$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e9fd533d-3104-3e7f-a685-cc0e04048fc0.roa File: e9fd533d-3104-3e7f-a685-cc0e04048fc0.roa (raw, json) Hash identifier: fEJil6yyjbLlbLlQgq2YXoQ+1kuznu4cT211KrfIevk= Subject key identifier: 3B:ED:51:EF:82:F5:DC:A3:CC:CC:51:C2:53:22:1F:64:34:5A:46:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C7121F224987EDC486F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e9fd533d-3104-3e7f-a685-cc0e04048fc0.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.28.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:71:21:f2:24:98:7e:dc:48:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=fdcd2f19-59d2-466e-824c-5e881cacd5e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:29:6a:64:db:c3:1e:6d:be:57:3b:d3:6c: b0:27:47:45:fb:6f:c9:62:54:0a:3a:d5:b8:3e:70: 1b:e1:51:d9:e0:8b:1e:22:5b:d3:b3:53:ac:56:2b: b1:ec:1e:f4:81:d5:90:37:02:ca:71:a8:17:54:91: db:ed:29:a2:5b:b7:65:1b:9a:47:99:bd:c3:1d:3c: 08:f8:f0:e7:79:f5:73:d1:6c:ce:4a:d6:29:98:f7: fc:fb:88:e1:45:0f:d1:5c:ab:c3:62:c7:dd:02:f3: cd:43:22:40:cd:e2:59:00:15:3d:51:d5:49:32:d1: df:05:97:08:30:c6:49:dc:1e:58:d6:ae:d1:d7:06: 4d:10:b0:9f:6e:ae:cb:13:16:8e:7f:fe:94:48:7a: ae:e1:e2:40:6e:94:b2:b7:8c:d3:3a:ed:ba:26:89: c8:fe:08:fa:08:e4:96:78:7c:19:90:4e:ea:e9:27: ac:48:8a:70:ae:64:ef:2c:25:0f:b0:00:00:b3:ab: 7b:64:0b:bd:2a:96:0e:57:9a:d8:63:2b:25:35:b0: d4:54:4b:00:31:ac:b6:79:01:dd:30:ac:5d:2b:b9: 5c:63:6a:c2:81:c5:f6:14:88:58:bf:ae:9e:b3:f1: dd:89:eb:d6:de:78:33:35:30:e3:40:2f:b7:9c:67: 30:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:ED:51:EF:82:F5:DC:A3:CC:CC:51:C2:53:22:1F:64:34:5A:46:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e9fd533d-3104-3e7f-a685-cc0e04048fc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:bc:fa:c3:d8:db:c0:0a:8c:a0:bf:26:5f:e4:52:c3:cc:68: 6b:f7:50:c6:57:7b:a8:91:6c:e8:a7:28:fa:8e:34:34:97:aa: 1c:c7:92:2c:62:31:9d:d6:4e:69:21:82:f8:eb:e5:65:fd:fd: aa:fd:e8:ca:f7:af:e6:2b:54:1f:25:9e:f0:27:a7:df:3a:42: 5f:34:d5:b1:75:68:5f:e6:02:06:41:16:c8:13:90:ec:63:09: 9b:95:68:94:94:09:fb:b8:0f:f3:3e:05:d4:95:1f:ae:00:fe: c8:d0:25:e1:51:70:fc:ac:64:ce:d1:f9:78:29:63:7f:21:33: ae:d8:94:1f:24:9d:ff:a1:1d:99:f0:98:20:21:1e:cf:6a:d8: a3:08:d9:5d:ee:88:e6:5f:4a:61:a1:c2:41:76:23:ec:ae:da: 37:15:05:c4:53:73:bc:b5:d8:6c:6a:15:8d:bf:14:f4:0c:c3: cf:49:71:34:4a:4f:76:2d:62:cc:3b:c0:e3:96:83:c1:a6:bf: fd:34:3b:7d:b1:5c:53:99:f5:7a:80:48:f9:62:66:22:b0:fd: 69:d1:4c:0f:41:ad:fc:4f:22:d0:42:c2:81:49:c7:e0:40:0c: 2a:4b:6a:09:9e:f5:71:d1:b7:50:10:08:38:3c:e1:dc:cf:fb: 20:e2:3e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHEh8iSYftxIbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk ZmRjZDJmMTktNTlkMi00NjZlLTgyNGMtNWU4ODFjYWNkNWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BgpamTbwx5tvlc702ywJ0dF+2/JYlQKOtW4 PnAb4VHZ4IseIlvTs1OsViux7B70gdWQNwLKcagXVJHb7SmiW7dlG5pHmb3DHTwI +PDnefVz0WzOStYpmPf8+4jhRQ/RXKvDYsfdAvPNQyJAzeJZABU9UdVJMtHfBZcI MMZJ3B5Y1q7R1wZNELCfbq7LExaOf/6USHqu4eJAbpSyt4zTOu26JonI/gj6COSW eHwZkE7q6SesSIpwrmTvLCUPsAAAs6t7ZAu9KpYOV5rYYyslNbDUVEsAMay2eQHd MKxdK7lcY2rCgcX2FIhYv66es/HdievW3ngzNTDjQC+3nGcweQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvtUe+C9dyjzMxRwlMiH2Q0WkYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTlmZDUzM2QtMzEwNC0z ZTdmLWE2ODUtY2MwZTA0MDQ4ZmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu8+sPY28AKjKC/Jl/kUsPMaGv3UMZXe6iRbOinKPqONDSXqhzHkixi MZ3WTmkhgvjr5WX9/ar96Mr3r+YrVB8lnvAnp986Ql801bF1aF/mAgZBFsgTkOxj CZuVaJSUCfu4D/M+BdSVH64A/sjQJeFRcPysZM7R+XgpY38hM67YlB8knf+hHZnw mCAhHs9q2KMI2V3uiOZfSmGhwkF2I+yu2jcVBcRTc7y12GxqFY2/FPQMw89JcTRK T3YtYsw7wOOWg8Gmv/00O32xXFOZ9XqASPliZiKw/WnRTA9BrfxPItBCwoFJx+BA DCpLagme9XHRt1AQCDg84dzP+yDiPjQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:04 2025 by rpki-client