$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a2fa165-1a04-3090-9afc-6162252061a7.roa File: 1a2fa165-1a04-3090-9afc-6162252061a7.roa (raw, json) Hash identifier: V0+jXrM60cFSLsLjoZxbI3jfbD9iBJPkrHFlA6QtrfM= Subject key identifier: 23:A3:65:2E:6F:DE:D5:BE:DC:21:36:0D:D3:05:D3:29:93:54:B8:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFCF8B995CED15285F0A45100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a2fa165-1a04-3090-9afc-6162252061a7.roa Signing time: Tue 26 Aug 2025 20:25:37 +0000 ROA not before: Tue 26 Aug 2025 20:25:37 +0000 ROA not after: Mon 24 Nov 2025 21:25:37 +0000 asID: 19905 IP address blocks: 173.28.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:f8:b9:95:ce:d1:52:85:f0:a4:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 20:25:37 2025 GMT Not After : Nov 24 21:25:37 2025 GMT Subject: CN=8c1c0492-78a8-4ea4-96e0-1e8784856b82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:34:09:c2:25:d4:9c:50:9a:32:2b:d1:e9:a1: 11:8e:2b:f7:87:db:7a:a0:6e:b1:91:36:76:68:88: 7f:c0:07:1b:b1:b6:0d:78:e6:b5:3a:5c:4e:0d:fc: b0:db:ba:42:e8:9f:42:70:70:8f:91:18:a1:48:f3: 24:45:0d:99:39:b8:57:20:7c:03:d1:32:ea:40:eb: 5f:f1:aa:62:2c:9d:0a:ef:09:d2:22:68:6f:80:ec: b3:9a:55:ea:23:94:3a:41:ab:9e:f3:66:c5:d5:76: 37:9c:99:36:ba:24:1b:e6:51:c3:af:ae:2e:8c:06: ec:fc:01:00:6f:07:30:05:18:10:71:c6:df:32:26: 66:74:d6:13:6c:71:43:e3:6a:fc:eb:93:4d:8e:c1: 19:29:26:8d:7a:4f:19:a2:56:d5:f1:ba:46:4d:d2: 8f:ec:50:85:81:16:b3:d5:34:34:66:4b:25:35:15: 83:78:db:3d:36:ad:3d:cd:a4:40:4b:17:ff:d1:b7: 17:95:c1:63:97:03:3a:71:90:ea:c3:89:73:20:6e: ad:c4:85:82:f0:11:b2:23:f3:55:a2:58:90:d4:0c: 90:a0:75:a7:02:22:c0:ec:58:03:b8:f8:be:c8:11: 91:55:32:24:4a:65:c9:d7:a8:2a:85:e4:e5:da:be: 66:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:A3:65:2E:6F:DE:D5:BE:DC:21:36:0D:D3:05:D3:29:93:54:B8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1a2fa165-1a04-3090-9afc-6162252061a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:78:38:4c:f0:b7:02:22:28:17:cb:ea:de:d9:ba:e1:5c:61: 27:01:de:26:72:17:e8:95:82:6f:9f:af:c0:5c:92:7e:43:04: 84:b0:87:6b:d3:74:02:8c:2c:82:13:fb:f3:47:6d:fe:02:33: cb:b6:da:c2:e4:9e:01:b3:39:a1:1c:4c:32:ec:88:a3:d3:d1: 85:e9:81:95:3c:75:f6:6e:b3:7c:b8:9d:00:a4:cc:9d:ca:b6: c7:c8:85:92:9e:27:37:9f:8e:d4:0d:f2:56:38:23:5b:bf:12: 30:94:22:80:19:0a:ac:47:bc:35:87:42:19:75:57:fe:4e:1a: 17:5c:4e:f4:e8:be:ad:75:65:97:2d:4a:52:8c:1c:71:00:90: 27:d7:b9:40:6f:f3:ac:4d:d1:f8:9f:e7:3e:d0:a3:d0:40:82: ea:df:dd:86:a5:54:b1:ec:93:0b:33:53:4a:a0:41:f0:3a:2c: ca:b8:ab:6c:bb:f7:1a:7f:7f:6c:5f:7a:15:b9:9f:d4:1e:57: 68:53:d4:43:ca:21:34:cc:76:9b:6f:72:dd:48:1e:1b:d8:d8: 3f:d6:2d:c6:db:80:06:d6:9b:64:7c:75:c6:fa:f4:f6:88:86: 7d:0c:ad:33:24:28:5e:6b:a1:df:fb:51:98:a7:b6:13:dd:e5: 54:dd:69:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8+LmVztFShfCkUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjIwMjUzN1oXDTI1MTEyNDIxMjUzN1owLzEtMCsGA1UEAxMk OGMxYzA0OTItNzhhOC00ZWE0LTk2ZTAtMWU4Nzg0ODU2YjgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzQJwiXUnFCaMivR6aERjiv3h9t6oG6xkTZ2 aIh/wAcbsbYNeOa1OlxODfyw27pC6J9CcHCPkRihSPMkRQ2ZObhXIHwD0TLqQOtf 8apiLJ0K7wnSImhvgOyzmlXqI5Q6Qaue82bF1XY3nJk2uiQb5lHDr64ujAbs/AEA bwcwBRgQccbfMiZmdNYTbHFD42r865NNjsEZKSaNek8ZolbV8bpGTdKP7FCFgRaz 1TQ0ZkslNRWDeNs9Nq09zaRASxf/0bcXlcFjlwM6cZDqw4lzIG6txIWC8BGyI/NV oliQ1AyQoHWnAiLA7FgDuPi+yBGRVTIkSmXJ16gqheTl2r5mYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOjZS5v3tW+3CE2DdMF0ymTVLgcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWEyZmExNjUtMWEwNC0z MDkwLTlhZmMtNjE2MjI1MjA2MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRxYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ4OEzwtwIiKBfL6t7ZuuFcYScB3iZyF+iVgm+fr8Bckn5DBISwh2vT dAKMLIIT+/NHbf4CM8u22sLkngGzOaEcTDLsiKPT0YXpgZU8dfZus3y4nQCkzJ3K tsfIhZKeJzefjtQN8lY4I1u/EjCUIoAZCqxHvDWHQhl1V/5OGhdcTvTovq11ZZct SlKMHHEAkCfXuUBv86xN0fif5z7Qo9BAgurf3YalVLHskwszU0qgQfA6LMq4q2y7 9xp/f2xfehW5n9QeV2hT1EPKITTMdptvct1IHhvY2D/WLcbbgAbWm2R8dcb69PaI hn0MrTMkKF5rod/7UZinthPd5VTdadI= -----END CERTIFICATE-----Generated at Sat Sep 6 12:12:21 2025 by rpki-client