$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59095e83-ed6e-3af2-8707-8b600a6144d4.roa File: 59095e83-ed6e-3af2-8707-8b600a6144d4.roa (raw, json) Hash identifier: ZXRE6t9upZIHaGIhsxHOiRbkJfz2LXjY6RVHjyqFmDk= Subject key identifier: 66:F6:5B:68:EC:48:F0:CC:ED:B6:8D:FE:71:7F:30:58:07:5B:E5:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C805F640A588A1210E980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59095e83-ed6e-3af2-8707-8b600a6144d4.roa Signing time: Mon 22 Sep 2025 11:56:28 +0000 ROA not before: Mon 22 Sep 2025 11:56:28 +0000 ROA not after: Sun 21 Dec 2025 12:56:28 +0000 asID: 19905 IP address blocks: 173.20.200.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:80:5f:64:0a:58:8a:12:10:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:28 2025 GMT Not After : Dec 21 12:56:28 2025 GMT Subject: CN=c01cb8dc-abdc-40ec-b9f3-9aba08292bef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a7:c6:9c:e1:ad:a7:92:73:14:0f:16:da:5b: 04:36:88:24:3c:97:7e:22:c7:1b:eb:7a:70:38:89: e7:7f:21:b6:36:f5:cf:07:36:bb:54:0c:fa:7d:97: ff:49:5b:5d:16:81:60:72:92:94:8c:22:c7:1d:06: 3a:a8:0a:a7:68:ec:9b:bf:32:14:86:d0:7b:6a:9a: ec:05:ae:61:5f:22:98:e6:14:8d:8a:96:3b:1f:b6: 46:46:f4:05:dd:f9:6b:fc:f0:ab:a6:86:ce:03:38: 3b:c1:01:82:de:c8:48:12:47:02:87:c2:35:9b:f1: 13:49:1e:e5:95:a9:7b:ef:81:91:4c:98:8b:6b:bf: 02:22:ed:dc:07:16:a3:ca:cf:ed:d0:34:99:bd:01: 23:fe:b1:f0:26:97:20:d4:bf:77:b7:cc:49:a8:c5: c2:59:a1:38:ad:48:5e:19:e1:fe:e7:cb:45:49:2f: 04:4e:9f:07:6b:d4:45:a0:f4:31:a8:b9:62:fe:35: 98:da:09:28:e5:9e:a2:12:ea:35:42:41:b9:94:70: f6:bb:60:1a:47:0a:f1:e6:4f:06:75:5d:45:c2:81: c1:f5:f6:1c:fb:8a:cd:a7:08:6e:40:c8:57:44:2b: 77:8c:2b:83:26:c8:67:f5:b0:38:93:95:71:af:ea: 6d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:F6:5B:68:EC:48:F0:CC:ED:B6:8D:FE:71:7F:30:58:07:5B:E5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/59095e83-ed6e-3af2-8707-8b600a6144d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.200.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:6b:92:75:29:c3:6f:8d:de:08:99:6f:ab:b0:f8:93:6b:6a: 6d:49:34:7f:28:fc:73:f0:2b:1b:d9:e3:13:a2:a7:d1:84:b2: 01:02:66:16:99:43:5b:7d:5e:0c:53:3b:ec:b4:b2:99:ad:c8: dc:9b:07:e6:08:9d:68:e3:64:e8:0f:90:57:1e:bd:0b:65:c2: 9a:27:f3:8e:6b:60:58:b0:99:11:7e:70:9f:9f:c3:bc:36:45: a3:d0:c6:f9:ce:41:8e:d5:df:4f:0c:b8:b0:ab:63:a1:9a:0f: ad:c5:65:01:31:62:eb:09:9e:16:ce:36:00:48:ad:d2:65:1d: 8d:25:a3:a7:a9:2b:67:3c:3d:1c:40:47:d2:12:7c:3b:f8:bd: 3d:35:c0:98:ae:47:47:71:ce:41:5b:18:4a:23:ca:95:e2:b4: 4a:25:e9:e7:65:a5:79:75:f2:a6:0b:8a:0f:a7:db:6f:88:78: 68:d6:e5:05:67:b9:c7:7f:ac:6b:00:03:8c:59:ef:df:37:5d: ae:9d:07:be:a5:c7:02:9d:e8:fc:74:32:bc:cf:5c:2b:d1:c0: ca:4a:20:ce:25:5b:22:1d:08:10:7a:ea:0f:28:97:d8:2d:fb: 56:6a:6e:0f:e7:81:a8:d1:78:07:05:e6:7c:e7:ab:ec:7b:a0: fa:39:fb:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXIBfZApYihIQ6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTYyOFoXDTI1MTIyMTEyNTYyOFowLzEtMCsGA1UEAxMk YzAxY2I4ZGMtYWJkYy00MGVjLWI5ZjMtOWFiYTA4MjkyYmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjafGnOGtp5JzFA8W2lsENogkPJd+Iscb63pw OInnfyG2NvXPBza7VAz6fZf/SVtdFoFgcpKUjCLHHQY6qAqnaOybvzIUhtB7aprs Ba5hXyKY5hSNipY7H7ZGRvQF3flr/PCrpobOAzg7wQGC3shIEkcCh8I1m/ETSR7l lal774GRTJiLa78CIu3cBxajys/t0DSZvQEj/rHwJpcg1L93t8xJqMXCWaE4rUhe GeH+58tFSS8ETp8Ha9RFoPQxqLli/jWY2gko5Z6iEuo1QkG5lHD2u2AaRwrx5k8G dV1FwoHB9fYc+4rNpwhuQMhXRCt3jCuDJshn9bA4k5Vxr+ptswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGb2W2jsSPDM7baN/nF/MFgHW+V9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTkwOTVlODMtZWQ2ZS0z YWYyLTg3MDctOGI2MDBhNjE0NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJrknUpw2+N3giZb6uw+JNram1JNH8o/HPwKxvZ4xOip9GEsgECZhaZ Q1t9XgxTO+y0spmtyNybB+YInWjjZOgPkFcevQtlwpon845rYFiwmRF+cJ+fw7w2 RaPQxvnOQY7V308MuLCrY6GaD63FZQExYusJnhbONgBIrdJlHY0lo6epK2c8PRxA R9ISfDv4vT01wJiuR0dxzkFbGEojypXitEol6edlpXl18qYLig+n22+IeGjW5QVn ucd/rGsAA4xZ7983Xa6dB76lxwKd6Px0MrzPXCvRwMpKIM4lWyIdCBB66g8ol9gt +1Zqbg/ngajReAcF5nznq+x7oPo5+wc= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:13 2025 by rpki-client