$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa File: df95bfc8-2440-38d8-933c-5620004442e8.roa (raw, json) Hash identifier: BdGtJ5r1okr9fqwkljPcQqWCw5Da2cKYmpwwqo1rYM0= Subject key identifier: 49:B3:C0:62:E7:F9:29:07:08:66:FB:B0:6E:D5:3E:0B:46:60:9F:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE47E85E7DAAD8E4C6D000 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.90.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:47:e8:5e:7d:aa:d8:e4:c6:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e3a6e8c3-efd5-4d6a-bae2-279346f6ab20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b3:d2:42:5a:b8:c5:7d:f6:95:53:53:1a:50: 7f:e5:08:e1:a7:fb:d9:5a:e3:4c:fd:f7:2d:ba:c5: 0c:72:8e:fc:24:2d:81:ce:06:dd:c5:4b:68:d0:e4: 8b:2f:f8:db:46:26:ed:47:0f:76:53:7d:d8:e1:4f: 74:4f:97:96:fa:5c:56:62:dc:38:f9:30:51:b1:4b: fc:e8:f4:99:1c:e7:52:fb:e5:89:e9:60:1f:59:10: a5:0c:38:4d:68:58:9c:07:5a:22:ab:af:9c:a2:88: f5:36:4a:fe:6a:b0:73:6b:4d:bc:16:86:c2:84:fd: 92:56:4c:5b:05:4f:c3:a5:47:57:3d:b1:08:f6:a6: 15:31:6e:cb:3c:0f:d9:53:91:4d:89:fc:1f:a0:2b: 9a:75:ce:2a:6c:3b:dc:35:8d:ae:84:17:86:74:3b: 31:78:fb:3c:69:f1:1d:59:a9:98:15:39:17:45:72: af:ec:e8:71:c5:db:6f:d8:ab:2d:62:9c:8d:d8:25: aa:08:52:ea:e0:6a:0f:88:37:cc:7c:c4:94:09:f8: ee:51:07:36:f4:12:81:0f:c3:fe:72:19:3d:5c:46: 75:0b:04:dd:cb:54:bc:d0:3e:f9:a4:ed:00:c4:bf: 7d:5e:e2:1b:a7:77:5d:fd:0a:19:e3:14:89:e0:30: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:B3:C0:62:E7:F9:29:07:08:66:FB:B0:6E:D5:3E:0B:46:60:9F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df95bfc8-2440-38d8-933c-5620004442e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.90.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:01:87:fa:2d:ce:e6:b3:28:59:6b:dc:92:fb:f2:62:16:bf: 1f:a0:86:05:27:5a:6f:40:f9:a7:8a:46:11:58:a2:95:86:c4: a9:27:a7:13:49:e8:ae:bb:67:38:3b:07:f3:fe:37:0d:9b:c8: 16:95:b8:9e:4c:28:b8:3f:eb:32:0a:b4:63:cd:ab:72:d3:a5: d0:3e:49:ca:bf:ee:56:52:54:4c:cf:04:38:9d:78:e0:25:3d: 8c:42:e7:40:19:a7:11:ac:99:e2:1b:93:47:b9:80:83:44:96: b8:c9:85:2c:81:6a:af:ae:ee:7f:69:07:a9:44:23:a5:e4:0c: 26:47:c2:3c:67:63:28:97:32:7b:6e:46:ca:1f:53:0c:50:01: 66:0a:26:8a:c4:91:72:db:13:3f:0e:ba:fb:d7:c9:16:53:92: d6:4e:db:6a:57:6a:fb:01:fd:48:d2:0c:11:79:8d:b8:9f:7a: 72:ec:c5:f6:d5:44:52:25:ea:13:96:45:0a:68:3c:3e:c0:d4: 69:35:0e:5e:9e:7b:2e:92:8c:9c:fe:76:a4:08:9c:1d:bb:f4: cc:f4:ca:95:7f:1d:dc:4b:aa:82:b4:6c:24:7a:6e:96:33:c3: bf:8f:1b:8f:a7:39:4f:86:13:07:e9:a9:a4:92:27:47:44:fe: 91:09:1e:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkfoXn2q2OTG0AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTNhNmU4YzMtZWZkNS00ZDZhLWJhZTItMjc5MzQ2ZjZhYjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbPSQlq4xX32lVNTGlB/5Qjhp/vZWuNM/fct usUMco78JC2BzgbdxUto0OSLL/jbRibtRw92U33Y4U90T5eW+lxWYtw4+TBRsUv8 6PSZHOdS++WJ6WAfWRClDDhNaFicB1oiq6+cooj1Nkr+arBza028FobChP2SVkxb BU/DpUdXPbEI9qYVMW7LPA/ZU5FNifwfoCuadc4qbDvcNY2uhBeGdDsxePs8afEd WamYFTkXRXKv7Ohxxdtv2KstYpyN2CWqCFLq4GoPiDfMfMSUCfjuUQc29BKBD8P+ chk9XEZ1CwTdy1S80D75pO0AxL99XuIbp3dd/QoZ4xSJ4DDnGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmzwGLn+SkHCGb7sG7VPgtGYJ+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY5NWJmYzgtMjQ0MC0z OGQ4LTkzM2MtNTYyMDAwNDQ0MmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRxaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwBh/otzuazKFlr3JL78mIWvx+ghgUnWm9A+aeKRhFYopWGxKknpxNJ 6K67Zzg7B/P+Nw2byBaVuJ5MKLg/6zIKtGPNq3LTpdA+Scq/7lZSVEzPBDideOAl PYxC50AZpxGsmeIbk0e5gINElrjJhSyBaq+u7n9pB6lEI6XkDCZHwjxnYyiXMntu RsofUwxQAWYKJorEkXLbEz8OuvvXyRZTktZO22pXavsB/UjSDBF5jbifenLsxfbV RFIl6hOWRQpoPD7A1Gk1Dl6eey6SjJz+dqQInB279Mz0ypV/HdxLqoK0bCR6bpYz w7+PG4+nOU+GEwfpqaSSJ0dE/pEJHvA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:27 2025 by rpki-client