$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa File: 2cd172de-b031-3b7a-8374-eced4e55a452.roa (raw, json) Hash identifier: 3DGOGWFrdlZcHKV0CfbNGr4Lm9eLQPTBUtwP3ZXmICY= Subject key identifier: 5E:61:0C:E8:32:C3:24:74:32:5F:34:22:77:D3:1E:2F:0F:E5:A9:BB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCA69AA6A56D6E4822DDC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:a6:9a:a6:a5:6d:6e:48:22:dd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=133dc07d-4fe6-4901-b8e3-49096da6fba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:fd:2a:75:6e:eb:f7:e3:76:3a:f8:ab:ed:73: 82:bb:60:6b:5c:a9:7a:c8:6b:fb:a7:e3:e9:20:84: 47:28:43:ac:40:ba:d6:69:23:3e:52:5f:3d:2c:5b: 82:5c:3b:21:bf:21:3b:0c:a4:50:37:90:97:34:34: c0:d5:8b:e0:d5:e2:46:13:17:5e:68:fb:2a:77:ad: 38:d7:88:94:84:cb:15:c7:2e:09:5e:f9:62:25:5a: 3b:d1:23:b3:4d:33:bd:4b:f9:4f:f8:11:a6:d6:3c: 38:9d:07:3e:e3:82:3f:fd:0c:74:d1:76:86:03:25: 3d:ae:b0:e4:9f:a3:31:0a:d7:0b:44:30:4f:37:d6: ef:86:e7:0d:64:6b:35:e4:68:42:5c:9e:8f:34:36: b5:bf:0f:b1:ea:13:14:22:db:6c:ea:9d:0f:fe:8e: 68:b9:18:b9:e5:64:e8:ef:6f:72:d2:80:ab:c8:a7: 28:f0:cf:37:e6:cc:8e:60:ac:3f:b1:0d:32:38:f4: a4:6d:81:de:10:fd:6e:1f:1f:ce:db:54:58:6b:7b: 85:f2:4d:b3:68:82:d6:53:69:87:51:cb:a3:3b:8a: f5:d5:a2:3c:91:1c:e5:75:5b:f5:ef:3f:cb:7b:20: 55:a9:84:4a:4e:91:65:9e:bc:18:f7:eb:7f:14:50: be:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:61:0C:E8:32:C3:24:74:32:5F:34:22:77:D3:1E:2F:0F:E5:A9:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a7:c1:2f:79:a2:c8:42:07:79:a6:a4:48:ed:6c:db:93:7f: 6c:9b:10:f1:80:a8:a8:b3:4d:f5:81:3f:f7:30:5e:15:88:77: 1b:fb:96:e2:53:e7:42:a8:29:08:fb:dc:77:00:1c:3b:04:fa: 31:fe:5b:f4:c7:f6:b8:2f:1f:68:8b:1e:89:a6:8c:5e:5b:41: 5a:87:58:70:90:e6:9d:cb:13:b1:b3:5b:a2:80:c8:38:1b:b9: 4d:f4:d5:21:5a:46:cd:ec:d4:9e:f9:e6:cc:d3:f1:d9:f8:3b: 94:d7:31:e9:2f:f1:8d:6d:da:4c:8d:d2:d8:01:c4:42:60:d8: 96:46:1a:10:9b:17:83:60:3a:d3:b9:d8:94:cb:3a:b6:ba:5a: cc:15:ea:55:19:48:4d:ea:c8:62:f3:6e:47:e1:9e:85:11:55: e9:9a:35:69:7d:e5:d0:4c:23:d6:18:63:7d:cd:28:bb:61:2a: a5:c8:52:a5:31:06:62:b9:28:65:e2:79:a1:60:42:8c:d9:be: 10:3b:7d:3b:cd:91:e9:5e:39:35:15:7b:27:bd:85:0e:66:08: f0:f9:92:1a:c9:00:97:06:b4:5f:00:3e:bf:99:8c:a0:df:f1: 8e:ad:97:7b:01:8c:ef:db:bb:3a:ef:fd:fa:d2:cd:a1:05:33: fd:eb:b6:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzKaapqVtbkgi3cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTMzZGMwN2QtNGZlNi00OTAxLWI4ZTMtNDkwOTZkYTZmYmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4P0qdW7r9+N2Ovir7XOCu2BrXKl6yGv7p+Pp IIRHKEOsQLrWaSM+Ul89LFuCXDshvyE7DKRQN5CXNDTA1Yvg1eJGExdeaPsqd604 14iUhMsVxy4JXvliJVo70SOzTTO9S/lP+BGm1jw4nQc+44I//Qx00XaGAyU9rrDk n6MxCtcLRDBPN9bvhucNZGs15GhCXJ6PNDa1vw+x6hMUItts6p0P/o5ouRi55WTo 729y0oCryKco8M835syOYKw/sQ0yOPSkbYHeEP1uHx/O21RYa3uF8k2zaILWU2mH UcujO4r11aI8kRzldVv17z/LeyBVqYRKTpFlnrwY9+t/FFC+SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5hDOgywyR0Ml80InfTHi8P5am7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNkMTcyZGUtYjAzMS0z YjdhLTgzNzQtZWNlZDRlNTVhNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEinwS95oshCB3mmpEjtbNuTf2ybEPGAqKizTfWBP/cwXhWIdxv7luJT 50KoKQj73HcAHDsE+jH+W/TH9rgvH2iLHommjF5bQVqHWHCQ5p3LE7GzW6KAyDgb uU301SFaRs3s1J755szT8dn4O5TXMekv8Y1t2kyN0tgBxEJg2JZGGhCbF4NgOtO5 2JTLOra6WswV6lUZSE3qyGLzbkfhnoURVemaNWl95dBMI9YYY33NKLthKqXIUqUx BmK5KGXieaFgQozZvhA7fTvNkeleOTUVeye9hQ5mCPD5khrJAJcGtF8APr+ZjKDf 8Y6tl3sBjO/buzrv/frSzaEFM/3rtuM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:28 2025 by rpki-client