$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa File: ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa (raw, json) Hash identifier: oVo7OUViL8xtmiN2rtHqbSrUtmFCTqutbP62yaBGIVQ= Subject key identifier: 2A:73:66:96:E5:3D:06:6F:F6:09:77:A2:3F:24:8C:92:A7:F0:52:94 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB1369ECC8FAA0CC71D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.28.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b1:36:9e:cc:8f:aa:0c:c7:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=79276694-5a56-49b9-b7a2-9bce9509910e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:93:be:df:1c:0e:f0:b5:8f:a9:56:77:f9:95: 0d:88:e7:ae:cd:01:fd:08:18:cd:31:0f:06:d6:92: b3:56:c1:d5:86:08:1b:e1:4d:1d:d2:f0:c2:8a:59: d4:ab:52:64:67:19:a6:5c:6a:70:5b:00:d5:1b:ea: 91:2e:ae:d1:d8:01:06:17:94:26:5b:27:bb:d1:f3: d6:68:aa:ac:d4:21:74:08:88:51:62:b5:b1:53:d8: b4:94:6b:93:22:93:76:ef:85:8a:9d:a2:23:68:72: 94:c1:14:22:2a:86:d3:ad:85:6a:59:b9:f2:5d:c8: 88:80:79:ac:d4:04:4f:31:c7:56:24:81:b8:d0:78: 44:57:93:b1:67:12:eb:be:85:1b:db:3a:c9:81:24: 5a:53:ea:29:1a:9b:54:fe:25:a8:eb:c2:bd:f9:de: 4a:c2:c8:ea:16:32:70:d2:35:e6:c3:3f:6f:a2:a7: 4b:be:68:23:02:be:15:f1:78:e5:c1:4d:2a:7f:91: d6:0c:f5:00:68:fa:30:a5:55:dc:e7:5e:98:16:56: 06:75:cb:69:82:f9:5e:b4:15:62:17:70:20:7b:b0: d9:69:07:72:2c:a2:de:10:50:3f:7b:58:38:2c:c7: 4a:29:89:9e:5e:97:72:6b:85:86:e0:93:ae:15:86: c2:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:73:66:96:E5:3D:06:6F:F6:09:77:A2:3F:24:8C:92:A7:F0:52:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ef7f10ed-4ddc-35b8-86f7-3ce219957c82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:07:c3:7b:e6:bf:31:8f:7c:7f:32:b6:79:85:bd:7e:b0:45: 0e:91:95:86:d6:ab:8d:ef:4a:a4:60:d6:fa:47:e5:90:d7:26: 5a:c3:eb:c7:7b:98:97:c2:56:57:b9:b6:be:2a:a3:99:90:2d: 60:3d:74:93:2f:01:ce:73:a9:fa:f7:43:77:49:30:be:90:c8: f5:3d:db:27:eb:70:3e:fe:00:55:b1:62:e5:7a:01:d9:08:97: 83:b1:10:17:b2:fb:c4:8c:43:fd:23:0f:92:a3:dc:a4:11:c3: c6:15:2d:2e:cc:23:69:09:29:dc:db:15:46:98:14:86:9e:38: 47:58:d0:81:60:ba:4a:ad:5e:2a:1d:bd:b9:01:f5:7e:c1:36: 31:f4:a4:c1:b2:cd:5c:25:c9:18:92:8f:e0:01:69:c9:6f:ac: 74:62:a5:d7:b4:86:1b:73:ec:e2:42:f0:95:75:0c:1d:32:74: 28:79:26:09:f6:e5:8e:8a:88:64:8e:1c:99:5c:cb:99:4c:45: 41:d3:a1:b1:8d:0e:78:e1:3a:ed:14:ea:80:33:d3:4d:b7:aa: 5e:6e:8e:46:a6:a9:51:ba:23:b7:4e:d4:94:8c:b0:9f:44:e2: 65:41:10:c5:da:f7:ed:2e:30:1c:7f:f5:c8:9a:2f:14:a6:4a: 9a:be:75:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLE2nsyPqgzHHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzkyNzY2OTQtNWE1Ni00OWI5LWI3YTItOWJjZTk1MDk5MTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5O+3xwO8LWPqVZ3+ZUNiOeuzQH9CBjNMQ8G 1pKzVsHVhggb4U0d0vDCilnUq1JkZxmmXGpwWwDVG+qRLq7R2AEGF5QmWye70fPW aKqs1CF0CIhRYrWxU9i0lGuTIpN274WKnaIjaHKUwRQiKobTrYVqWbnyXciIgHms 1ARPMcdWJIG40HhEV5OxZxLrvoUb2zrJgSRaU+opGptU/iWo68K9+d5KwsjqFjJw 0jXmwz9voqdLvmgjAr4V8XjlwU0qf5HWDPUAaPowpVXc516YFlYGdctpgvletBVi F3Age7DZaQdyLKLeEFA/e1g4LMdKKYmeXpdya4WG4JOuFYbCdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpzZpblPQZv9gl3oj8kjJKn8FKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWY3ZjEwZWQtNGRkYy0z NWI4LTg2ZjctM2NlMjE5OTU3YzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRwoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcHw3vmvzGPfH8ytnmFvX6wRQ6RlYbWq43vSqRg1vpH5ZDXJlrD68d7 mJfCVle5tr4qo5mQLWA9dJMvAc5zqfr3Q3dJML6QyPU92yfrcD7+AFWxYuV6AdkI l4OxEBey+8SMQ/0jD5Kj3KQRw8YVLS7MI2kJKdzbFUaYFIaeOEdY0IFgukqtXiod vbkB9X7BNjH0pMGyzVwlyRiSj+ABaclvrHRipde0hhtz7OJC8JV1DB0ydCh5Jgn2 5Y6KiGSOHJlcy5lMRUHTobGNDnjhOu0U6oAz0023ql5ujkamqVG6I7dO1JSMsJ9E 4mVBEMXa9+0uMBx/9ciaLxSmSpq+dcY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:51 2025 by rpki-client