$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa File: 2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa (raw, json) Hash identifier: l7rzeHKkA51h5fZ/eRkU+mYusGFCgaC/sAs9wPeqLQw= Subject key identifier: 10:E5:F5:BA:C2:F3:44:E6:F5:1F:2F:E4:06:0B:CD:2D:3C:DA:EE:F8 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B2CFBC975FACE5E9632CF5030 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa Signing time: Sat 13 Sep 2025 01:10:35 +0000 ROA not before: Sat 13 Sep 2025 01:10:35 +0000 ROA not after: Fri 12 Dec 2025 02:10:35 +0000 asID: 19905 IP address blocks: 173.28.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:fb:c9:75:fa:ce:5e:96:32:cf:50:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 13 01:10:35 2025 GMT Not After : Dec 12 02:10:35 2025 GMT Subject: CN=b4919c2b-2e6f-4f39-8513-a17aac6b04a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b4:50:d1:d8:82:19:7b:e9:ab:15:2e:28:f2: b3:60:66:46:48:c0:fb:af:60:2b:41:2c:93:4f:e8: 2a:aa:bc:e6:89:76:b3:56:b6:7e:1b:86:0f:c2:56: a1:48:c2:e2:c0:72:68:98:8b:9a:66:89:97:d5:1a: 5f:6b:c3:91:35:48:80:4b:9e:79:a8:b4:ea:ac:de: 8e:4b:58:90:fd:73:31:39:8a:a1:f8:37:9e:15:60: bd:a3:50:ed:cb:1e:1c:97:52:56:db:e4:1c:87:0d: f6:ce:d4:f0:fb:cf:bd:6f:7f:73:cd:eb:10:d2:04: 59:ef:1b:45:a7:24:05:66:45:25:52:48:fd:dc:0c: 89:a5:c9:f3:5f:16:aa:f4:d0:d9:a4:67:53:56:98: 70:e0:c6:bc:f1:7c:7f:40:eb:5c:e7:c6:d0:4e:a1: b7:15:03:33:42:9e:3c:85:c4:58:ce:dc:ef:ea:79: 22:44:27:56:c5:1f:34:db:e0:5f:24:98:fd:e6:38: d2:4f:19:20:0b:9f:0e:8a:58:bc:5f:1f:91:aa:e8: be:60:32:4a:7e:ba:7e:ed:db:50:32:45:da:98:13: 73:b1:ff:25:0e:3c:07:5c:86:52:e6:5a:1d:86:5b: 57:2d:85:f0:c5:46:ea:10:21:08:2a:a4:47:2f:3e: 9d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E5:F5:BA:C2:F3:44:E6:F5:1F:2F:E4:06:0B:CD:2D:3C:DA:EE:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fb98ccb-7a4b-381b-bc22-a8a97d4eeb03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:01:c3:49:55:71:26:f3:68:52:51:15:d4:e9:b0:92:3b:a0: dd:fa:56:e6:68:33:b4:28:44:43:1c:f3:48:44:51:e8:c3:9b: b9:24:8c:03:cc:a7:24:1b:5d:ea:3a:bf:ae:22:e0:99:8f:f8: 82:b5:67:66:ce:f8:0e:06:1c:13:fb:1b:d0:1a:af:07:fc:20: 3f:17:5b:11:5b:93:60:80:30:7d:48:86:4e:e5:2a:27:00:9a: c1:9f:c4:b8:f8:ab:bd:69:5e:9b:c7:fb:94:a8:c6:85:47:4b: f1:02:e7:23:79:95:c7:a4:be:e3:c5:d6:27:b4:c6:27:f6:a6: 64:0b:8a:8c:a8:48:8f:30:c8:1e:b4:e0:9e:59:00:d4:cf:aa: ba:43:a1:33:e9:30:ed:11:43:66:0f:69:48:00:fb:ec:8b:63: a7:0a:ae:45:13:d4:be:5d:61:d5:82:1b:4a:71:d2:01:4a:9b: 7f:62:e7:06:b7:ad:c5:74:6a:fc:59:ac:0e:be:35:ed:aa:ea: 9f:26:73:2f:a9:3a:c4:08:17:9d:cc:b2:39:5e:41:ce:3d:d4: 10:e2:b4:b1:19:9e:29:ac:1f:59:94:5d:65:7e:6b:54:08:1d: df:c7:6e:c1:6f:96:dd:f6:a0:2c:99:2c:19:ef:f0:d0:8b:74: 2e:81:c6:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss+8l1+s5eljLPUDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxMzAxMTAzNVoXDTI1MTIxMjAyMTAzNVowLzEtMCsGA1UEAxMk YjQ5MTljMmItMmU2Zi00ZjM5LTg1MTMtYTE3YWFjNmIwNGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbRQ0diCGXvpqxUuKPKzYGZGSMD7r2ArQSyT T+gqqrzmiXazVrZ+G4YPwlahSMLiwHJomIuaZomX1Rpfa8ORNUiAS555qLTqrN6O S1iQ/XMxOYqh+DeeFWC9o1Dtyx4cl1JW2+Qchw32ztTw+8+9b39zzesQ0gRZ7xtF pyQFZkUlUkj93AyJpcnzXxaq9NDZpGdTVphw4Ma88Xx/QOtc58bQTqG3FQMzQp48 hcRYztzv6nkiRCdWxR802+BfJJj95jjSTxkgC58Oili8Xx+Rqui+YDJKfrp+7dtQ MkXamBNzsf8lDjwHXIZS5lodhltXLYXwxUbqECEIKqRHLz6dLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDl9brC80Tm9R8v5AYLzS082u74MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZiOThjY2ItN2E0Yi0z ODFiLWJjMjItYThhOTdkNGVlYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEBw0lVcSbzaFJRFdTpsJI7oN36VuZoM7QoREMc80hEUejDm7kkjAPM pyQbXeo6v64i4JmP+IK1Z2bO+A4GHBP7G9Aarwf8ID8XWxFbk2CAMH1Ihk7lKicA msGfxLj4q71pXpvH+5SoxoVHS/EC5yN5lcekvuPF1ie0xif2pmQLioyoSI8wyB60 4J5ZANTPqrpDoTPpMO0RQ2YPaUgA++yLY6cKrkUT1L5dYdWCG0px0gFKm39i5wa3 rcV0avxZrA6+Ne2q6p8mcy+pOsQIF53MsjleQc491BDitLEZnimsH1mUXWV+a1QI Hd/HbsFvlt32oCyZLBnv8NCLdC6BxuU= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:31 2025 by rpki-client