$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e028f08e-8540-312c-827e-7bbb61381277.roa File: e028f08e-8540-312c-827e-7bbb61381277.roa (raw, json) Hash identifier: VQbvvmcSKPZX1ff7MMiGTWlaBSohk6ocl6QvxjOie1E= Subject key identifier: A3:67:A8:AD:07:2E:96:8A:26:C6:AB:CD:AF:01:B6:C6:5A:1C:4C:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE439E956E91FC99537990 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e028f08e-8540-312c-827e-7bbb61381277.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.18.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:43:9e:95:6e:91:fc:99:53:79:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4bb99d4e-0e83-4075-88b9-1cf9a81c7193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:c8:19:e2:8a:2a:d5:38:fd:52:d4:06:94:d2: 93:c2:3f:29:82:de:6f:71:1e:29:de:89:a5:f6:00: 93:f4:6d:fa:de:92:55:37:fa:4f:96:ab:93:8e:8a: df:98:66:f8:9e:eb:6a:9f:80:4a:34:7f:05:c0:ad: db:13:55:cc:7e:b9:49:0c:0c:90:4b:88:b2:b7:95: 77:80:c7:94:36:f9:9d:58:22:a2:58:ba:e9:9f:43: 2d:9a:67:b7:80:49:b0:70:9f:8a:e4:a6:41:5d:6e: 6e:2d:91:f3:f5:50:b4:2d:31:86:79:c9:28:c0:b7: bd:f1:29:c6:b5:35:56:d6:47:49:71:6a:19:8e:e8: 62:e3:09:40:48:14:0f:68:03:b4:e8:2d:aa:04:4f: 4c:24:76:2b:03:aa:a1:da:40:bf:cb:2b:6a:fe:39: ad:dc:88:21:c3:6a:bf:a6:ca:4f:18:ca:04:36:30: 11:96:8b:85:8b:f4:e0:5d:dd:32:3b:fb:16:1f:6a: 37:6e:52:34:2c:6a:30:ab:71:4f:94:f7:c6:a0:95: 72:62:59:c3:50:a0:27:cc:75:07:89:bf:3c:e8:55: 13:bc:0b:3c:12:b1:08:b2:75:14:c6:e2:9e:02:29: a5:15:05:60:08:33:65:3f:6b:02:44:6b:9e:ac:a2: 70:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:67:A8:AD:07:2E:96:8A:26:C6:AB:CD:AF:01:B6:C6:5A:1C:4C:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e028f08e-8540-312c-827e-7bbb61381277.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.18.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0b:56:37:54:43:32:1a:c8:75:5d:45:0f:7c:14:7f:3f:2f: ef:60:7d:e2:80:b6:bd:72:ec:38:ab:32:1a:a6:93:26:d0:d7: ba:7f:ea:f2:e2:21:c2:aa:60:80:9d:2d:92:32:c0:1d:44:0a: 22:b8:03:0f:bd:87:11:45:d2:33:c8:97:3d:a5:47:8f:6f:5e: 2a:f0:f7:c9:23:54:bc:e1:ba:ba:2d:fc:b9:10:38:a4:1a:49: 1c:4e:b7:a7:e6:01:af:6d:f5:07:61:82:20:35:b6:d0:ed:4e: 0b:26:c5:c5:95:fa:ed:f4:ba:68:57:ab:73:f0:8b:88:c7:e8: e0:d7:4b:00:28:0b:68:40:08:cd:64:e5:1d:84:d8:3e:00:1c: 2f:40:e0:63:20:81:80:10:a3:1d:22:18:35:b0:57:43:c4:ee: 5f:87:24:ff:19:0c:19:05:79:c5:d3:de:64:82:1c:01:81:98: 95:d0:27:a1:a0:41:8f:e6:01:0c:de:8f:82:f2:2f:15:03:9a: 5d:db:26:ed:3d:3e:fa:9c:69:84:1a:4c:05:6d:00:a8:f3:95: 71:47:f3:98:77:19:b7:c6:7c:0f:e3:f4:3d:89:28:34:5d:ae: 16:c3:f5:85:18:a6:78:36:a5:57:55:e1:e5:44:2d:5f:de:70: a7:c1:25:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkOelW6R/JlTeZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGJiOTlkNGUtMGU4My00MDc1LTg4YjktMWNmOWE4MWM3MTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMgZ4ooq1Tj9UtQGlNKTwj8pgt5vcR4p3oml 9gCT9G363pJVN/pPlquTjorfmGb4nutqn4BKNH8FwK3bE1XMfrlJDAyQS4iyt5V3 gMeUNvmdWCKiWLrpn0Mtmme3gEmwcJ+K5KZBXW5uLZHz9VC0LTGGeckowLe98SnG tTVW1kdJcWoZjuhi4wlASBQPaAO06C2qBE9MJHYrA6qh2kC/yytq/jmt3Ighw2q/ pspPGMoENjARlouFi/TgXd0yO/sWH2o3blI0LGowq3FPlPfGoJVyYlnDUKAnzHUH ib886FUTvAs8ErEIsnUUxuKeAimlFQVgCDNlP2sCRGuerKJwkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNnqK0HLpaKJsarza8BtsZaHEwYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTAyOGYwOGUtODU0MC0z MTJjLTgyN2UtN2JiYjYxMzgxMjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRIYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEILVjdUQzIayHVdRQ98FH8/L+9gfeKAtr1y7DirMhqmkybQ17p/6vLi IcKqYICdLZIywB1ECiK4Aw+9hxFF0jPIlz2lR49vXirw98kjVLzhurot/LkQOKQa SRxOt6fmAa9t9QdhgiA1ttDtTgsmxcWV+u30umhXq3Pwi4jH6ODXSwAoC2hACM1k 5R2E2D4AHC9A4GMggYAQox0iGDWwV0PE7l+HJP8ZDBkFecXT3mSCHAGBmJXQJ6Gg QY/mAQzej4LyLxUDml3bJu09PvqcaYQaTAVtAKjzlXFH85h3GbfGfA/j9D2JKDRd rhbD9YUYpng2pVdV4eVELV/ecKfBJWI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:15 2025 by rpki-client