$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa File: 225e5d2e-2893-357d-93ab-5e77ee163db5.roa (raw, json) Hash identifier: VfvUu76KaQtSo3xkgtAhRLtsxjxozJiogWsYBqXS+Fk= Subject key identifier: A2:5B:A7:32:D9:D4:05:1D:FF:4C:31:C1:9D:F7:C0:27:DD:44:3A:8F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B39871698BD4737BEBDC74F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa Signing time: Wed 17 Sep 2025 13:00:41 +0000 ROA not before: Wed 17 Sep 2025 13:00:41 +0000 ROA not after: Tue 16 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 173.20.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:39:87:16:98:bd:47:37:be:bd:c7:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 13:00:41 2025 GMT Not After : Dec 16 14:00:41 2025 GMT Subject: CN=440c7e2b-e40f-4954-b44d-35e618f52f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c6:7d:2b:f4:84:1f:bd:d3:ba:02:97:69:90: 49:af:50:6c:20:c8:f0:41:eb:87:a3:f7:df:5a:50: 53:2d:d6:9d:c1:20:c9:fa:65:39:7f:34:e8:1d:5e: ab:bd:73:f8:86:66:96:97:29:e6:a8:d5:ed:2f:d7: 6f:09:d1:62:aa:64:16:32:76:68:23:07:e0:01:67: 1e:7e:30:8c:2a:24:af:52:63:1b:b6:56:5f:b8:10: 1f:b3:a9:c2:12:fc:d3:37:ef:83:e5:9b:07:aa:e5: e3:17:c3:fa:02:b6:93:d6:cd:3f:72:4e:32:21:ee: 72:d5:b4:03:71:93:63:dc:1b:4a:cc:0b:0f:f1:52: dc:d4:63:a5:86:7e:54:56:fa:5b:ca:12:6c:2a:e7: f6:e9:cd:f3:d4:d3:ff:f2:10:76:39:4f:af:3e:46: 2c:80:99:fd:fe:74:c6:f6:a7:4c:66:25:43:87:08: 89:9a:4f:f5:b1:e9:f4:d7:bc:ca:90:2b:28:ee:91: c4:03:57:fe:30:9a:17:66:a0:cf:5d:48:e9:06:71: 6f:9f:e8:b9:46:4d:13:5c:66:fc:c8:a5:f3:aa:a8: 56:e6:7e:30:87:e3:8c:19:3e:90:aa:2d:43:ce:bf: 65:e8:87:60:2c:00:15:38:2a:21:77:b9:b8:fc:96: 1d:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5B:A7:32:D9:D4:05:1D:FF:4C:31:C1:9D:F7:C0:27:DD:44:3A:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:06:02:b2:c3:23:03:3b:d4:84:f8:16:34:c0:bf:28:b6:9c: 27:78:43:0a:d8:fd:0a:05:09:5e:2b:23:2f:da:2b:5d:92:9d: 18:25:fc:9e:a5:65:64:5e:8a:ba:40:fb:49:e4:da:82:58:6b: a1:b5:88:d5:5b:98:f2:cb:4f:db:39:7a:52:03:95:99:b4:02: fa:9d:6b:13:75:42:a9:89:dc:76:27:67:34:d4:1b:54:88:d7: 2c:a7:66:15:53:3b:9d:da:aa:06:ff:61:f7:7a:ce:d4:c1:c2: ac:01:ac:4c:e4:f6:d9:84:4b:76:40:4f:b0:1a:79:89:31:53: ae:11:cc:f5:53:9b:a8:46:31:53:22:e6:f8:4f:41:67:9f:cd: cd:9f:77:58:2c:b2:e9:ca:e9:3a:48:21:60:a0:73:fb:cd:0a: 7a:be:13:a1:e7:de:14:a6:c1:14:a0:cb:58:2e:c3:d4:c5:93: 81:65:b6:ed:20:dc:ad:f6:50:9e:8d:4b:5d:40:f8:e5:d8:42: e7:e5:03:0c:35:7d:2e:4b:bd:ec:d8:5d:cf:da:41:1b:ba:08: c1:de:c2:75:92:f1:0e:df:3d:be:2d:f9:19:75:bd:f8:9d:b1: fd:16:e1:71:90:05:bf:05:f5:7e:cb:eb:cb:a4:d8:3e:17:4f: d4:fd:a0:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs5hxaYvUc3vr3HTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxNzEzMDA0MVoXDTI1MTIxNjE0MDA0MVowLzEtMCsGA1UEAxMk NDQwYzdlMmItZTQwZi00OTU0LWI0NGQtMzVlNjE4ZjUyZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMZ9K/SEH73TugKXaZBJr1BsIMjwQeuHo/ff WlBTLdadwSDJ+mU5fzToHV6rvXP4hmaWlynmqNXtL9dvCdFiqmQWMnZoIwfgAWce fjCMKiSvUmMbtlZfuBAfs6nCEvzTN++D5ZsHquXjF8P6AraT1s0/ck4yIe5y1bQD cZNj3BtKzAsP8VLc1GOlhn5UVvpbyhJsKuf26c3z1NP/8hB2OU+vPkYsgJn9/nTG 9qdMZiVDhwiJmk/1sen017zKkCso7pHEA1f+MJoXZqDPXUjpBnFvn+i5Rk0TXGb8 yKXzqqhW5n4wh+OMGT6Qqi1Dzr9l6IdgLAAVOCohd7m4/JYdJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJbpzLZ1AUd/0wxwZ33wCfdRDqPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjI1ZTVkMmUtMjg5My0z NTdkLTkzYWItNWU3N2VlMTYzZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFoGArLDIwM71IT4FjTAvyi2nCd4QwrY/QoFCV4rIy/aK12SnRgl/J6l ZWReirpA+0nk2oJYa6G1iNVbmPLLT9s5elIDlZm0AvqdaxN1QqmJ3HYnZzTUG1SI 1yynZhVTO53aqgb/Yfd6ztTBwqwBrEzk9tmES3ZAT7AaeYkxU64RzPVTm6hGMVMi 5vhPQWefzc2fd1gssunK6TpIIWCgc/vNCnq+E6Hn3hSmwRSgy1guw9TFk4Fltu0g 3K32UJ6NS11A+OXYQuflAww1fS5LvezYXc/aQRu6CMHewnWS8Q7fPb4t+Rl1vfid sf0W4XGQBb8F9X7L68uk2D4XT9T9oN4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:26 2025 by rpki-client