$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daf69d9f-b13e-3e7e-ab64-61edd194df56.roa File: daf69d9f-b13e-3e7e-ab64-61edd194df56.roa (raw, json) Hash identifier: 03AH4l8BvsPGZ4OwYTfiBropSIrvx7/7A4PA469Avh4= Subject key identifier: D3:16:FA:94:D9:B2:59:42:4B:FD:9C:24:37:73:3F:8E:20:2A:5B:42 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AFC9F5FF28A88196828BA9EE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daf69d9f-b13e-3e7e-ab64-61edd194df56.roa Signing time: Tue 26 Aug 2025 17:25:35 +0000 ROA not before: Tue 26 Aug 2025 17:25:35 +0000 ROA not after: Mon 24 Nov 2025 18:25:35 +0000 asID: 19905 IP address blocks: 173.28.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:fc:9f:5f:f2:8a:88:19:68:28:ba:9e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 26 17:25:35 2025 GMT Not After : Nov 24 18:25:35 2025 GMT Subject: CN=f4dc7635-2b96-4250-98f3-3fed0a598c1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1d:e5:cf:9a:f7:f9:c9:d8:58:eb:42:ac:56: 08:c3:00:f5:20:d7:4c:25:85:e8:16:9b:e0:4a:2c: ee:98:11:f1:57:89:ba:c2:15:c3:dd:4b:f7:87:f6: 81:22:05:1e:73:e2:78:6f:e4:fd:7a:b9:ad:92:7d: 6c:49:25:ae:fd:87:80:bf:a7:33:fa:63:76:cd:fb: aa:27:9e:7b:3d:dc:9c:8d:ca:a9:ef:a6:9b:49:f7: b8:01:e9:f0:ea:ed:de:6f:05:f2:3a:b9:cf:79:7a: 18:56:8f:2e:f2:44:b0:1a:67:49:ad:33:10:fb:e4: 0d:19:28:fc:98:06:3c:dd:9d:75:cb:3c:2e:80:2e: e2:b0:48:eb:ff:00:5e:03:2e:b6:ea:f1:99:98:38: da:d8:b1:42:c0:11:9f:eb:34:d6:0a:3a:92:73:86: 58:5a:70:90:1c:d9:0b:8c:b7:b4:82:08:69:ba:d6: 4c:da:de:2b:7b:f1:52:c4:05:30:ec:63:f0:64:92: 47:80:0d:87:f5:ab:96:a1:96:5a:32:5f:68:48:64: 86:35:9d:29:c5:71:76:25:78:c4:e0:03:10:55:2d: 74:ea:6f:57:ee:8a:54:07:a7:f4:42:e3:bc:e9:a1: 97:59:60:45:e7:a5:dd:71:c8:6d:fc:06:56:71:f2: 03:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:16:FA:94:D9:B2:59:42:4B:FD:9C:24:37:73:3F:8E:20:2A:5B:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/daf69d9f-b13e-3e7e-ab64-61edd194df56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.28.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1b:d6:29:66:04:3f:cf:c7:c2:ed:07:4e:49:df:31:0e:a2: 15:2e:54:6d:24:b0:af:fd:d5:87:ea:76:e4:99:d4:c3:b3:23: 5a:db:cc:a0:10:46:3a:d3:0a:3f:b9:f6:0f:53:e7:c0:79:99: 57:c3:68:17:4f:1d:da:1e:78:ff:c2:c9:c2:16:50:7f:9c:04: bf:f9:51:7d:ac:bc:ae:a2:b2:59:78:38:0d:e8:fc:79:12:b6: 69:b0:94:9a:f0:d3:a8:3c:cc:d1:65:b3:2e:04:97:16:84:72: e0:c7:dc:dc:6d:38:cb:e0:48:29:18:dd:75:d2:56:05:13:7a: 6e:a7:87:57:b4:ac:19:d3:83:cd:02:cb:a8:da:02:3c:e1:e5: e3:21:18:05:60:c5:f2:6d:e0:dd:96:4c:a0:7d:5e:84:65:7a: 31:48:73:4c:ca:b7:65:32:fb:7f:2c:96:06:b1:69:1c:31:fd: b6:64:e7:51:be:61:80:f5:42:b8:74:a1:80:b4:4a:db:b8:ac: bc:37:c8:24:d5:49:89:7b:41:1e:45:3c:b8:78:10:d3:70:b4: 14:17:f3:cb:c5:2f:f4:b3:5a:ba:31:7d:40:20:57:53:e3:d2: e7:1a:75:ae:1f:23:47:c3:33:7d:b5:ff:71:27:f2:6f:4e:19: 29:71:48:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr8n1/yiogZaCi6nuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyNjE3MjUzNVoXDTI1MTEyNDE4MjUzNVowLzEtMCsGA1UEAxMk ZjRkYzc2MzUtMmI5Ni00MjUwLTk4ZjMtM2ZlZDBhNTk4YzFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgB3lz5r3+cnYWOtCrFYIwwD1INdMJYXoFpvg SizumBHxV4m6whXD3Uv3h/aBIgUec+J4b+T9ermtkn1sSSWu/YeAv6cz+mN2zfuq J557Pdycjcqp76abSfe4Aenw6u3ebwXyOrnPeXoYVo8u8kSwGmdJrTMQ++QNGSj8 mAY83Z11yzwugC7isEjr/wBeAy626vGZmDja2LFCwBGf6zTWCjqSc4ZYWnCQHNkL jLe0gghputZM2t4re/FSxAUw7GPwZJJHgA2H9auWoZZaMl9oSGSGNZ0pxXF2JXjE 4AMQVS106m9X7opUB6f0QuO86aGXWWBF56Xdccht/AZWcfID7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMW+pTZsllCS/2cJDdzP44gKltCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGFmNjlkOWYtYjEzZS0z ZTdlLWFiNjQtNjFlZGQxOTRkZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRyNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAb1ilmBD/Px8LtB05J3zEOohUuVG0ksK/91YfqduSZ1MOzI1rbzKAQ RjrTCj+59g9T58B5mVfDaBdPHdoeeP/CycIWUH+cBL/5UX2svK6isll4OA3o/HkS tmmwlJrw06g8zNFlsy4ElxaEcuDH3NxtOMvgSCkY3XXSVgUTem6nh1e0rBnTg80C y6jaAjzh5eMhGAVgxfJt4N2WTKB9XoRlejFIc0zKt2Uy+38slgaxaRwx/bZk51G+ YYD1Qrh0oYC0Stu4rLw3yCTVSYl7QR5FPLh4ENNwtBQX88vFL/SzWroxfUAgV1Pj 0ucada4fI0fDM321/3En8m9OGSlxSB0= -----END CERTIFICATE-----Generated at Sat Sep 6 09:57:01 2025 by rpki-client