifier: a2Ezpf0kbmcY4rrGQNsIWLwFjNaExCPcE/KveTqopB8= Subject key identifier: CD:77:E4:DD:B7:38:4C:62:2F:C9:18:C9:8F:85:FD:07:35:E4:67:B9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679737DF984E755B13597480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1529a0f4-2181-3941-b9fd-02065abcb291.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.26.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:37:df:98:4e:75:5b:13:59:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=b3272e8b-da8f-489d-bfc0-28bc0c181baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:bd:11:ae:97:04:69:65:ae:74:78:74:83:37: 84:42:2d:3a:f1:15:a2:5d:c1:5e:03:56:5c:f5:30: 19:ad:a9:aa:73:aa:c9:01:a9:72:52:f1:0b:d1:48: 3d:fd:e2:17:f2:6d:31:46:b5:ed:ca:90:14:69:ee: a6:af:42:7e:1e:94:ea:2a:3c:63:03:f5:c4:65:f0: cc:95:3f:cb:94:26:47:6d:56:05:05:9b:64:96:8b: 38:9a:06:e0:7c:93:85:56:d6:23:dc:97:b6:85:32: f8:4c:6f:ea:7d:f7:bf:99:a7:05:f7:5e:2c:45:27: ae:0b:e9:f1:bd:9e:74:80:dc:49:dd:4b:7c:b7:4f: a8:cf:d1:86:15:de:e8:31:0f:fe:b8:f6:0c:e2:4d: fd:3b:aa:a1:d9:9b:2b:19:3b:b3:69:4e:9e:22:71: ee:18:c6:6c:16:25:75:37:33:cd:81:e8:f3:44:2e: 0b:6e:99:7f:fd:2a:fd:37:ff:a1:3b:f3:04:9f:52: 25:2b:91:f5:dd:ca:bc:82:45:ec:c3:d9:43:d5:41: f1:ac:d6:f8:8b:75:5f:ce:cb:ee:7d:f6:78:d8:1c: ba:8d:bb:d5:90:c4:64:9e:3e:81:d2:e3:45:1e:97: 8d:5c:f4:07:53:d6:fb:b6:3c:0f:92:47:50:c8:b6: d2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:77:E4:DD:B7:38:4C:62:2F:C9:18:C9:8F:85:FD:07:35:E4:67:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1529a0f4-2181-3941-b9fd-02065abcb291.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.26.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:7d:e9:1e:1e:51:a6:f8:b7:25:8e:fb:29:50:71:f1:64:79: 36:14:9e:b4:27:e6:4d:8e:d6:fb:dc:9a:18:02:95:53:a8:9e: b8:6b:f0:e5:28:a6:fa:0c:90:44:44:f5:11:80:2f:bd:ac:64: 3b:57:98:b6:32:69:cd:b0:12:2f:e7:ec:f7:40:ae:1c:3a:1e: 4c:0d:9f:06:9a:1b:75:21:4d:6e:6e:29:5e:b2:78:60:41:6c: ea:b6:71:46:53:1c:09:66:70:d9:e7:a3:af:af:b3:e3:bc:2f: 09:3d:72:c4:c5:bf:97:b4:c8:f3:cb:fc:62:da:fa:40:45:8a: a9:90:92:b8:ad:3b:fd:a7:44:90:e0:ae:09:54:88:b6:5d:bc: 6f:4d:8c:08:1f:41:e2:4b:c3:74:5a:2a:eb:f2:6b:8f:64:eb: 0e:ad:50:97:33:55:7a:75:7f:4e:98:04:1d:6c:51:bd:40:8e: 7e:00:32:f6:b0:c4:17:e2:cb:d2:33:90:e9:75:a5:e6:ba:22: 34:34:c5:2d:f2:ed:5c:e1:15:62:da:18:fa:39:78:6d:29:6e: 8e:64:73:68:88:ab:ed:5c:48:a8:c0:4a:26:62:06:04:4a:be: d4:f0:19:fe:bc:71:a7:bc:2a:8a:89:e1:f7:cf:42:c3:31:9c: 72:cc:0a:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzffmE51WxNZdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YjMyNzJlOGItZGE4Zi00ODlkLWJmYzAtMjhiYzBjMTgxYmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi70RrpcEaWWudHh0gzeEQi068RWiXcFeA1Zc 9TAZramqc6rJAalyUvEL0Ug9/eIX8m0xRrXtypAUae6mr0J+HpTqKjxjA/XEZfDM lT/LlCZHbVYFBZtklos4mgbgfJOFVtYj3Je2hTL4TG/qffe/macF914sRSeuC+nx vZ50gNxJ3Ut8t0+oz9GGFd7oMQ/+uPYM4k39O6qh2ZsrGTuzaU6eInHuGMZsFiV1 NzPNgejzRC4Lbpl//Sr9N/+hO/MEn1IlK5H13cq8gkXsw9lD1UHxrNb4i3Vfzsvu ffZ42By6jbvVkMRknj6B0uNFHpeNXPQHU9b7tjwPkkdQyLbS2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM135N23OExiL8kYyY+F/Qc15Ge5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTUyOWEwZjQtMjE4MS0z OTQxLWI5ZmQtMDIwNjVhYmNiMjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRrkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHF96R4eUab4tyWO+ylQcfFkeTYUnrQn5k2O1vvcmhgClVOonrhr8OUo pvoMkERE9RGAL72sZDtXmLYyac2wEi/n7PdArhw6HkwNnwaaG3UhTW5uKV6yeGBB bOq2cUZTHAlmcNnno6+vs+O8Lwk9csTFv5e0yPPL/GLa+kBFiqmQkritO/2nRJDg rglUiLZdvG9NjAgfQeJLw3RaKuvya49k6w6tUJczVXp1f06YBB1sUb1Ajn4AMvaw xBfiy9IzkOl1pea6IjQ0xS3y7VzhFWLaGPo5eG0pbo5kc2iIq+1cSKjASiZiBgRK vtTwGf68cae8KoqJ4ffPQsMxnHLMCjc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:29 2025 by rpki-client