$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa File: 9df44781-4047-3c71-93d5-d36ca8cb49a0.roa (raw, json) Hash identifier: 1xS6pKhcS5n57dP78boO1U5MFiMcgtR8l4c0tZD8i/M= Subject key identifier: 8E:F3:2D:2E:1A:CC:0D:22:C6:FA:C3:A8:1D:0D:9F:FC:C9:99:E1:48 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6202269271F379C9227B2B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.28.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:26:92:71:f3:79:c9:22:7b:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0e604230-c031-443d-96e1-2c86d7590c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6b:fa:c2:9f:ca:d1:f4:ca:89:15:a8:0f:00: 1c:ba:ae:03:40:d1:5e:58:e0:b5:7f:13:7b:ad:9b: 90:d4:1f:17:45:65:e4:2c:b1:c8:d9:f5:da:b7:9a: 76:b0:07:85:42:21:f7:68:7c:2c:a3:ce:b6:2d:e7: 08:23:7b:94:b0:0f:30:83:cf:95:54:54:1b:c1:2e: 8b:16:9d:18:4f:16:59:32:9a:2b:13:ef:b2:87:ea: 8c:00:6e:e3:0c:07:fd:bf:d6:eb:94:31:0f:e2:64: ff:a9:38:fc:48:fa:cb:7a:f2:4b:8d:48:69:9a:6a: f6:b8:43:00:98:a8:0c:4b:49:b6:42:f7:f3:b4:3d: 80:f9:68:de:21:9b:08:14:36:5b:94:b2:d5:55:86: 79:8a:31:d6:31:ee:e2:16:34:ac:53:d9:38:79:82: 67:34:f4:79:4e:0f:e9:21:a5:7f:10:1f:54:f0:82: cb:f1:08:7c:f8:60:b4:83:66:92:9a:3b:64:da:f2: f4:ad:fc:da:10:be:50:d9:d3:a7:f1:42:70:23:3e: b2:f7:38:1c:84:c0:bc:41:b5:b3:f1:ac:d7:2e:52: a7:1e:71:60:3f:0d:74:5c:22:47:70:61:83:7c:a2: 6f:a9:c7:40:ed:54:57:ea:49:3a:40:06:bb:d1:16: f5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F3:2D:2E:1A:CC:0D:22:C6:FA:C3:A8:1D:0D:9F:FC:C9:99:E1:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9df44781-4047-3c71-93d5-d36ca8cb49a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:98:e2:44:de:80:94:d2:b2:10:6e:ed:8c:54:e2:5a:de:6d: 53:fb:79:a1:a2:5b:7a:0f:4e:ff:05:fc:49:82:4b:88:4f:63: cd:88:54:db:08:e0:82:95:f2:02:6d:18:e5:4b:a8:c3:c9:3a: cd:f4:cd:12:02:82:54:04:0f:42:8e:88:6f:a3:9b:56:d7:ca: e0:b4:7e:a1:c4:be:eb:14:8c:f5:e0:53:53:24:15:fb:87:6c: 8a:b0:9a:ac:e2:4b:ad:53:cb:e4:e9:dd:cc:57:03:a3:40:be: c2:8b:49:b1:5e:d1:af:fa:ce:ab:d8:05:f8:dd:ec:81:ab:34: 6c:a2:29:2a:d7:f9:93:b7:e0:df:cc:95:c6:7d:01:ca:ec:2f: 19:9b:47:88:5f:b2:30:bc:45:6f:70:93:83:e2:fd:0a:1c:dd: 30:d6:8f:fe:fc:c7:a9:33:3a:e4:38:9f:2b:36:16:a5:da:81: 53:8e:f1:4c:e9:2e:c7:0a:79:d0:03:f2:40:33:de:11:cb:5a: b8:35:b4:2d:2c:53:89:d8:87:27:db:86:cd:93:c0:eb:b1:85: fa:ad:77:54:7c:8a:f3:0a:83:ad:10:b7:90:30:87:d9:93:69: 20:53:75:d3:29:0c:67:5f:d7:2b:19:a6:73:19:55:37:fd:7f: 1f:7a:80:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiaScfN5ySJ7K4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGU2MDQyMzAtYzAzMS00NDNkLTk2ZTEtMmM4NmQ3NTkwYzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkGv6wp/K0fTKiRWoDwAcuq4DQNFeWOC1fxN7 rZuQ1B8XRWXkLLHI2fXat5p2sAeFQiH3aHwso862LecII3uUsA8wg8+VVFQbwS6L Fp0YTxZZMporE++yh+qMAG7jDAf9v9brlDEP4mT/qTj8SPrLevJLjUhpmmr2uEMA mKgMS0m2QvfztD2A+WjeIZsIFDZblLLVVYZ5ijHWMe7iFjSsU9k4eYJnNPR5Tg/p IaV/EB9U8ILL8Qh8+GC0g2aSmjtk2vL0rfzaEL5Q2dOn8UJwIz6y9zgchMC8QbWz 8azXLlKnHnFgPw10XCJHcGGDfKJvqcdA7VRX6kk6QAa70Rb1TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI7zLS4azA0ixvrDqB0Nn/zJmeFIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWRmNDQ3ODEtNDA0Ny0z YzcxLTkzZDUtZDM2Y2E4Y2I0OWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGY4kTegJTSshBu7YxU4lrebVP7eaGiW3oPTv8F/EmCS4hPY82IVNsI 4IKV8gJtGOVLqMPJOs30zRICglQED0KOiG+jm1bXyuC0fqHEvusUjPXgU1MkFfuH bIqwmqziS61Ty+Tp3cxXA6NAvsKLSbFe0a/6zqvYBfjd7IGrNGyiKSrX+ZO34N/M lcZ9AcrsLxmbR4hfsjC8RW9wk4Pi/Qoc3TDWj/78x6kzOuQ4nys2FqXagVOO8Uzp LscKedAD8kAz3hHLWrg1tC0sU4nYhyfbhs2TwOuxhfqtd1R8ivMKg60Qt5Awh9mT aSBTddMpDGdf1ysZpnMZVTf9fx96gIQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:17 2025 by rpki-client