$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa File: 2fc81609-cceb-339e-8bdd-ef413ab52259.roa (raw, json) Hash identifier: GY1RabKH0EZpSfFVSbzi5TSMD32a7MlVgah05n6nGvE= Subject key identifier: 5A:23:5A:51:2E:DF:8E:7F:A5:B1:3D:60:32:B4:8D:37:75:41:6F:D2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC8B61F8D24F86499B9C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:8b:61:f8:d2:4f:86:49:9b:9c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b712e1aa-9d80-464b-a5c6-232754c661d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:69:ec:80:67:cd:08:0d:99:bd:73:56:53:65: 6d:9a:2f:a0:e6:a5:50:1f:9f:9e:ac:cc:1e:1d:90: ae:13:a7:14:4d:8d:73:4f:61:8e:29:7a:40:bd:50: 2c:4c:ea:c6:c6:ee:f4:ed:1d:80:6d:78:e5:0c:5a: 91:4a:87:29:1c:01:eb:17:c1:7e:53:d8:a9:e0:82: 9f:b6:8e:6f:78:ac:e4:f5:a7:11:23:63:7d:21:32: e1:90:9e:5b:c7:43:d7:bd:32:b9:b2:be:20:45:80: 2f:28:aa:66:8e:77:5a:f7:d3:04:71:db:91:8d:3e: 83:3a:6e:1f:d1:af:31:eb:54:87:25:cf:8c:cd:de: 1a:49:88:8b:36:97:2a:66:08:38:1d:d1:20:94:7d: ba:eb:9e:7a:6a:17:a1:40:35:8c:6b:94:d7:62:6b: 1a:88:7d:9b:9a:61:05:c0:42:fc:16:5e:56:4c:6b: 29:eb:35:2f:ca:23:55:70:5e:6c:90:a6:ed:95:a6: 99:81:7f:b2:8e:bd:e0:05:24:e5:39:32:0b:21:5f: a7:b5:fa:3e:26:ce:58:e2:8d:73:10:ea:49:41:11: f5:39:e9:ef:32:bc:3e:b9:9c:a9:9a:bc:26:81:c1: c6:c5:59:92:89:6b:6a:e1:3b:4e:a2:2a:af:37:de: be:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:23:5A:51:2E:DF:8E:7F:A5:B1:3D:60:32:B4:8D:37:75:41:6F:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fc81609-cceb-339e-8bdd-ef413ab52259.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:61:71:19:02:a2:6e:2b:6e:22:48:39:14:b6:1b:ae:22:b8: 07:0e:5f:b1:44:5e:72:28:25:9b:eb:19:af:67:47:2e:2f:36: d9:b9:3d:5f:d7:10:72:21:3c:8a:4c:cf:ec:f5:df:60:bf:83: d8:76:9b:0e:00:c2:97:bf:53:4e:f2:6e:d5:01:e4:1d:1a:7e: 67:b7:c9:3a:3a:96:de:6a:63:03:6a:e7:36:42:b4:94:d1:5a: 0f:4f:7d:2e:77:e3:fd:44:1b:04:4b:39:74:12:8c:3e:0f:3c: 04:91:2d:c6:a3:a2:d1:98:45:27:07:53:bf:5d:c7:ce:4a:58: 77:f5:ca:23:75:84:c6:7b:32:d9:cb:cb:73:8b:af:f6:26:b6: d6:a5:e6:93:e6:f1:31:4a:0b:da:4a:fe:18:f3:43:34:db:75: 9d:35:db:7c:e3:6c:23:80:55:25:5d:3e:58:8e:21:b1:35:84: 75:41:31:44:f9:a1:9c:0e:57:5d:c4:f6:8b:6a:b1:b9:74:d6: 69:a3:88:43:a1:09:da:d4:9c:5f:16:fa:2f:2f:4c:ed:3c:c3: e9:b4:b1:33:4b:07:fc:82:71:4d:27:34:e9:9a:06:7f:33:ed: df:27:fb:4d:ba:7d:ad:7b:f9:c5:09:51:4d:37:96:67:1e:cf: 07:56:d2:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIth+NJPhkmbnIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjcxMmUxYWEtOWQ4MC00NjRiLWE1YzYtMjMyNzU0YzY2MWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmnsgGfNCA2ZvXNWU2Vtmi+g5qVQH5+erMwe HZCuE6cUTY1zT2GOKXpAvVAsTOrGxu707R2AbXjlDFqRSocpHAHrF8F+U9ip4IKf to5veKzk9acRI2N9ITLhkJ5bx0PXvTK5sr4gRYAvKKpmjnda99MEcduRjT6DOm4f 0a8x61SHJc+Mzd4aSYiLNpcqZgg4HdEglH266556ahehQDWMa5TXYmsaiH2bmmEF wEL8Fl5WTGsp6zUvyiNVcF5skKbtlaaZgX+yjr3gBSTlOTILIV+ntfo+Js5Y4o1z EOpJQRH1OenvMrw+uZypmrwmgcHGxVmSiWtq4TtOoiqvN96+MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFojWlEu345/pbE9YDK0jTd1QW/SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZjODE2MDktY2NlYi0z MzllLThiZGQtZWY0MTNhYjUyMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH5hcRkCom4rbiJIORS2G64iuAcOX7FEXnIoJZvrGa9nRy4vNtm5PV/X EHIhPIpMz+z132C/g9h2mw4Awpe/U07ybtUB5B0afme3yTo6lt5qYwNq5zZCtJTR Wg9PfS534/1EGwRLOXQSjD4PPASRLcajotGYRScHU79dx85KWHf1yiN1hMZ7MtnL y3OLr/Ymttal5pPm8TFKC9pK/hjzQzTbdZ0123zjbCOAVSVdPliOIbE1hHVBMUT5 oZwOV13E9otqsbl01mmjiEOhCdrUnF8W+i8vTO08w+m0sTNLB/yCcU0nNOmaBn8z 7d8n+026fa17+cUJUU03lmcezwdW0oM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:06 2025 by rpki-client