$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa File: 325ce877-ce13-37a2-ac60-db90fc5927ff.roa (raw, json) Hash identifier: VKepIDbpxx4je4fO9uLxoCywWl4MOG84mFhMgHIpfxU= Subject key identifier: 7E:E1:68:68:BF:0C:0A:3A:1A:63:89:C7:FE:CF:B3:A6:85:E7:C6:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D72C049925A36B11F27D88 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.16.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:2c:04:99:25:a3:6b:11:f2:7d:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=4212da5d-7da5-46c1-980b-9186d0a464d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c3:ae:18:ba:08:44:7e:64:05:b7:54:ad:76: fc:2d:69:f4:9f:35:ce:aa:ac:e0:0a:f1:55:16:c4: cf:1e:0a:59:53:0c:ca:50:b7:da:85:fa:d1:c5:7c: 71:7b:de:6b:87:2e:19:79:61:9a:2b:33:d4:55:fe: 8e:64:e4:7a:ca:4c:7c:1e:38:48:5f:11:0b:d5:e5: 12:97:e7:52:9e:4f:64:4a:40:26:48:fa:cb:b9:f9: 88:46:2d:bc:36:88:24:1f:c5:50:0d:e2:f5:6a:ec: 6b:da:60:15:bd:07:27:de:8b:70:b6:aa:2e:fc:68: 94:da:9a:e9:f7:76:64:06:0c:13:b9:7b:4f:76:b3: be:13:c8:64:38:8e:2a:d1:eb:44:d8:e2:2b:41:3b: 9b:5e:d8:4f:30:59:97:fe:db:1e:13:d4:ad:8b:7d: 28:2c:3c:72:96:dc:c2:45:e4:c2:bd:42:70:88:9b: 6c:9a:ab:49:fb:b5:49:ee:f0:f9:5b:c9:e5:4a:38: 66:3d:26:7e:07:4c:53:52:85:16:47:0f:6d:37:ba: 1d:23:24:c4:3a:ba:61:d7:0f:73:c7:ab:79:1f:35: ca:0f:42:59:8a:b1:61:99:95:b9:f6:0e:9c:64:5b: 26:95:a9:06:39:a2:a5:0e:9c:51:eb:09:b2:f2:25: 90:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:E1:68:68:BF:0C:0A:3A:1A:63:89:C7:FE:CF:B3:A6:85:E7:C6:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/325ce877-ce13-37a2-ac60-db90fc5927ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:c6:10:d4:6c:ba:a1:29:c6:40:b6:2e:f0:da:52:f1:db:c1: c6:1b:11:29:29:ed:fe:d2:c2:35:7e:89:d4:6b:27:36:7a:b2: aa:29:67:1d:5e:1a:fa:d5:15:ee:81:5c:6f:f8:ca:1b:d6:2d: 2d:e6:bc:5f:6b:94:57:94:91:ea:53:09:04:03:59:e3:1b:6c: 8e:2e:45:6d:9a:f8:96:22:ab:7e:66:2b:fe:44:1d:c5:70:a3: e0:39:22:70:d0:74:44:a9:9f:05:11:8b:31:8d:77:59:59:97: e6:f7:0e:ed:f2:34:78:37:46:0a:af:de:7f:74:ce:d5:c0:1b: b4:42:3b:fa:e8:c1:17:3f:01:4b:2a:c3:23:b6:ad:63:48:e1: 35:69:8e:69:e6:99:39:0b:c3:0f:ed:73:ff:67:75:d2:10:93: d3:e9:5e:42:72:0f:b0:94:d4:17:ac:73:56:bb:a2:4a:c8:a1: 0e:56:8a:80:48:11:a8:9c:85:ea:f5:8b:96:4c:43:cf:45:cc: 89:fc:ad:75:76:01:71:9d:26:aa:b9:39:eb:d1:26:82:5e:39: 86:ea:6f:a5:37:f2:76:0b:1c:b0:1b:d0:27:79:63:29:ad:9e: 72:b2:19:f4:95:2c:b3:a7:b5:ce:a7:bd:86:15:cd:29:89:4b: ac:58:16:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1ywEmSWjaxHyfYgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NDIxMmRhNWQtN2RhNS00NmMxLTk4MGItOTE4NmQwYTQ2NGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMOuGLoIRH5kBbdUrXb8LWn0nzXOqqzgCvFV FsTPHgpZUwzKULfahfrRxXxxe95rhy4ZeWGaKzPUVf6OZOR6ykx8HjhIXxEL1eUS l+dSnk9kSkAmSPrLufmIRi28NogkH8VQDeL1auxr2mAVvQcn3otwtqou/GiU2prp 93ZkBgwTuXtPdrO+E8hkOI4q0etE2OIrQTubXthPMFmX/tseE9Sti30oLDxyltzC ReTCvUJwiJtsmqtJ+7VJ7vD5W8nlSjhmPSZ+B0xTUoUWRw9tN7odIyTEOrph1w9z x6t5HzXKD0JZirFhmZW59g6cZFsmlakGOaKlDpxR6wmy8iWQvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7haGi/DAo6GmOJx/7Ps6aF58YcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzI1Y2U4NzctY2UxMy0z N2EyLWFjNjAtZGI5MGZjNTkyN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjGENRsuqEpxkC2LvDaUvHbwcYbESkp7f7SwjV+idRrJzZ6sqopZx1e GvrVFe6BXG/4yhvWLS3mvF9rlFeUkepTCQQDWeMbbI4uRW2a+JYiq35mK/5EHcVw o+A5InDQdESpnwURizGNd1lZl+b3Du3yNHg3Rgqv3n90ztXAG7RCO/rowRc/AUsq wyO2rWNI4TVpjmnmmTkLww/tc/9nddIQk9PpXkJyD7CU1Besc1a7okrIoQ5WioBI Eaicher1i5ZMQ89FzIn8rXV2AXGdJqq5OevRJoJeOYbqb6U38nYLHLAb0Cd5Yymt nnKyGfSVLLOntc6nvYYVzSmJS6xYFtk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:55 2025 by rpki-client