$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c538d34-cd76-3416-a331-41a290082f08.roa File: 5c538d34-cd76-3416-a331-41a290082f08.roa (raw, json) Hash identifier: NgUCe2NEZDAa6VQm9MKIJPmR0u9a9T2tq/P/qhXAhs0= Subject key identifier: 13:66:0F:2B:D1:C8:8A:6A:B3:9A:95:9C:9C:5C:DA:D6:F8:A3:F3:23 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6632055F717E21EDAEAF0D40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c538d34-cd76-3416-a331-41a290082f08.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.20.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:32:05:5f:71:7e:21:ed:ae:af:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=5859e790-fa99-41cd-b6b7-a6032ace06b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:c3:72:d7:85:2d:59:e6:fa:2c:04:77:76: 2b:ad:9a:8e:01:aa:05:58:d5:69:55:9e:5c:47:ce: 44:bc:6e:29:2b:15:d7:58:47:bb:b0:6f:7f:f5:a9: b1:36:29:f2:5a:27:25:58:e9:39:7e:ec:ac:48:6f: 7b:32:15:18:2e:6c:0a:b3:17:54:aa:61:b3:bd:a4: eb:50:d7:b9:ce:9a:eb:9d:ce:f9:b8:d7:fd:d9:80: 0c:80:d5:52:08:4c:03:62:f0:a3:4e:c4:cc:6a:07: ef:b7:05:cd:c5:15:7b:d6:64:71:b5:07:5f:68:a8: 50:2b:d6:90:a5:89:1d:aa:57:9b:1c:ed:f7:a0:e8: 6e:47:cc:a2:96:66:86:6d:8e:09:8d:3d:ca:ec:19: b7:3a:23:1a:e0:1f:0c:f7:4c:f3:4d:0a:f7:89:1b: bb:a2:75:22:b2:bd:45:51:14:7e:13:fd:27:2a:62: 34:37:37:16:4a:8b:62:98:28:0a:be:d1:36:e6:73: 0d:8a:9f:37:68:3e:b5:57:d3:18:b5:51:76:28:06: c3:8d:5e:28:70:ca:e6:1a:5a:09:48:96:94:42:91: 08:cf:9f:e8:ff:f4:23:6f:56:b3:6c:59:ff:e7:b7: 44:03:24:b8:49:7d:90:16:31:b0:47:ad:7e:37:23: 4a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:66:0F:2B:D1:C8:8A:6A:B3:9A:95:9C:9C:5C:DA:D6:F8:A3:F3:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5c538d34-cd76-3416-a331-41a290082f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:17:c0:33:40:a6:a3:b8:10:e0:14:80:44:a3:ac:71:2d:9e: 67:53:5d:7b:c3:31:15:f3:43:0f:ec:76:46:c3:dd:95:ad:83: 2b:7d:f6:c5:aa:12:5d:10:e6:08:17:ee:f2:13:c0:4f:bd:10: 7f:12:dc:c0:e4:f1:06:16:9b:30:04:a8:a9:f7:0e:96:60:01: 2f:c2:cb:df:78:8b:83:40:11:eb:10:c5:f1:42:a7:c6:fd:2b: a6:a4:59:90:95:b7:7c:c2:eb:a9:f0:6a:cd:82:16:77:c5:0e: a1:59:30:47:8c:b0:e8:0e:4f:44:41:74:4d:43:2c:36:4d:5d: 95:ae:db:d0:de:89:bc:a2:64:6b:de:8d:5e:0c:59:6e:64:5a: ee:a8:a0:a0:72:4d:a9:9e:13:9e:cf:f2:51:11:11:e1:20:a4: b5:63:06:5f:74:f3:6c:c9:59:d5:df:83:22:0b:70:d5:e6:74: f1:f9:29:eb:e1:e1:40:a2:63:e7:d9:0e:60:22:ae:fa:bf:6f: a7:68:ee:b9:78:db:5a:83:44:a3:49:b7:8c:a3:47:a9:8a:a2: a7:e7:91:b6:bd:9d:1b:34:5f:e0:8b:21:8a:3b:11:58:01:fe: ab:4a:10:59:44:9f:4f:35:f3:ea:ec:11:6c:27:d6:81:01:64: 4e:f0:db:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMgVfcX4h7a6vDUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk NTg1OWU3OTAtZmE5OS00MWNkLWI2YjctYTYwMzJhY2UwNmI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPrDcteFLVnm+iwEd3YrrZqOAaoFWNVpVZ5c R85EvG4pKxXXWEe7sG9/9amxNinyWiclWOk5fuysSG97MhUYLmwKsxdUqmGzvaTr UNe5zprrnc75uNf92YAMgNVSCEwDYvCjTsTMagfvtwXNxRV71mRxtQdfaKhQK9aQ pYkdqlebHO33oOhuR8yilmaGbY4JjT3K7Bm3OiMa4B8M90zzTQr3iRu7onUisr1F URR+E/0nKmI0NzcWSotimCgKvtE25nMNip83aD61V9MYtVF2KAbDjV4ocMrmGloJ SJaUQpEIz5/o//Qjb1azbFn/57dEAyS4SX2QFjGwR61+NyNK6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBNmDyvRyIpqs5qVnJxc2tb4o/MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWM1MzhkMzQtY2Q3Ni0z NDE2LWEzMzEtNDFhMjkwMDgyZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgXwDNApqO4EOAUgESjrHEtnmdTXXvDMRXzQw/sdkbD3ZWtgyt99sWq El0Q5ggX7vITwE+9EH8S3MDk8QYWmzAEqKn3DpZgAS/Cy994i4NAEesQxfFCp8b9 K6akWZCVt3zC66nwas2CFnfFDqFZMEeMsOgOT0RBdE1DLDZNXZWu29DeibyiZGve jV4MWW5kWu6ooKByTameE57P8lEREeEgpLVjBl9082zJWdXfgyILcNXmdPH5Kevh 4UCiY+fZDmAirvq/b6do7rl421qDRKNJt4yjR6mKoqfnkba9nRs0X+CLIYo7EVgB /qtKEFlEn0818+rsEWwn1oEBZE7w20A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:32 2025 by rpki-client