$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa File: bfe8432c-0a39-369f-abd1-923404f53a2f.roa (raw, json) Hash identifier: YtkOkiKSFzoSJ1yCckhWZH+7EivCxrBsWiTNnX3IEMc= Subject key identifier: 90:32:0F:0D:F4:DE:C6:ED:B1:C0:A7:92:3B:D1:DB:C3:AF:8C:D5:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE3ED93AD808F147FD6AE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3e:d9:3a:d8:08:f1:47:fd:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=35209c1f-5a27-40c0-9f5f-d6fb923bf5aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:8c:04:b4:25:0a:54:56:8f:07:e2:a7:d3:1e: a7:38:7f:3b:46:28:b7:fb:1a:c5:63:10:43:87:ef: 42:ba:e6:8b:95:14:2e:39:b9:2f:98:4c:7c:b3:13: dc:8e:61:3d:49:ff:7f:e5:9e:7d:66:55:e4:62:11: 21:6d:d6:7e:ee:60:ce:a8:28:98:a0:6b:2e:8e:59: 5c:04:fe:80:2d:f6:31:d3:1e:4b:28:5f:f7:77:66: 3b:93:e9:8a:04:3d:69:9c:13:7b:bd:96:96:da:5d: 4c:38:89:06:f8:65:6f:83:3c:74:9a:47:08:04:02: de:c2:eb:f2:c8:02:b4:23:d3:99:37:7b:ec:d7:c1: a9:cd:af:83:e0:d1:c2:6e:24:66:2d:38:52:c9:7d: d2:ed:10:cc:22:b2:92:2a:76:a0:25:cf:50:59:a5: 6a:fd:0e:de:4f:8f:0e:1b:d7:48:8b:0d:9c:5a:19: f2:f9:f2:5c:56:ff:1c:8e:78:97:a8:38:65:38:97: ed:16:d9:60:2b:6c:26:ff:1f:bf:b4:49:2d:95:23: 34:0c:82:37:74:e4:20:77:82:ad:9d:34:ec:15:b8: 1a:9e:94:ab:d6:d2:fa:a0:2d:ae:4f:c0:b5:f7:25: 2d:25:14:90:be:d9:47:0a:48:bc:2c:12:c1:63:93: 1f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:0F:0D:F4:DE:C6:ED:B1:C0:A7:92:3B:D1:DB:C3:AF:8C:D5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bfe8432c-0a39-369f-abd1-923404f53a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:e2:a7:8a:61:e9:5a:8e:fb:4c:2b:2c:39:8c:98:55:79:73: f0:5c:dc:76:2b:be:ac:8e:c1:35:47:1c:61:46:85:ab:13:53: 3c:96:0e:3d:a1:6c:11:4e:3f:cb:08:16:64:73:3c:28:ac:ba: e4:67:bc:9d:cc:fe:9c:5a:b9:61:89:0e:b7:07:41:16:e7:c2: 30:02:92:41:dd:88:38:b6:c9:26:90:46:75:45:08:2c:40:8c: 61:9d:f6:20:68:04:6f:6c:ab:87:a4:7c:e1:f6:de:d2:90:e1: 62:f8:d6:49:f5:54:7d:de:01:ce:c9:51:65:a9:eb:00:f4:7b: 8c:29:05:09:cf:6a:63:2c:92:1f:c8:f8:31:e2:7c:69:a8:c2: d6:be:4a:21:42:dc:f5:e3:a6:87:b5:5f:3b:a5:23:59:6e:63: 4b:49:9f:87:08:5b:ae:8b:2e:48:48:78:89:ae:4e:83:9b:ab: c5:56:2b:b8:ec:6f:5b:e2:b0:50:d3:62:8e:c7:2d:d8:a0:34: 3c:c6:48:0b:5d:4a:e9:19:17:63:5e:ce:3c:a9:df:05:f0:b6: 91:55:25:58:75:03:3a:99:4a:c0:93:a4:7a:48:e0:85:26:dd: 81:61:74:d0:2b:d6:ec:c5:06:7a:bb:ee:2f:bd:21:1e:f0:05: b5:b3:33:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzj7ZOtgI8Uf9auAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzUyMDljMWYtNWEyNy00MGMwLTlmNWYtZDZmYjkyM2JmNWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYwEtCUKVFaPB+Kn0x6nOH87Rii3+xrFYxBD h+9CuuaLlRQuObkvmEx8sxPcjmE9Sf9/5Z59ZlXkYhEhbdZ+7mDOqCiYoGsujllc BP6ALfYx0x5LKF/3d2Y7k+mKBD1pnBN7vZaW2l1MOIkG+GVvgzx0mkcIBALewuvy yAK0I9OZN3vs18Gpza+D4NHCbiRmLThSyX3S7RDMIrKSKnagJc9QWaVq/Q7eT48O G9dIiw2cWhny+fJcVv8cjniXqDhlOJftFtlgK2wm/x+/tEktlSM0DII3dOQgd4Kt nTTsFbganpSr1tL6oC2uT8C19yUtJRSQvtlHCki8LBLBY5MfdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAyDw303sbtscCnkjvR28OvjNVnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmZlODQzMmMtMGEzOS0z NjlmLWFiZDEtOTIzNDA0ZjUzYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3ip4ph6VqO+0wrLDmMmFV5c/Bc3HYrvqyOwTVHHGFGhasTUzyWDj2h bBFOP8sIFmRzPCisuuRnvJ3M/pxauWGJDrcHQRbnwjACkkHdiDi2ySaQRnVFCCxA jGGd9iBoBG9sq4ekfOH23tKQ4WL41kn1VH3eAc7JUWWp6wD0e4wpBQnPamMskh/I +DHifGmowta+SiFC3PXjpoe1XzulI1luY0tJn4cIW66LLkhIeImuToObq8VWK7js b1visFDTYo7HLdigNDzGSAtdSukZF2Nezjyp3wXwtpFVJVh1AzqZSsCTpHpI4IUm 3YFhdNAr1uzFBnq77i+9IR7wBbWzM+s= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:13 2025 by rpki-client