$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa File: 2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa (raw, json) Hash identifier: ysXMvM/LtFJdjI0/bH9gG/2uX66hF49SJlzgIg1MC/c= Subject key identifier: 48:98:36:05:A7:8D:51:69:8E:B6:44:FF:16:B0:8F:CC:63:8B:6E:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D74299965C96EAF59487C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:42:99:96:5c:96:ea:f5:94:87:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=ed5d2bff-d065-4568-a696-f74f600668bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:46:ad:76:93:15:fe:20:b4:66:b1:67:b3:7e: 0a:cc:ea:ef:a6:54:62:6b:98:e5:7f:db:64:a3:f8: 5a:c3:c7:84:f9:e2:2b:31:cd:54:03:60:ec:99:3d: fa:65:77:f4:39:0b:32:a8:cd:97:82:02:5e:5a:a5: b6:03:73:41:d4:57:61:ef:3f:3a:e8:56:c8:61:df: e7:3c:71:89:bb:46:f3:de:0c:2a:b4:92:e3:84:3f: 42:75:59:ca:18:ac:3b:d6:95:71:a6:af:dc:31:46: ef:64:93:75:e1:9f:81:f7:60:6a:d8:53:2b:28:99: 66:fa:d9:32:a0:1c:7a:f4:44:fc:d2:e0:07:47:c5: 1d:bc:da:5e:ab:d4:09:14:8d:f8:d5:f3:bf:4c:db: b9:03:d8:4e:2e:09:ae:95:13:8c:59:07:3d:cc:14: 07:57:0d:66:50:d5:ec:17:0b:8c:d0:41:51:f5:ac: 12:69:d1:bb:95:ac:5f:89:c4:d1:e7:1b:13:bb:ec: 4e:86:19:37:6d:69:39:8c:6d:d8:2e:de:d5:f2:74: 24:a2:a1:03:98:f7:2c:18:c4:8a:d4:b1:74:21:c0: 89:7d:c8:38:fe:b2:5b:eb:1c:d1:b2:15:60:53:dd: c3:83:66:79:de:0a:e2:b8:8d:d9:1a:5e:28:36:d3: 2f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:98:36:05:A7:8D:51:69:8E:B6:44:FF:16:B0:8F:CC:63:8B:6E:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2134ce84-4ecd-3be9-b2fc-1c17cd655bfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:94:8e:bb:77:d7:d7:c7:76:d8:bf:8f:76:e7:a4:f1:8b:9e: 6d:bc:64:cd:cf:83:f8:e3:18:46:a1:99:18:7b:52:11:b5:74: c5:20:cc:81:5c:63:35:c2:14:4e:17:d6:1b:6c:0b:c5:a7:90: 99:27:18:a3:dd:ba:fb:50:26:a1:1a:eb:f6:20:33:4b:56:71: 14:ab:91:c0:81:12:65:f1:93:2b:dc:df:50:30:9c:f9:19:4c: 90:07:a3:4d:0c:ae:d0:26:8f:f9:58:0f:29:b4:a3:cd:2e:5a: 49:a8:b0:51:e3:e4:81:98:c3:53:26:87:ea:0a:ee:79:a7:44: d8:8b:a6:3f:83:07:6d:29:7e:d8:72:67:55:55:62:e0:2a:c1: 24:0c:5e:d5:67:ae:2d:e1:72:1a:9b:04:5b:61:b3:9f:12:62: e9:26:22:53:32:b8:93:00:73:11:64:de:c6:21:d5:a9:58:4b: a3:60:ac:ac:5e:24:a6:f5:56:ad:ab:37:55:62:62:22:9f:14: a5:ca:23:c7:7b:67:3b:ec:03:ff:17:9c:55:72:65:b1:42:9d: 82:04:37:59:99:b1:ed:2f:90:a6:1b:f7:ee:c4:61:ab:1a:5d: cb:d9:93:7e:db:ba:78:b6:1b:8f:b6:b2:c5:22:40:77:0a:67: 6d:77:d0:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW10KZllyW6vWUh8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZWQ1ZDJiZmYtZDA2NS00NTY4LWE2OTYtZjc0ZjYwMDY2OGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0atdpMV/iC0ZrFns34KzOrvplRia5jlf9tk o/haw8eE+eIrMc1UA2DsmT36ZXf0OQsyqM2XggJeWqW2A3NB1Fdh7z866FbIYd/n PHGJu0bz3gwqtJLjhD9CdVnKGKw71pVxpq/cMUbvZJN14Z+B92Bq2FMrKJlm+tky oBx69ET80uAHR8UdvNpeq9QJFI341fO/TNu5A9hOLgmulROMWQc9zBQHVw1mUNXs FwuM0EFR9awSadG7laxficTR5xsTu+xOhhk3bWk5jG3YLt7V8nQkoqEDmPcsGMSK 1LF0IcCJfcg4/rJb6xzRshVgU93Dg2Z53griuI3ZGl4oNtMvhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiYNgWnjVFpjrZE/xawj8xji27yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjEzNGNlODQtNGVjZC0z YmU5LWIyZmMtMWMxN2NkNjU1YmZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECUjrt319fHdti/j3bnpPGLnm28ZM3Pg/jjGEahmRh7UhG1dMUgzIFc YzXCFE4X1htsC8WnkJknGKPduvtQJqEa6/YgM0tWcRSrkcCBEmXxkyvc31AwnPkZ TJAHo00MrtAmj/lYDym0o80uWkmosFHj5IGYw1Mmh+oK7nmnRNiLpj+DB20pfthy Z1VVYuAqwSQMXtVnri3hchqbBFths58SYukmIlMyuJMAcxFk3sYh1alYS6NgrKxe JKb1Vq2rN1ViYiKfFKXKI8d7ZzvsA/8XnFVyZbFCnYIEN1mZse0vkKYb9+7EYasa XcvZk37buni2G4+2ssUiQHcKZ2130Es= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:35 2025 by rpki-client