$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa File: 0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa (raw, json) Hash identifier: gMwdKW5HUJ/TlSNK+jRrX1Bw5xhc+u9UvgaMtjQGBNA= Subject key identifier: 0D:F7:12:DA:BE:3A:E2:63:27:10:43:9B:4B:F7:C6:47:48:FA:E7:FD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201DBB4FFA111D6E8878D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.20.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:db:b4:ff:a1:11:d6:e8:87:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=6e4b7da1-cdef-4abc-9b14-1e929917b725 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b2:13:64:20:50:42:55:f5:40:91:36:89:b2: c8:90:ef:cb:6d:f0:ba:e5:93:3e:55:1c:0b:83:24: 41:dc:ee:62:5c:32:76:de:20:89:0f:59:fe:07:58: 46:09:bd:05:9d:b9:2d:62:1a:74:12:d7:35:25:6a: f5:30:09:87:70:ee:8e:e6:e7:da:d3:3f:05:19:e2: ad:39:16:14:61:1a:35:d6:f9:d1:d4:84:e4:70:ce: 56:b7:69:96:f9:d4:87:d0:72:41:7d:7d:14:69:0f: e6:e2:13:5c:01:74:94:73:7d:0b:c2:a4:5d:69:e2: dd:e7:eb:fc:f7:4f:44:c2:39:c5:60:4b:70:dd:97: 6c:bc:3c:66:60:a4:8c:e3:f5:4b:16:77:71:40:33: 5c:2a:67:68:fd:4a:31:ef:3d:43:e1:c5:c9:52:d8: cb:b6:f4:0a:10:a0:31:17:79:85:92:5f:2c:71:35: 0d:92:33:bf:af:d8:33:25:4f:76:b5:21:a8:81:62: a2:21:19:09:a7:eb:56:e5:36:75:21:2b:ae:39:ad: 76:b7:59:b7:ca:17:51:e7:21:c5:4a:bf:52:62:1b: f6:1c:5d:e8:af:85:45:c5:86:4f:d2:5d:d5:99:f8: 8f:cf:38:3b:0e:d3:9f:f4:8d:63:97:1f:1f:ba:95: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:F7:12:DA:BE:3A:E2:63:27:10:43:9B:4B:F7:C6:47:48:FA:E7:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:33:09:ff:4c:ee:b0:ac:f3:44:11:db:a8:3e:41:54:b7:b6: 3c:66:c4:03:c2:e1:61:b7:bf:43:70:a1:17:ac:3c:d6:b6:72: 04:c5:89:d8:78:f2:98:9c:61:7d:30:cd:43:84:8d:09:b3:94: 0b:54:c5:18:59:98:8b:6e:08:56:e2:f7:9d:bc:6a:60:56:e1: e5:71:78:ff:a6:7a:be:29:c1:bc:11:bc:c0:fd:dc:d9:a4:05: 4a:a4:9c:ee:22:31:74:16:7b:b6:3e:9e:af:11:51:0b:eb:eb: 74:3d:66:73:2b:ad:cb:a2:e1:d5:72:dc:02:8c:42:e2:c8:bd: 6d:d0:0c:c6:4c:9f:eb:f8:28:27:da:6c:f2:2c:ea:a2:a3:0c: a4:0b:e4:ef:ad:f2:1b:51:65:b5:5a:dd:94:70:0a:ee:6f:98: dc:8f:06:83:06:ce:1b:c2:a2:88:75:c6:94:11:38:ba:34:23: 1e:d8:7c:29:32:10:1d:64:cd:0a:85:9f:58:be:7d:fe:c4:90: 7f:37:68:c7:33:5f:90:62:0e:59:38:e3:a3:99:d3:38:69:e7: 70:c3:c7:e4:b8:33:8a:91:f9:6a:9a:d1:6d:c9:e7:16:63:c1: ad:ba:d5:92:78:18:ac:1a:61:1c:8e:c4:22:82:11:0e:2f:8d: 42:f6:e6:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdu0/6ER1uiHjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NmU0YjdkYTEtY2RlZi00YWJjLTliMTQtMWU5Mjk5MTdiNzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7ITZCBQQlX1QJE2ibLIkO/LbfC65ZM+VRwL gyRB3O5iXDJ23iCJD1n+B1hGCb0FnbktYhp0Etc1JWr1MAmHcO6O5ufa0z8FGeKt ORYUYRo11vnR1ITkcM5Wt2mW+dSH0HJBfX0UaQ/m4hNcAXSUc30LwqRdaeLd5+v8 909EwjnFYEtw3ZdsvDxmYKSM4/VLFndxQDNcKmdo/Uox7z1D4cXJUtjLtvQKEKAx F3mFkl8scTUNkjO/r9gzJU92tSGogWKiIRkJp+tW5TZ1ISuuOa12t1m3yhdR5yHF Sr9SYhv2HF3or4VFxYZP0l3VmfiPzzg7DtOf9I1jlx8fupWSgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA33Etq+OuJjJxBDm0v3xkdI+uf9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGVkNzBmZTEtYjViYS0z Njk3LThjZDctZjg5YWI3ZmI0MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYzCf9M7rCs80QR26g+QVS3tjxmxAPC4WG3v0NwoResPNa2cgTFidh4 8picYX0wzUOEjQmzlAtUxRhZmItuCFbi9528amBW4eVxeP+mer4pwbwRvMD93Nmk BUqknO4iMXQWe7Y+nq8RUQvr63Q9ZnMrrcui4dVy3AKMQuLIvW3QDMZMn+v4KCfa bPIs6qKjDKQL5O+t8htRZbVa3ZRwCu5vmNyPBoMGzhvCooh1xpQROLo0Ix7YfCky EB1kzQqFn1i+ff7EkH83aMczX5BiDlk446OZ0zhp53DDx+S4M4qR+Wqa0W3J5xZj wa261ZJ4GKwaYRyOxCKCEQ4vjUL25g8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:17 2025 by rpki-client