$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa File: 701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa (raw, json) Hash identifier: WsWzYNBb+Fc2PVyObd3lL+kas2bhhlNC+raXOXczr3A= Subject key identifier: 3F:3A:49:38:00:81:1A:BF:36:7E:00:FC:08:47:CA:78:D8:97:F5:22 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4081E1FD57C68E7F5726C600 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:e1:fd:57:c6:8e:7f:57:26:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=98a00edf-d084-4c19-857f-77e3152791d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:13:42:1a:98:35:8e:e6:ee:4f:42:fa:33:6d: ae:2c:30:db:a1:9f:da:b2:25:8f:f6:11:6f:bd:9d: 71:00:06:93:39:82:26:70:b4:36:10:5e:e2:05:a4: 5f:6b:45:36:a7:82:88:df:52:d0:89:e8:5c:b8:9b: d5:a8:9c:94:41:72:11:07:64:c8:57:91:cd:d8:d8: df:1d:47:09:e6:e7:2c:74:af:0b:05:f4:c6:c2:2d: 5b:cf:b7:fd:f7:65:c0:51:5b:6d:b0:4f:02:b0:5b: 42:ba:25:bd:60:da:f3:72:ff:8e:95:a5:c4:6d:56: 92:75:c5:86:ce:63:20:4e:7c:a5:06:45:91:10:53: d2:b0:f6:fc:e8:e4:29:01:a9:4e:64:e0:df:1b:f5: a2:3c:f0:c1:c8:20:75:4f:e4:a0:dc:b0:b6:ba:ba: 02:0b:66:62:9e:5a:cb:69:ee:53:54:87:4f:cf:8f: 37:4f:9f:d5:49:d6:ec:ca:d5:34:02:9c:c3:f2:53: 24:23:94:e5:13:ff:72:c4:0b:c1:3c:30:d7:7f:02: 25:57:31:65:6f:3c:fa:bf:0c:80:8f:63:97:72:f6: 52:b6:2c:aa:d4:66:86:69:9e:c5:27:c4:03:18:b4: 8c:86:b1:3f:df:27:9a:80:4e:0d:a7:f9:64:c4:6e: 04:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3A:49:38:00:81:1A:BF:36:7E:00:FC:08:47:CA:78:D8:97:F5:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/701850c4-b888-3b5f-acd3-42bb3c8d4f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1f:7c:fa:6e:ea:33:0d:38:c8:e8:0f:8c:62:45:4d:17:27: 63:f1:51:50:29:44:c4:ba:8f:ee:49:9e:4f:f2:ee:00:56:c3: 03:87:e9:b7:3e:d3:6c:cb:0a:0a:95:cf:5e:62:f6:6e:dd:a4: 71:0a:ea:d5:df:03:0d:41:3a:eb:4c:34:79:ac:d6:58:0e:33: ae:3f:4d:d4:23:b0:da:13:17:03:4c:2f:da:30:bb:79:02:01: 36:40:c6:c2:50:cd:81:0e:e7:36:b1:af:e5:b0:12:56:77:5d: 82:23:4d:02:46:58:3b:4f:77:e3:7d:a1:5e:9c:03:16:18:b6: 0f:9c:41:a9:ff:13:06:a7:d6:14:93:40:0f:92:f6:eb:76:f5: 0f:10:64:ea:bf:fc:cb:cb:a4:c0:90:2f:ed:88:d1:85:7b:30: 51:36:03:fd:f2:e8:7d:54:f5:02:a8:b6:82:2f:75:a1:87:8e: 14:cb:27:b3:f7:41:4a:fa:9b:bf:f5:d6:54:45:8b:29:0f:fe: d4:9d:54:d5:d6:23:df:63:7b:08:69:cc:2d:cf:e2:25:49:7d: 71:47:6d:46:f5:bb:ca:24:a9:38:6b:6e:50:ed:b7:f7:21:2b: 04:5f:6a:6d:02:61:93:0c:60:99:6e:4f:f7:28:0d:0e:f9:39: 67:b3:b7:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgeH9V8aOf1cmxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OThhMDBlZGYtZDA4NC00YzE5LTg1N2YtNzdlMzE1Mjc5MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRNCGpg1jubuT0L6M22uLDDboZ/asiWP9hFv vZ1xAAaTOYImcLQ2EF7iBaRfa0U2p4KI31LQiehcuJvVqJyUQXIRB2TIV5HN2Njf HUcJ5ucsdK8LBfTGwi1bz7f992XAUVttsE8CsFtCuiW9YNrzcv+OlaXEbVaSdcWG zmMgTnylBkWREFPSsPb86OQpAalOZODfG/WiPPDByCB1T+Sg3LC2uroCC2ZinlrL ae5TVIdPz483T5/VSdbsytU0ApzD8lMkI5TlE/9yxAvBPDDXfwIlVzFlbzz6vwyA j2OXcvZStiyq1GaGaZ7FJ8QDGLSMhrE/3yeagE4Np/lkxG4EMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD86STgAgRq/Nn4A/AhHynjYl/UiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzAxODUwYzQtYjg4OC0z YjVmLWFjZDMtNDJiYjNjOGQ0ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4ffPpu6jMNOMjoD4xiRU0XJ2PxUVApRMS6j+5Jnk/y7gBWwwOH6bc+ 02zLCgqVz15i9m7dpHEK6tXfAw1BOutMNHms1lgOM64/TdQjsNoTFwNML9owu3kC ATZAxsJQzYEO5zaxr+WwElZ3XYIjTQJGWDtPd+N9oV6cAxYYtg+cQan/Ewan1hST QA+S9ut29Q8QZOq//MvLpMCQL+2I0YV7MFE2A/3y6H1U9QKotoIvdaGHjhTLJ7P3 QUr6m7/11lRFiykP/tSdVNXWI99jewhpzC3P4iVJfXFHbUb1u8okqThrblDtt/ch KwRfam0CYZMMYJluT/coDQ75OWezt8s= -----END CERTIFICATE-----Generated at Sat Oct 11 02:51:49 2025 by rpki-client