$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa File: 295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa (raw, json) Hash identifier: XNgPAGFKaBfKhwjkLwJxr0i0Yom78ci0HIm8+qD5xZQ= Subject key identifier: E6:80:1F:5F:09:F6:9F:A8:BF:84:C2:D1:64:B2:D5:43:AD:38:4F:AD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B25FC4805ACBA653D0C2B7E20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 173.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:48:05:ac:ba:65:3d:0c:2b:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=b9acec67-5e17-4fb0-add6-5a8ec50bd4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:04:72:e0:67:a9:93:ae:aa:87:37:66:2e:9e: a8:3a:90:96:c9:12:92:19:44:ac:24:67:74:54:32: c6:84:12:2a:de:83:ed:e2:89:b3:a7:35:de:9e:6c: 91:68:ea:05:09:4a:9f:ec:ca:93:a6:d9:1c:82:3a: b0:e8:b2:fe:53:77:6c:53:3d:50:96:a6:20:63:42: 48:a2:c0:41:01:dd:37:f0:fc:dc:0e:50:4e:7f:63: 78:1a:27:ca:8b:24:58:2a:95:24:b2:ce:7b:8c:53: cc:24:45:26:e4:3b:e0:35:da:a3:0d:96:20:72:f6: e5:80:bc:de:b2:f8:20:f8:94:a3:16:65:ea:2d:6e: 8e:b1:2d:46:7b:b8:27:cd:fc:f1:63:e1:75:4a:72: 4f:01:ce:d8:d9:fd:7d:f9:6f:a8:45:af:d6:94:e8: 12:db:54:d5:4d:d1:17:ee:1f:dd:a6:e8:06:6e:d6: 3e:92:97:80:d8:c5:37:76:b0:84:ef:48:23:de:74: c3:c9:f6:13:c6:81:3a:d2:b7:a0:41:26:10:19:47: a0:39:fe:2e:6d:fa:20:4a:0f:a1:f2:38:61:b0:20: 87:54:4f:97:2a:ee:00:50:91:fb:b5:16:fc:86:21: 24:4b:8f:4a:f1:7b:ba:2d:51:27:cd:68:c2:1f:95: 91:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:80:1F:5F:09:F6:9F:A8:BF:84:C2:D1:64:B2:D5:43:AD:38:4F:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/295cb3b3-0ace-36e5-9550-4b32b7a4652a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:e4:52:3c:93:fa:84:b6:0f:95:99:2f:38:3c:0e:92:05:be: 37:82:d3:62:fb:34:67:cd:5a:23:c7:07:b2:6e:20:95:24:44: fd:60:32:a9:c6:25:68:30:ab:8e:f3:ed:a9:d9:c5:3e:88:56: 3c:82:4f:15:43:ed:8b:02:d9:3d:f3:52:45:71:76:77:ad:4b: a6:d4:07:0c:b4:37:df:87:e5:b2:15:3b:5b:d8:0b:69:fd:d8: 1f:97:2d:76:a4:5a:b5:3e:cb:6c:69:56:95:6a:b7:f4:1e:c3: 06:5f:01:2a:ba:ca:48:0a:30:08:eb:af:b6:88:9d:14:aa:2e: a4:30:61:d6:33:8e:18:ce:4c:42:a6:49:8b:00:5f:13:29:fe: 7b:16:5c:37:09:c3:b8:ad:a4:00:66:3e:71:57:47:4c:2b:2f: 0f:2d:6a:90:f5:7c:4a:ac:de:ce:bd:8d:38:82:88:a8:b2:00: af:2f:d3:64:db:5e:92:62:69:98:21:64:29:be:c4:b3:bf:7a: 71:c6:34:dc:82:fc:19:4d:6b:d3:e7:1c:64:a8:4d:71:eb:e6: c1:16:22:31:40:40:aa:0f:a3:5a:9b:b8:be:c0:24:3b:b3:db: d5:f5:ef:ee:77:55:e2:82:c9:e3:92:af:cc:5f:25:3a:2d:21: 23:5d:67:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EgFrLplPQwrfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk YjlhY2VjNjctNWUxNy00ZmIwLWFkZDYtNWE4ZWM1MGJkNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQRy4Gepk66qhzdmLp6oOpCWyRKSGUSsJGd0 VDLGhBIq3oPt4omzpzXenmyRaOoFCUqf7MqTptkcgjqw6LL+U3dsUz1QlqYgY0JI osBBAd038PzcDlBOf2N4GifKiyRYKpUkss57jFPMJEUm5DvgNdqjDZYgcvblgLze svgg+JSjFmXqLW6OsS1Ge7gnzfzxY+F1SnJPAc7Y2f19+W+oRa/WlOgS21TVTdEX 7h/dpugGbtY+kpeA2MU3drCE70gj3nTDyfYTxoE60regQSYQGUegOf4ubfogSg+h 8jhhsCCHVE+XKu4AUJH7tRb8hiEkS49K8Xu6LVEnzWjCH5WRoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOaAH18J9p+ov4TC0WSy1UOtOE+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjk1Y2IzYjMtMGFjZS0z NmU1LTk1NTAtNGIzMmI3YTQ2NTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7kUjyT+oS2D5WZLzg8DpIFvjeC02L7NGfNWiPHB7JuIJUkRP1gMqnG JWgwq47z7anZxT6IVjyCTxVD7YsC2T3zUkVxdnetS6bUBwy0N9+H5bIVO1vYC2n9 2B+XLXakWrU+y2xpVpVqt/QewwZfASq6ykgKMAjrr7aInRSqLqQwYdYzjhjOTEKm SYsAXxMp/nsWXDcJw7itpABmPnFXR0wrLw8tapD1fEqs3s69jTiCiKiyAK8v02Tb XpJiaZghZCm+xLO/enHGNNyC/BlNa9PnHGSoTXHr5sEWIjFAQKoPo1qbuL7AJDuz 29X17+53VeKCyeOSr8xfJTotISNdZzU= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:52 2025 by rpki-client