$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa File: 0bf38020-85dc-33fa-8296-a789f8c70a70.roa (raw, json) Hash identifier: jtvYS1+zlJM4Mry99KSHymnwzEdZ5C0PO/3mVm9rnMU= Subject key identifier: 85:87:CA:75:E7:7D:3E:C4:92:84:CC:9F:29:0E:55:F4:FD:41:86:5F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679732AF6E5403DE8E6218CC Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:32:af:6e:54:03:de:8e:62:18:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=44a93c24-4fb1-4681-bb34-50d7c7759558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:3c:8f:d6:17:cf:2c:40:82:9a:b8:aa:a1: f7:31:60:73:28:aa:55:87:75:d5:ab:85:c4:86:3a: f2:17:20:5f:4b:75:e4:7c:2e:db:df:01:01:c1:57: dc:05:41:d2:c3:47:a1:67:49:41:ba:9a:0d:19:56: 26:06:a1:7d:61:b1:a8:61:38:86:30:64:04:6c:02: 59:20:00:f9:3a:74:5e:ce:a4:54:12:88:76:d5:0c: 13:d7:f9:ad:f2:6a:53:f3:ce:eb:0a:25:98:18:88: 2f:ab:f0:c0:e8:9f:08:2b:43:6e:32:20:8b:17:58: ae:75:c5:20:c6:cf:90:42:14:63:ea:84:a2:0e:4e: f7:b6:bc:49:e3:99:eb:50:b7:65:50:f4:18:04:64: 31:02:5f:f6:28:e2:e7:f3:ee:98:b9:93:3a:5e:ad: c3:52:69:c8:b8:a4:71:12:3b:f0:22:18:36:29:2a: 25:49:a6:6e:1e:71:54:2e:5c:5c:9e:08:36:3e:db: 49:d6:4e:7d:61:e7:5f:d2:38:7e:27:d8:07:5a:85: 60:60:ae:4a:f4:e6:93:b4:af:2c:a4:03:5b:77:77: bf:ec:ff:c1:ee:22:f7:b6:a7:b1:10:69:ed:6e:ee: 81:ae:77:c5:53:fd:f0:0c:01:bf:44:c4:c3:90:27: 89:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:CA:75:E7:7D:3E:C4:92:84:CC:9F:29:0E:55:F4:FD:41:86:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c8:56:6a:47:b9:f1:b6:6d:c2:7e:04:49:81:60:0d:6e:a7: 58:48:43:5a:8d:7c:f5:15:34:14:93:64:fc:1d:63:ea:4d:ac: ed:b8:5d:31:8f:c9:58:87:ff:bc:53:06:85:9c:0e:41:26:fd: dc:9d:81:66:5a:a7:4a:4e:90:d8:df:2b:0d:ad:cd:37:c9:03: f9:8f:bd:32:08:0a:bc:29:a0:66:5c:5a:7a:42:ff:cd:62:82: 95:51:8f:62:ba:c7:63:76:de:bf:27:50:8e:0d:f3:83:5f:fc: 55:ef:d2:60:f8:fd:41:aa:d3:53:6b:42:1c:82:2a:2f:e6:d5: aa:3f:44:87:ac:93:8e:dd:11:77:23:24:b2:21:82:e2:6c:f1: c3:1d:c4:56:69:4d:db:9e:55:55:82:29:e4:3b:95:40:35:51: 8d:2d:63:7c:29:de:e0:27:03:98:39:3a:6c:31:17:16:cf:58: d1:e6:20:20:7a:d7:2c:a4:5d:cb:3a:04:d7:26:61:5f:bd:f7: 99:5b:9d:e8:c7:4b:e1:1e:56:fc:ef:a0:36:91:51:58:61:41: b6:10:1a:73:ad:8a:d7:b2:cc:2b:cf:e5:a8:60:df:dd:ab:82: 77:b4:37:26:02:7a:b7:3e:39:c8:12:03:c2:6e:b0:0a:09:6a: e3:f4:cd:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzKvblQD3o5iGMwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDRhOTNjMjQtNGZiMS00NjgxLWJiMzQtNTBkN2M3NzU5NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEE8j9YXzyxAgpq4qqH3MWBzKKpVh3XVq4XE hjryFyBfS3XkfC7b3wEBwVfcBUHSw0ehZ0lBupoNGVYmBqF9YbGoYTiGMGQEbAJZ IAD5OnRezqRUEoh21QwT1/mt8mpT887rCiWYGIgvq/DA6J8IK0NuMiCLF1iudcUg xs+QQhRj6oSiDk73trxJ45nrULdlUPQYBGQxAl/2KOLn8+6YuZM6Xq3DUmnIuKRx EjvwIhg2KSolSaZuHnFULlxcngg2PttJ1k59Yedf0jh+J9gHWoVgYK5K9OaTtK8s pANbd3e/7P/B7iL3tqexEGntbu6BrnfFU/3wDAG/RMTDkCeJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIWHynXnfT7EkoTMnykOVfT9QYZfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJmMzgwMjAtODVkYy0z M2ZhLTgyOTYtYTc4OWY4YzcwYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXIVmpHufG2bcJ+BEmBYA1up1hIQ1qNfPUVNBSTZPwdY+pNrO24XTGP yViH/7xTBoWcDkEm/dydgWZap0pOkNjfKw2tzTfJA/mPvTIICrwpoGZcWnpC/81i gpVRj2K6x2N23r8nUI4N84Nf/FXv0mD4/UGq01NrQhyCKi/m1ao/RIesk47dEXcj JLIhguJs8cMdxFZpTdueVVWCKeQ7lUA1UY0tY3wp3uAnA5g5OmwxFxbPWNHmICB6 1yykXcs6BNcmYV+995lbnejHS+EeVvzvoDaRUVhhQbYQGnOtiteyzCvP5ahg392r gne0NyYCerc+OcgSA8JusAoJauP0zdU= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:37 2025 by rpki-client