$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa File: 37fb6013-32c5-3358-99f2-57e7e2f87612.roa (raw, json) Hash identifier: 7FYDKsElfCcc4zPh92L4Wg+eo8j+XnoxTqPN9t78Zp8= Subject key identifier: 2A:3B:1F:E9:9B:A7:81:CF:5D:11:C4:B2:70:4F:45:5E:25:51:2E:09 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62023AB9A1A8AAADC603B080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.20.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:3a:b9:a1:a8:aa:ad:c6:03:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=c615e4ff-23a3-4d3e-b551-35927d5a12c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:a3:99:f9:cc:40:0e:b5:9e:e3:48:77:ca: 8b:e0:c3:31:2d:a6:a0:11:27:18:b3:1b:73:e1:e2: a7:ff:8a:de:64:8c:12:cf:b1:8e:44:96:eb:99:89: a6:75:0e:63:21:51:08:15:84:23:51:0e:e8:f2:5c: 00:51:2e:51:ce:63:a1:51:32:c6:10:22:19:03:c3: 98:69:d8:11:72:7c:64:81:05:f7:7a:c8:ff:9e:8b: 94:f7:96:87:1a:53:9c:f5:ed:fd:cf:3a:b3:31:69: 75:73:1d:6d:ee:84:f8:c5:50:be:61:b0:eb:b6:69: 09:28:d5:b7:fa:d4:e6:5e:a6:0c:f5:ba:df:48:a2: 84:8e:ce:53:4f:96:7c:ec:41:25:19:8d:5f:d1:d2: 01:5c:bf:b6:66:0a:26:27:f0:bb:df:fa:51:55:53: cb:5d:dc:11:48:c7:ed:a8:10:a9:07:21:90:0d:ae: 65:3b:23:b9:66:29:77:a4:3d:a2:f8:c4:cc:81:13: 55:02:1e:76:fd:f3:2a:66:d7:4b:0b:db:69:be:02: 62:b3:61:7c:8f:07:9a:02:4b:7e:75:65:49:90:58: b8:43:6a:74:0b:d2:c4:cb:e0:97:f2:10:16:c3:ce: b0:54:1f:d8:ac:9e:d4:98:37:10:63:a8:e3:41:53: ae:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3B:1F:E9:9B:A7:81:CF:5D:11:C4:B2:70:4F:45:5E:25:51:2E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/37fb6013-32c5-3358-99f2-57e7e2f87612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:64:e1:3a:f5:7b:cb:a1:5f:da:f4:c0:71:06:de:6c:e7:2c: ec:a7:59:ff:29:6f:c7:8b:f1:4f:25:ed:c5:db:8b:d2:ce:3a: 9d:a6:89:91:e2:ea:1b:6f:6b:22:45:23:5c:36:80:d7:fa:13: 1a:04:73:73:0f:2c:81:f1:ec:d7:6c:4b:64:fd:8b:93:2b:ae: 14:59:b3:6b:8c:dc:07:21:95:14:27:a4:55:6b:26:de:97:7a: b8:2d:91:2c:9f:91:2d:7f:ec:27:2b:8a:3c:b6:dc:89:c8:bf: a3:5f:d6:64:b1:5d:b2:65:51:ae:da:aa:c6:bb:a5:56:7f:67: 12:b0:ff:09:6a:e5:18:d2:18:4e:52:ea:40:28:3d:4d:d8:66: ed:56:f3:70:36:be:94:a8:0f:e7:da:b9:bc:32:4d:3a:6c:2e: ac:3e:a2:ab:9c:22:85:8a:c8:b9:6c:0f:40:a3:e3:06:ef:05: 25:53:35:54:af:8f:29:97:ed:b5:9e:82:c5:83:2b:0d:b9:38: 0c:da:d2:c4:0a:fe:5d:07:76:1c:a8:5d:ab:72:f5:0c:1c:5d: 8d:b4:f5:05:26:82:8a:17:4f:c8:74:b6:c2:f5:55:e8:e8:ba: 1a:9a:6d:03:c3:39:ec:bd:de:9e:85:df:4c:cd:1b:6a:c5:38: 4d:29:22:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAjq5oaiqrcYDsIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YzYxNWU0ZmYtMjNhMy00ZDNlLWI1NTEtMzU5MjdkNWExMmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswKjmfnMQA61nuNId8qL4MMxLaagEScYsxtz 4eKn/4reZIwSz7GORJbrmYmmdQ5jIVEIFYQjUQ7o8lwAUS5RzmOhUTLGECIZA8OY adgRcnxkgQX3esj/nouU95aHGlOc9e39zzqzMWl1cx1t7oT4xVC+YbDrtmkJKNW3 +tTmXqYM9brfSKKEjs5TT5Z87EElGY1f0dIBXL+2ZgomJ/C73/pRVVPLXdwRSMft qBCpByGQDa5lOyO5Zil3pD2i+MTMgRNVAh52/fMqZtdLC9tpvgJis2F8jweaAkt+ dWVJkFi4Q2p0C9LEy+CX8hAWw86wVB/YrJ7UmDcQY6jjQVOumwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCo7H+mbp4HPXRHEsnBPRV4lUS4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzdmYjYwMTMtMzJjNS0z MzU4LTk5ZjItNTdlN2UyZjg3NjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFk4Tr1e8uhX9r0wHEG3mznLOynWf8pb8eL8U8l7cXbi9LOOp2miZHi 6htvayJFI1w2gNf6ExoEc3MPLIHx7NdsS2T9i5MrrhRZs2uM3AchlRQnpFVrJt6X ergtkSyfkS1/7Ccrijy23InIv6Nf1mSxXbJlUa7aqsa7pVZ/ZxKw/wlq5RjSGE5S 6kAoPU3YZu1W83A2vpSoD+faubwyTTpsLqw+oqucIoWKyLlsD0Cj4wbvBSVTNVSv jymX7bWegsWDKw25OAza0sQK/l0HdhyoXaty9QwcXY209QUmgooXT8h0tsL1Vejo uhqabQPDOey93p6F30zNG2rFOE0pIv0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:23 2025 by rpki-client