$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a87e9b8c-6d75-355a-b67b-99d74dc28149.roa File: a87e9b8c-6d75-355a-b67b-99d74dc28149.roa (raw, json) Hash identifier: AJ2XUdU9yliOZYV7vA4c6TFpFaMElqBscgezl8B0o0k= Subject key identifier: E2:46:2E:63:DA:8B:DB:E3:82:59:06:F7:79:2B:A6:A0:B6:C9:50:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFD07998EB28E5E8736DA2D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a87e9b8c-6d75-355a-b67b-99d74dc28149.roa Signing time: Tue 26 Aug 2025 20:55:35 +0000 ROA not before: Tue 26 Aug 2025 20:55:35 +0000 ROA not after: Mon 24 Nov 2025 21:55:35 +0000 asID: 30036 IP address blocks: 173.28.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fd:07:99:8e:b2:8e:5e:87:36:da:2d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 20:55:35 2025 GMT Not After : Nov 24 21:55:35 2025 GMT Subject: CN=9365f3d7-ef8b-40f5-8f06-eb5f61e383c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:13:78:7a:fd:e6:00:1a:36:68:ee:a9:11:ac: f9:22:78:cc:34:83:e4:c7:a1:d5:60:1a:70:68:3e: 21:73:ac:df:c5:1f:b4:7d:ff:1f:33:13:b2:ca:25: 18:cb:95:eb:32:0e:a4:01:eb:04:2f:b3:f4:42:6f: b1:2f:41:d1:ce:87:42:07:fc:31:43:69:41:7e:90: be:ae:e5:31:8e:ed:a9:34:2b:01:1f:6a:1d:fe:b5: 6c:30:17:35:47:1d:1a:a5:a6:58:63:e6:fb:11:7d: cc:44:5b:87:ed:30:6e:17:1e:de:1a:fc:7a:f0:a6: c2:f7:92:61:70:e3:b0:8b:9b:e8:d4:ba:c1:cf:0e: 23:c0:d7:b3:df:37:1e:44:71:f3:a5:f3:6d:67:c1: 71:c5:c5:c5:32:80:aa:a8:5f:59:e0:8d:71:5a:1d: 2b:f1:9e:34:d3:f1:41:2d:6c:09:12:38:e7:23:04: b8:17:80:8b:51:0f:7c:ad:a2:6f:cf:8c:ef:f7:f2: 4d:ee:69:0c:69:35:55:2d:80:b2:22:cf:77:fa:1f: 5b:c0:41:7b:c1:23:43:79:bd:0e:dc:f1:6a:bf:43: aa:92:d8:bc:a6:93:1b:48:5b:a4:29:51:2f:31:82: ae:e8:37:ce:20:78:9b:ed:af:29:37:b0:43:5f:d0: b5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:46:2E:63:DA:8B:DB:E3:82:59:06:F7:79:2B:A6:A0:B6:C9:50:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a87e9b8c-6d75-355a-b67b-99d74dc28149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:86:c4:96:d9:ca:77:3e:00:90:3c:b2:58:ce:05:a5:e5:ca: c7:2d:4c:99:88:7d:a4:ad:d2:88:6c:5b:1c:54:8b:04:78:01: a0:1c:4c:b8:3d:4b:bf:e3:ea:96:16:10:42:a4:8d:3c:ab:e3: d9:e6:28:04:5e:cb:0a:bd:40:f4:e3:a6:ce:e6:02:c3:75:56: bc:70:10:ab:7e:52:4d:ca:b5:6a:24:ae:24:7a:14:48:2e:51: a2:10:9b:16:b7:41:4d:04:1a:f9:8b:70:0c:09:79:48:02:f2: a6:40:15:0c:0e:72:81:7f:d6:35:f2:3b:95:64:19:f4:7b:a9: 93:4d:11:33:58:b7:ed:f8:e8:10:0e:2e:f3:8b:99:23:5d:cb: 4c:65:57:53:81:50:2e:f1:35:f8:e4:f8:91:bc:72:17:3e:11: 09:81:c5:ca:8f:34:0b:db:05:87:b5:09:2e:c8:b4:a3:b7:43: 4a:e0:8c:a4:72:41:55:7e:ba:84:52:3a:98:12:3f:19:97:ed: c2:27:79:73:45:27:31:0b:80:e8:09:5c:fa:83:ce:88:69:1f: 56:44:99:f4:a0:b3:43:31:59:77:ab:ad:4a:52:e0:a6:b2:be: 87:f0:9f:06:10:fe:c5:1b:96:6f:bf:6b:1f:a5:27:4f:85:fe: 3f:3f:ff:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr9B5mOso5ehzbaLYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjIwNTUzNVoXDTI1MTEyNDIxNTUzNVowLzEtMCsGA1UEAxMk OTM2NWYzZDctZWY4Yi00MGY1LThmMDYtZWI1ZjYxZTM4M2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBN4ev3mABo2aO6pEaz5InjMNIPkx6HVYBpw aD4hc6zfxR+0ff8fMxOyyiUYy5XrMg6kAesEL7P0Qm+xL0HRzodCB/wxQ2lBfpC+ ruUxju2pNCsBH2od/rVsMBc1Rx0apaZYY+b7EX3MRFuH7TBuFx7eGvx68KbC95Jh cOOwi5vo1LrBzw4jwNez3zceRHHzpfNtZ8FxxcXFMoCqqF9Z4I1xWh0r8Z400/FB LWwJEjjnIwS4F4CLUQ98raJvz4zv9/JN7mkMaTVVLYCyIs93+h9bwEF7wSNDeb0O 3PFqv0Oqkti8ppMbSFukKVEvMYKu6DfOIHib7a8pN7BDX9C10QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJGLmPai9vjglkG93krpqC2yVAsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTg3ZTliOGMtNmQ3NS0z NTVhLWI2N2ItOTlkNzRkYzI4MTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKGxJbZync+AJA8sljOBaXlysctTJmIfaSt0ohsWxxUiwR4AaAcTLg9 S7/j6pYWEEKkjTyr49nmKAReywq9QPTjps7mAsN1VrxwEKt+Uk3KtWokriR6FEgu UaIQmxa3QU0EGvmLcAwJeUgC8qZAFQwOcoF/1jXyO5VkGfR7qZNNETNYt+346BAO LvOLmSNdy0xlV1OBUC7xNfjk+JG8chc+EQmBxcqPNAvbBYe1CS7ItKO3Q0rgjKRy QVV+uoRSOpgSPxmX7cIneXNFJzELgOgJXPqDzohpH1ZEmfSgs0MxWXerrUpS4Kay vofwnwYQ/sUblm+/ax+lJ0+F/j8//18= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:38 2025 by rpki-client