$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e1220ea-b9ce-3eb4-ad31-4003aea80341.roa File: 1e1220ea-b9ce-3eb4-ad31-4003aea80341.roa (raw, json) Hash identifier: /QQxJNr8Cznv7BQFfD0rDr6t73s+OwnbrsoebyOKBOQ= Subject key identifier: CA:5F:EA:81:3E:E5:DF:6D:E2:DB:C3:F7:8A:AA:0C:D6:E3:27:24:52 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AE8FB9869BD68311073522500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e1220ea-b9ce-3eb4-ad31-4003aea80341.roa Signing time: Tue 19 Aug 2025 16:35:14 +0000 ROA not before: Tue 19 Aug 2025 16:35:14 +0000 ROA not after: Mon 17 Nov 2025 17:35:14 +0000 asID: 30036 IP address blocks: 173.28.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Aug 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e8:fb:98:69:bd:68:31:10:73:52:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 19 16:35:14 2025 GMT Not After : Nov 17 17:35:14 2025 GMT Subject: CN=284482e2-98ea-48cc-9b11-588811ea75cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:ce:a2:ed:09:b3:d1:fe:32:d6:8c:92:8f:8a: 78:09:98:9a:65:34:03:5f:a4:10:9a:76:99:12:2c: 31:72:0d:29:d7:d6:44:0f:43:aa:ef:e1:49:cd:4a: 0f:17:db:04:82:b5:55:ef:16:26:c5:aa:7a:61:f3: 27:b7:e5:45:89:44:ec:73:9e:09:1d:31:49:2c:9b: 2f:7e:f6:58:be:4c:ac:b1:c7:6c:73:45:da:7b:3f: 0b:2e:c4:ee:98:6f:07:7a:fa:d5:86:b4:ed:d7:40: 7e:dd:35:d4:10:8b:87:85:f9:fa:3b:1e:d6:7b:13: 76:c1:fd:8b:60:fb:e2:8d:c1:e4:89:30:41:dc:19: 16:62:3d:86:1f:8f:c6:27:53:6f:40:97:e1:ba:bb: cf:1e:9b:21:50:64:65:96:0e:31:34:aa:ed:c7:bf: e3:38:2b:00:be:2c:49:7e:3c:c0:33:e5:cf:af:1e: 0c:ce:25:25:18:3e:2c:5e:13:81:02:76:e4:dc:29: f1:00:3e:98:4a:79:d5:71:72:d4:f9:db:e8:93:2f: c1:da:d1:8c:aa:cf:34:8f:c7:1c:79:e1:90:7f:66: a5:3b:a2:ca:79:27:e6:5e:70:0b:9e:7a:9b:f7:0b: 72:6f:9a:4b:05:1e:a8:3f:d5:aa:10:95:dd:71:7e: e0:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:5F:EA:81:3E:E5:DF:6D:E2:DB:C3:F7:8A:AA:0C:D6:E3:27:24:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1e1220ea-b9ce-3eb4-ad31-4003aea80341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:cc:7b:a5:d9:0e:3c:9a:43:4f:83:93:13:cd:f0:7c:30:00: b0:73:c4:12:b6:96:16:cd:24:e1:7b:b9:6f:92:60:e7:c2:ae: 4f:46:06:0e:e0:66:00:83:2a:e2:52:09:54:26:d5:cd:5b:94: cd:21:cd:ae:65:d7:85:4c:7b:fd:04:e7:46:54:24:ae:d2:93: 7d:11:17:34:84:10:34:db:bd:70:e9:d1:55:95:cf:f0:fb:c8: 44:e0:4d:90:f5:bc:12:c6:ce:1c:28:df:b0:85:3a:10:4d:3c: 73:0d:11:56:cd:61:04:53:74:99:d5:9a:b6:a5:7e:f4:07:51: d2:4f:11:65:97:5b:99:fd:c3:9a:02:55:0c:e7:9a:f6:ac:e0: fb:f5:ce:a1:15:ee:ed:cc:39:27:20:e9:10:1e:f8:dd:94:61: f2:b6:fa:dd:f1:be:14:66:ce:ee:6c:46:f8:a8:af:6d:fc:4c: e6:4f:0d:5f:94:4e:7d:5a:da:0d:1a:48:02:d1:25:83:b6:bc: 3d:7f:62:c1:28:59:4d:33:35:8e:e5:d1:25:85:b9:62:69:36: 8c:8e:59:93:c6:05:85:02:ec:de:de:4a:c8:d5:b9:7d:e1:94: e7:02:77:92:95:ae:9e:67:62:7d:d1:0d:c4:b4:9b:05:6e:e0: e2:02:b0:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEro+5hpvWgxEHNSJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgxOTE2MzUxNFoXDTI1MTExNzE3MzUxNFowLzEtMCsGA1UEAxMk Mjg0NDgyZTItOThlYS00OGNjLTliMTEtNTg4ODExZWE3NWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA686i7Qmz0f4y1oySj4p4CZiaZTQDX6QQmnaZ Eiwxcg0p19ZED0Oq7+FJzUoPF9sEgrVV7xYmxap6YfMnt+VFiUTsc54JHTFJLJsv fvZYvkysscdsc0Xaez8LLsTumG8HevrVhrTt10B+3TXUEIuHhfn6Ox7WexN2wf2L YPvijcHkiTBB3BkWYj2GH4/GJ1NvQJfhurvPHpshUGRllg4xNKrtx7/jOCsAvixJ fjzAM+XPrx4MziUlGD4sXhOBAnbk3CnxAD6YSnnVcXLU+dvoky/B2tGMqs80j8cc eeGQf2alO6LKeSfmXnALnnqb9wtyb5pLBR6oP9WqEJXdcX7gsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpf6oE+5d9t4tvD94qqDNbjJyRSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWUxMjIwZWEtYjljZS0z ZWI0LWFkMzEtNDAwM2FlYTgwMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRwKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXMe6XZDjyaQ0+DkxPN8HwwALBzxBK2lhbNJOF7uW+SYOfCrk9GBg7g ZgCDKuJSCVQm1c1blM0hza5l14VMe/0E50ZUJK7Sk30RFzSEEDTbvXDp0VWVz/D7 yETgTZD1vBLGzhwo37CFOhBNPHMNEVbNYQRTdJnVmralfvQHUdJPEWWXW5n9w5oC VQznmvas4Pv1zqEV7u3MOScg6RAe+N2UYfK2+t3xvhRmzu5sRvior238TOZPDV+U Tn1a2g0aSALRJYO2vD1/YsEoWU0zNY7l0SWFuWJpNoyOWZPGBYUC7N7eSsjVuX3h lOcCd5KVrp5nYn3RDcS0mwVu4OICsMo= -----END CERTIFICATE-----Generated at Thu Aug 21 07:20:29 2025 by rpki-client