$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa File: 068781a8-e032-3979-adfe-4399056a3136.roa (raw, json) Hash identifier: grza8D8yVEbKTyLrCR0l/oQ0//AbwFhqClD0kb2b0b4= Subject key identifier: 16:65:8B:F8:F1:53:53:71:49:7D:4C:74:5F:6C:7C:A9:B2:EA:14:77 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AE9460AC80E80645B80B74700 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa Signing time: Tue 19 Aug 2025 19:05:14 +0000 ROA not before: Tue 19 Aug 2025 19:05:14 +0000 ROA not after: Mon 17 Nov 2025 20:05:14 +0000 asID: 30036 IP address blocks: 173.28.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:46:0a:c8:0e:80:64:5b:80:b7:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 19 19:05:14 2025 GMT Not After : Nov 17 20:05:14 2025 GMT Subject: CN=3440b3e8-09b7-4956-8df0-5c9c3581df70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:7e:24:9a:18:4e:89:2c:76:1e:76:fa:fc:5b: a4:67:50:3b:7e:6c:62:7e:3c:e2:8d:c8:e8:29:90: d0:df:50:72:74:dc:b9:17:bb:0d:d8:28:df:30:a8: 8b:7f:1f:46:03:46:8a:38:71:a7:e5:56:1a:b6:3c: 5b:dd:5a:80:8f:1f:39:52:2c:54:b6:c3:28:f1:4d: fb:2f:ac:4a:24:cc:f1:52:cd:92:d2:98:29:89:07: 27:80:5a:1b:7c:2e:08:75:43:27:7f:b7:53:f5:a7: 3e:25:09:61:6a:c4:14:71:00:6c:dd:18:ce:8b:e6: 64:50:8c:1f:3f:be:21:c1:6d:75:b6:1d:4d:75:91: 98:be:a4:80:04:ad:54:4c:73:de:61:ef:32:cd:38: 67:83:e8:d3:14:c7:89:40:a3:1e:13:42:12:1b:5a: d4:da:cc:cd:b4:f0:71:9e:67:48:15:93:cd:88:0e: 01:12:19:ff:8b:5e:a5:12:78:c0:d5:18:bd:d4:64: dd:8f:53:72:7c:36:fc:4f:c6:81:53:f5:3f:60:89: 0c:70:b3:22:04:b8:53:68:a5:3e:59:0e:62:04:d5: 25:c7:93:af:8a:a9:4f:c1:19:cd:4f:a4:e9:10:e0: de:c1:c8:f3:c0:1b:a8:42:b4:16:42:8b:e6:0a:25: 0a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:65:8B:F8:F1:53:53:71:49:7D:4C:74:5F:6C:7C:A9:B2:EA:14:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/068781a8-e032-3979-adfe-4399056a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6c:e0:ed:73:8f:3d:68:56:9d:2d:ad:5b:44:c8:da:72:62: 73:1c:d3:c9:a1:5d:1e:71:6e:01:c8:47:4e:af:4b:33:0e:99: aa:5d:da:97:a7:21:c1:21:fe:05:5e:dc:14:e4:16:74:07:63: 42:43:e8:ea:0e:d3:c5:c5:ca:a6:44:37:84:1d:88:e3:99:eb: a0:cd:85:34:17:93:d3:21:79:b6:bc:ac:27:f3:e2:d0:8f:25: 01:65:11:93:01:6f:8a:26:d0:c4:6e:3a:fe:94:5d:64:fe:2e: 15:eb:94:f1:ba:19:0d:ce:b3:b3:21:ee:b5:1e:f9:7e:b2:f2: 76:db:21:52:ff:3d:69:ce:65:06:dd:13:5d:fa:7a:af:f3:58: 03:ae:02:b7:b0:29:ac:0d:e5:a8:26:17:1f:68:81:7f:f7:71: 8e:07:10:ed:25:7d:20:95:4c:dc:1b:32:74:f5:7f:38:00:4a: b2:e3:39:1e:99:3f:ee:1d:b4:25:59:d6:0b:33:9a:55:ef:ad: 99:88:1a:dd:64:d5:cc:37:bd:7b:9e:e6:70:66:db:f6:fe:24: a6:c4:65:46:d8:b0:05:fc:b8:3f:80:d8:80:35:e7:92:51:eb: 6a:89:c4:2e:4c:06:ce:59:7d:7f:b0:2f:92:1a:4c:53:b7:d3: 96:c0:22:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErpRgrIDoBkW4C3RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxOTE5MDUxNFoXDTI1MTExNzIwMDUxNFowLzEtMCsGA1UEAxMk MzQ0MGIzZTgtMDliNy00OTU2LThkZjAtNWM5YzM1ODFkZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnX4kmhhOiSx2Hnb6/FukZ1A7fmxifjzijcjo KZDQ31BydNy5F7sN2CjfMKiLfx9GA0aKOHGn5VYatjxb3VqAjx85UixUtsMo8U37 L6xKJMzxUs2S0pgpiQcngFobfC4IdUMnf7dT9ac+JQlhasQUcQBs3RjOi+ZkUIwf P74hwW11th1NdZGYvqSABK1UTHPeYe8yzThng+jTFMeJQKMeE0ISG1rU2szNtPBx nmdIFZPNiA4BEhn/i16lEnjA1Ri91GTdj1NyfDb8T8aBU/U/YIkMcLMiBLhTaKU+ WQ5iBNUlx5OviqlPwRnNT6TpEODewcjzwBuoQrQWQovmCiUKCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZli/jxU1NxSX1MdF9sfKmy6hR3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDY4NzgxYTgtZTAzMi0z OTc5LWFkZmUtNDM5OTA1NmEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRwMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVs4O1zjz1oVp0trVtEyNpyYnMc08mhXR5xbgHIR06vSzMOmapd2pen IcEh/gVe3BTkFnQHY0JD6OoO08XFyqZEN4QdiOOZ66DNhTQXk9Mheba8rCfz4tCP JQFlEZMBb4om0MRuOv6UXWT+LhXrlPG6GQ3Os7Mh7rUe+X6y8nbbIVL/PWnOZQbd E136eq/zWAOuArewKawN5agmFx9ogX/3cY4HEO0lfSCVTNwbMnT1fzgASrLjOR6Z P+4dtCVZ1gszmlXvrZmIGt1k1cw3vXue5nBm2/b+JKbEZUbYsAX8uD+A2IA155JR 62qJxC5MBs5ZfX+wL5IaTFO305bAIsE= -----END CERTIFICATE-----Generated at Thu Aug 21 07:16:00 2025 by rpki-client