$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa File: 85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa (raw, json) Hash identifier: KCuLVoWw86iFf3WMJUlBB34lPJBxAoSxnPaOiwUi3KQ= Subject key identifier: 42:79:9E:EB:32:A6:3B:4D:D4:06:C3:3E:61:CE:D9:1B:B8:12:24:74 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE3A417219031314D7AF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3a:41:72:19:03:13:14:d7:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=786517b5-8967-4094-ad95-b13c6072909d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:6d:e3:1e:75:57:59:39:58:f9:2a:d2:c6:1f: a8:84:18:0d:fd:04:f8:09:40:15:a3:cc:70:fa:c6: aa:7d:26:76:3f:a5:77:57:b1:ef:7b:dc:a5:11:c2: 3f:9e:90:c9:66:28:43:0a:8a:ad:5b:fe:1f:42:82: 76:20:f9:fa:49:47:e6:45:d5:07:f6:44:75:15:37: c0:ab:b0:8f:7a:bc:67:76:85:7b:53:a1:05:7a:34: fe:ca:8e:7a:01:62:bc:c0:35:2c:7b:9c:1b:3f:5b: 35:f0:13:77:69:ac:c8:9f:a2:82:6d:b1:10:9b:cc: ce:48:1d:09:f6:f5:7b:60:ce:ea:6b:5f:66:e6:db: 0d:1b:b3:45:76:bf:b7:9d:86:09:6c:7f:21:fa:ad: ae:8c:bf:0e:15:1f:48:1d:34:66:cc:c3:7b:77:66: 6e:a8:cc:1f:d2:15:d0:e2:5b:7d:ad:14:46:fb:ce: cb:cf:cb:df:76:d9:3f:dc:4b:7b:01:2c:b5:d0:d9: 9c:8e:c6:c9:cb:9d:69:07:96:2e:59:a3:b6:1d:9f: b0:89:78:b4:1b:78:3c:a4:b5:58:92:91:f6:91:02: 59:a3:09:dd:47:56:87:c0:07:ec:8c:18:46:f8:d1: a0:a6:e5:f1:fb:21:8e:de:7b:48:b9:76:08:d7:a6: 6e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:9E:EB:32:A6:3B:4D:D4:06:C3:3E:61:CE:D9:1B:B8:12:24:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/85e6db22-fc50-3f01-b100-df8ae1e8f65c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:dc:49:77:86:ea:6b:a3:47:6c:2f:b3:04:34:84:9e:1f:0d: 18:23:40:a0:7d:5e:66:2b:8b:2b:59:0c:a4:57:85:d6:6a:48: 9b:db:ef:f7:f2:1a:7a:31:e0:37:aa:69:3f:dd:07:09:10:be: c0:a0:ab:af:54:f0:6f:8c:b9:ae:08:6f:78:c8:16:89:cb:30: e0:cc:f1:b2:ec:f6:f9:b0:25:20:0a:cc:26:16:62:04:d2:d6: 03:56:48:5f:88:67:16:ce:d6:8d:4e:1f:46:e6:13:e6:ee:b0: 44:44:4e:44:ef:dd:de:7f:28:25:b0:2f:5d:90:3b:62:46:28: 06:da:24:34:78:ea:f8:1e:da:ee:ab:2c:9b:e0:d5:93:93:99: 23:33:48:fb:75:5f:bc:5a:9b:41:07:81:a2:8a:82:ed:01:66: d1:a8:07:a0:80:7c:2a:7a:31:8d:ea:fe:c6:93:58:f3:bb:9c: 15:57:4c:37:6b:89:37:d5:50:e3:99:62:64:69:02:e5:74:f5: 58:e0:67:4b:fd:34:83:61:cf:29:8f:89:6c:2f:40:7c:08:26: fb:58:b3:23:3b:85:c6:55:a0:25:57:ea:e0:a0:dc:b8:7d:cf: 55:dc:64:b0:87:ca:5f:ac:82:e2:81:4c:ab:41:0d:24:ec:03: 4c:d3:f4:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzjpBchkDExTXr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Nzg2NTE3YjUtODk2Ny00MDk0LWFkOTUtYjEzYzYwNzI5MDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg23jHnVXWTlY+SrSxh+ohBgN/QT4CUAVo8xw +saqfSZ2P6V3V7Hve9ylEcI/npDJZihDCoqtW/4fQoJ2IPn6SUfmRdUH9kR1FTfA q7CPerxndoV7U6EFejT+yo56AWK8wDUse5wbP1s18BN3aazIn6KCbbEQm8zOSB0J 9vV7YM7qa19m5tsNG7NFdr+3nYYJbH8h+q2ujL8OFR9IHTRmzMN7d2ZuqMwf0hXQ 4lt9rRRG+87Lz8vfdtk/3Et7ASy10NmcjsbJy51pB5YuWaO2HZ+wiXi0G3g8pLVY kpH2kQJZowndR1aHwAfsjBhG+NGgpuXx+yGO3ntIuXYI16ZuVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ5nusypjtN1AbDPmHO2Ru4EiR0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODVlNmRiMjItZmM1MC0z ZjAxLWIxMDAtZGY4YWUxZThmNjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRyQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/cSXeG6mujR2wvswQ0hJ4fDRgjQKB9XmYriytZDKRXhdZqSJvb7/fy Gnox4DeqaT/dBwkQvsCgq69U8G+Mua4Ib3jIFonLMODM8bLs9vmwJSAKzCYWYgTS 1gNWSF+IZxbO1o1OH0bmE+busERETkTv3d5/KCWwL12QO2JGKAbaJDR46vge2u6r LJvg1ZOTmSMzSPt1X7xam0EHgaKKgu0BZtGoB6CAfCp6MY3q/saTWPO7nBVXTDdr iTfVUOOZYmRpAuV09VjgZ0v9NINhzymPiWwvQHwIJvtYsyM7hcZVoCVX6uCg3Lh9 z1XcZLCHyl+sguKBTKtBDSTsA0zT9KQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:11 2025 by rpki-client