$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa File: 45a4927d-04ce-3f81-aa78-438234fc318e.roa (raw, json) Hash identifier: GgQU0vq//MiKt3i7PtFBh24w8Rajl6fhlR0ja9v4VlE= Subject key identifier: 68:A5:CA:9A:9B:89:42:46:EC:D7:8A:6A:9C:81:6C:74:E3:24:88:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201F476B13A26C61F0E7240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f4:76:b1:3a:26:c6:1f:0e:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=0cca031c-f623-4407-8334-772b8154b49f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f4:70:fa:6a:37:1d:7b:1b:50:cb:14:55:15: 52:5f:b0:8b:47:63:e1:90:f0:f5:34:33:ad:86:ba: fc:ee:4a:b6:75:3d:9e:ac:56:36:8f:5c:1a:d9:b3: a2:46:d1:cb:76:6b:20:59:45:89:5c:f8:11:3f:5c: 86:18:7e:0b:bb:97:a2:9a:06:25:08:be:c1:1c:5f: 14:b3:01:19:81:70:86:29:c3:8a:4c:98:bd:03:66: f0:be:6e:0f:b3:17:fb:43:83:45:75:91:8c:90:23: ab:77:d7:6c:d7:1e:7c:97:72:db:12:b1:a3:b7:f2: 10:2c:82:4d:f6:e8:c6:af:60:4e:75:44:a6:68:d9: 94:15:f4:56:15:87:a7:b7:f7:00:be:55:d8:e7:1e: d0:9a:bb:e1:f9:86:a9:ce:43:42:6d:42:31:56:d1: 42:b7:12:ad:d2:9c:39:c0:13:ff:01:9e:bb:16:f0: 30:81:54:ab:9f:72:37:fb:04:b3:ef:6d:fb:6f:09: 8d:1c:dc:c7:a2:96:30:be:d8:3d:65:d7:b9:2c:31: 3b:37:9a:fa:88:3c:5f:d3:ce:c0:ee:b1:01:9f:64: 10:d3:44:f6:fd:53:f9:5d:fe:c0:03:ce:7c:07:d5: 19:0c:ba:28:f8:1f:ca:e1:b4:3d:d3:11:1f:10:b8: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:A5:CA:9A:9B:89:42:46:EC:D7:8A:6A:9C:81:6C:74:E3:24:88:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:2d:a6:8f:54:09:3d:5c:b8:bf:7a:fa:e2:84:bd:b0:1b:b7: 46:de:24:bb:0f:a0:8e:34:88:f9:77:98:98:ee:7f:68:d4:0b: 57:5e:aa:42:8b:0d:b3:63:2d:8d:20:9e:6b:97:ac:38:9b:25: b2:54:a9:a4:6a:bf:6a:da:6b:96:68:c4:71:a8:ea:98:70:6b: 4b:56:75:12:e5:5c:0b:0a:c1:a8:f2:9d:1e:bd:7e:96:c3:a8: fe:2f:05:d7:51:38:73:79:2d:ed:fb:ca:8f:93:17:8e:57:69: 2c:98:6b:6a:43:00:27:e0:f7:a7:41:97:06:64:dc:76:09:a3: 27:76:c2:74:5e:c6:ec:3c:0e:10:f6:8d:d3:a2:95:ac:36:1d: 4b:c3:73:a6:81:63:2f:04:c8:42:8c:85:a2:23:3d:72:28:78: 83:e9:4e:e0:03:1e:56:8c:3b:53:9b:34:0a:2c:5f:f7:48:0c: 07:ee:2e:9e:8d:0e:7d:19:80:35:ed:f4:8e:87:31:88:e5:f6: e9:ab:52:b0:ee:7c:e1:6e:4b:f8:fa:47:57:ac:41:1b:89:ce: 09:70:32:da:82:eb:c3:25:35:06:9f:12:b0:16:21:ec:07:cd: e1:b6:58:0f:74:bf:11:ea:19:78:11:a2:6f:32:93:92:54:9f: 4d:a0:cd:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfR2sTomxh8OckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MGNjYTAzMWMtZjYyMy00NDA3LTgzMzQtNzcyYjgxNTRiNDlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/Rw+mo3HXsbUMsUVRVSX7CLR2PhkPD1NDOt hrr87kq2dT2erFY2j1wa2bOiRtHLdmsgWUWJXPgRP1yGGH4Lu5eimgYlCL7BHF8U swEZgXCGKcOKTJi9A2bwvm4Psxf7Q4NFdZGMkCOrd9ds1x58l3LbErGjt/IQLIJN 9ujGr2BOdUSmaNmUFfRWFYent/cAvlXY5x7Qmrvh+YapzkNCbUIxVtFCtxKt0pw5 wBP/AZ67FvAwgVSrn3I3+wSz7237bwmNHNzHopYwvtg9Zde5LDE7N5r6iDxf087A 7rEBn2QQ00T2/VP5Xf7AA858B9UZDLoo+B/K4bQ90xEfELgcQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGilypqbiUJG7NeKapyBbHTjJIgRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDVhNDkyN2QtMDRjZS0z ZjgxLWFhNzgtNDM4MjM0ZmMzMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAtpo9UCT1cuL96+uKEvbAbt0beJLsPoI40iPl3mJjuf2jUC1deqkKL DbNjLY0gnmuXrDibJbJUqaRqv2raa5ZoxHGo6phwa0tWdRLlXAsKwajynR69fpbD qP4vBddROHN5Le37yo+TF45XaSyYa2pDACfg96dBlwZk3HYJoyd2wnRexuw8DhD2 jdOilaw2HUvDc6aBYy8EyEKMhaIjPXIoeIPpTuADHlaMO1ObNAosX/dIDAfuLp6N Dn0ZgDXt9I6HMYjl9umrUrDufOFuS/j6R1esQRuJzglwMtqC68MlNQafErAWIewH zeG2WA90vxHqGXgRom8yk5JUn02gzbw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:42 2025 by rpki-client