$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa File: 8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa (raw, json) Hash identifier: SKJix+6ZYCfkHqmUzHY3I3j1gyXZ+vtKBOxZHUdtmGo= Subject key identifier: 18:B5:3F:26:EC:96:EA:46:58:5D:9A:18:CC:6F:C3:E5:8E:52:F3:92 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B25FC47F1110687899A15B040 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 173.23.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:47:f1:11:06:87:89:9a:15:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=e025395b-ce29-40ab-bf7c-eed600ab78b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8e:73:27:18:d4:db:34:25:59:1f:af:af:cc: 3d:03:68:90:b8:2d:b7:56:6f:bd:9e:6a:db:bd:90: 0d:79:ec:f3:7c:ef:7b:1c:e4:2a:d6:7f:2b:fb:58: 9e:15:7a:2b:48:48:09:5d:ef:80:a4:45:a9:21:70: 0b:7b:e8:dc:28:ea:47:55:5c:87:a2:db:9d:e2:6a: ea:b2:7b:23:36:53:07:df:8f:44:7d:22:63:41:5f: b7:7c:52:c8:96:0d:ab:1a:f9:73:c2:71:c8:4e:09: 51:24:cd:f2:0f:f1:d6:f8:ea:e9:4b:4d:a5:35:d6: f7:de:08:0c:84:83:87:23:c2:16:ec:63:75:f2:0e: 82:46:c7:a8:f4:c8:40:b9:ac:53:f1:e4:4a:6c:78: 1f:f0:52:54:c0:61:89:ce:cb:2e:48:47:15:19:14: 65:85:ac:52:87:44:5e:d0:63:c0:43:cd:d0:7c:0d: 07:d9:ea:4b:93:ec:63:21:35:1c:4c:a1:20:76:48: fa:c0:d9:63:a5:01:91:2b:ab:84:c1:34:ac:14:c7: ab:1a:e6:29:77:c7:4b:e5:e3:97:89:09:39:eb:4d: 21:29:98:ad:7c:d2:55:70:aa:a0:a2:b5:2b:04:83: 4f:bd:45:03:5a:3b:84:9a:e8:b6:99:77:c4:5d:83: 1e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:B5:3F:26:EC:96:EA:46:58:5D:9A:18:CC:6F:C3:E5:8E:52:F3:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/8954cdb0-4fa2-3ce3-8817-56f09b67efc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5a:6e:c0:f3:a5:ce:be:52:d6:1a:a5:27:6f:a6:c5:db:7a: ed:b5:2d:21:58:6d:14:6c:55:df:5d:d4:03:67:bf:30:c4:01: 40:33:dd:49:53:4a:42:af:8c:24:3a:44:d2:18:2a:b3:b4:00: be:6b:7a:3c:26:55:75:e8:02:d7:5c:eb:a1:d2:58:2b:18:a3: 1e:99:60:9a:30:fc:c9:f0:36:de:99:5d:03:51:bd:48:08:9b: 36:7e:88:00:31:9d:fb:94:bf:e5:2b:63:a9:84:2f:5e:e9:56: d8:4a:8a:56:e5:7e:d1:78:fc:48:96:0b:9b:39:59:2f:f4:08: 58:23:a1:ea:f6:64:c5:f0:d5:38:c9:e9:a9:f2:88:01:99:a0: f2:b5:78:8d:a0:bc:a8:7d:43:eb:f1:a9:09:28:5f:b4:20:89: fe:36:32:99:3b:d3:34:56:ea:f0:f1:62:b9:9e:ae:52:33:09: 74:34:d3:4d:5e:6b:ed:75:6d:d5:ab:b3:04:00:dd:31:d9:4b: 02:9d:d8:54:6e:f0:a1:ab:1b:01:6e:75:3f:ca:95:05:13:27: 9b:3c:c9:a4:3d:81:c3:ce:b9:07:21:c7:ff:68:d5:52:d1:2a: 05:06:a4:d3:48:0c:3a:b4:e1:c9:d1:cb:6f:09:16:22:37:a8: e9:90:21:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EfxEQaHiZoVsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk ZTAyNTM5NWItY2UyOS00MGFiLWJmN2MtZWVkNjAwYWI3OGI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI5zJxjU2zQlWR+vr8w9A2iQuC23Vm+9nmrb vZANeezzfO97HOQq1n8r+1ieFXorSEgJXe+ApEWpIXALe+jcKOpHVVyHotud4mrq snsjNlMH349EfSJjQV+3fFLIlg2rGvlzwnHITglRJM3yD/HW+OrpS02lNdb33ggM hIOHI8IW7GN18g6CRseo9MhAuaxT8eRKbHgf8FJUwGGJzssuSEcVGRRlhaxSh0Re 0GPAQ83QfA0H2epLk+xjITUcTKEgdkj6wNljpQGRK6uEwTSsFMerGuYpd8dL5eOX iQk5600hKZitfNJVcKqgorUrBINPvUUDWjuEmui2mXfEXYMedwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBi1PybslupGWF2aGMxvw+WOUvOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODk1NGNkYjAtNGZhMi0z Y2UzLTg4MTctNTZmMDliNjdlZmM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBabsDzpc6+UtYapSdvpsXbeu21LSFYbRRsVd9d1ANnvzDEAUAz3UlT SkKvjCQ6RNIYKrO0AL5rejwmVXXoAtdc66HSWCsYox6ZYJow/MnwNt6ZXQNRvUgI mzZ+iAAxnfuUv+UrY6mEL17pVthKilblftF4/EiWC5s5WS/0CFgjoer2ZMXw1TjJ 6anyiAGZoPK1eI2gvKh9Q+vxqQkoX7Qgif42Mpk70zRW6vDxYrmerlIzCXQ0001e a+11bdWrswQA3THZSwKd2FRu8KGrGwFudT/KlQUTJ5s8yaQ9gcPOuQchx/9o1VLR KgUGpNNIDDq04cnRy28JFiI3qOmQITQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:14 2025 by rpki-client