$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa File: 2d526aab-3817-3369-8704-f5e3258bccd6.roa (raw, json) Hash identifier: yBR4uEZAcDPAUxUc0OlbhHWbJT+jxgRmfsAAOXDmvBk= Subject key identifier: 2F:22:15:F9:21:94:85:87:4F:D4:98:FF:CD:D9:76:64:AB:1B:3B:86 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973135A2E00C25DC90FA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.28.160.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:31:35:a2:e0:0c:25:dc:90:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=f249bec8-ce18-4d13-861d-e435ab6b2f5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a8:23:83:27:a9:37:05:54:98:c7:d2:df:28: bb:13:ea:30:40:e8:90:86:e8:89:5b:3e:e0:e0:58: e4:1c:72:c3:8d:42:5a:33:19:c7:4a:b6:e3:98:7e: 43:40:89:9e:b6:90:80:e4:57:5e:68:cc:a4:e4:2a: 85:80:d2:61:e6:94:7c:ac:94:dd:eb:1c:7f:f1:98: 6c:ef:d2:c0:f6:61:cb:17:cc:6a:23:f0:6c:ad:06: ea:3c:5c:e5:68:a2:35:f8:14:49:2b:b7:7b:b4:42: 80:67:92:fa:7c:d2:12:5a:4d:bf:a1:06:36:b6:3c: b4:a0:a7:cc:09:1f:71:0d:a5:2b:23:dd:43:4e:57: 15:e0:e4:b8:77:3f:e4:ee:7f:35:78:c4:87:de:3e: 98:31:51:1e:ee:5e:46:6d:ee:48:a9:f4:d1:84:8f: 2e:3a:4f:e0:3f:27:70:17:31:31:53:74:96:60:77: 57:0d:1b:3d:2d:7a:4e:e3:94:c4:95:ba:49:ef:63: b7:b1:cd:c9:68:43:ef:ad:9d:0b:04:97:bb:bf:9e: d5:9f:de:dc:21:c7:81:bb:ae:ac:7c:35:0a:fb:a4: 40:98:a7:d0:57:fb:2e:6c:f8:1b:b5:a1:5a:13:6b: d6:66:70:06:d8:58:6a:ba:c1:71:eb:f2:b0:cb:2a: 5a:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:22:15:F9:21:94:85:87:4F:D4:98:FF:CD:D9:76:64:AB:1B:3B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2d526aab-3817-3369-8704-f5e3258bccd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.160.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:a1:72:95:78:58:89:ea:8c:aa:e5:61:63:4f:03:66:00:45: a4:ed:be:7b:43:30:cb:bd:36:ca:35:cb:cb:7a:49:8b:f0:c1: de:f9:59:72:ae:17:d8:55:77:56:0a:c3:7f:f5:5b:e7:38:c0: e1:44:ce:ee:50:95:20:4e:34:9b:f4:fe:21:87:ea:66:fc:a5: 69:e1:73:e4:fa:41:3d:1b:c9:b0:c7:f4:c8:13:18:55:df:f5: 81:71:95:b5:09:0a:05:87:52:71:d7:85:6e:7f:f3:5e:2b:91: 48:b0:d1:23:98:ff:d5:8e:7e:3f:b4:9b:5d:fa:d0:61:46:41: bd:3b:92:57:f8:bc:6f:ef:cc:47:1a:38:e7:11:38:03:80:04: c8:0a:39:29:1f:33:57:76:57:59:a6:c8:2f:12:17:4d:c8:c1: bf:66:06:a6:52:58:2f:3c:2a:2e:01:12:8b:01:31:87:00:0e: 65:9d:aa:68:e4:4c:92:ea:30:9d:e9:0f:3d:e1:5f:d2:9c:7c: 13:a3:dc:8a:43:6e:37:cb:4a:35:07:91:04:7c:0d:8a:04:fb: 9b:e5:f9:be:cf:87:c5:90:42:0d:48:b8:b6:bc:76:8a:37:55: bf:be:05:26:5e:ef:01:49:db:f9:44:5c:b7:d7:28:c2:4a:df: 4a:71:bf:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzE1ouAMJdyQ+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ZjI0OWJlYzgtY2UxOC00ZDEzLTg2MWQtZTQzNWFiNmIyZjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoagjgyepNwVUmMfS3yi7E+owQOiQhuiJWz7g 4FjkHHLDjUJaMxnHSrbjmH5DQImetpCA5FdeaMyk5CqFgNJh5pR8rJTd6xx/8Zhs 79LA9mHLF8xqI/BsrQbqPFzlaKI1+BRJK7d7tEKAZ5L6fNISWk2/oQY2tjy0oKfM CR9xDaUrI91DTlcV4OS4dz/k7n81eMSH3j6YMVEe7l5Gbe5IqfTRhI8uOk/gPydw FzExU3SWYHdXDRs9LXpO45TElbpJ72O3sc3JaEPvrZ0LBJe7v57Vn97cIceBu66s fDUK+6RAmKfQV/subPgbtaFaE2vWZnAG2FhqusFx6/KwyypajQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC8iFfkhlIWHT9SY/83ZdmSrGzuGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmQ1MjZhYWItMzgxNy0z MzY5LTg3MDQtZjVlMzI1OGJjY2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6hcpV4WInqjKrlYWNPA2YARaTtvntDMMu9Nso1y8t6SYvwwd75WXKu F9hVd1YKw3/1W+c4wOFEzu5QlSBONJv0/iGH6mb8pWnhc+T6QT0bybDH9MgTGFXf 9YFxlbUJCgWHUnHXhW5/814rkUiw0SOY/9WOfj+0m1360GFGQb07klf4vG/vzEca OOcROAOABMgKOSkfM1d2V1mmyC8SF03Iwb9mBqZSWC88Ki4BEosBMYcADmWdqmjk TJLqMJ3pDz3hX9KcfBOj3IpDbjfLSjUHkQR8DYoE+5vl+b7Ph8WQQg1IuLa8doo3 Vb++BSZe7wFJ2/lEXLfXKMJK30pxvyI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:02 2025 by rpki-client