$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/804642b8-77fe-3882-9b47-82e1a4603025.roa File: 804642b8-77fe-3882-9b47-82e1a4603025.roa (raw, json) Hash identifier: wOCYlj+urM4QjG0FZvyEDuj53hhGNJcnUJJPAvfRMrw= Subject key identifier: 58:E5:1B:3C:96:EC:41:4B:3D:28:95:B2:AA:C1:1A:13:30:08:8F:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620225E611BE518CC149E080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/804642b8-77fe-3882-9b47-82e1a4603025.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.20.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:25:e6:11:be:51:8c:c1:49:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=1758f0a4-7605-4a11-927a-0b561717a02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:4f:c0:70:bf:88:46:52:41:c9:e7:77:96:81: 16:d2:c8:ad:9b:c6:fe:d0:4e:85:94:bb:3c:0e:3d: 4e:58:98:e2:a4:cc:f3:2a:42:2a:c2:fd:02:9b:80: e0:71:e6:f5:09:fb:34:32:08:f4:f4:a6:ec:f5:ab: 73:a7:29:c3:a4:5b:ed:d7:7c:ea:3e:e7:3e:3b:17: 03:e6:36:93:ff:dd:a0:72:ea:ca:8e:c2:af:8a:cd: bd:54:04:7f:a9:8b:0a:76:8c:28:aa:41:c5:af:59: 32:67:ce:9a:ea:69:17:1b:05:7d:1d:10:82:26:f8: aa:9f:1d:1f:1a:aa:0c:77:6b:2f:f7:72:e7:c5:c8: c7:08:d8:a0:37:9a:56:32:1f:b6:45:3b:10:c0:2a: 9e:aa:c6:f8:21:bd:4e:fb:4e:f2:53:28:3c:71:06: 13:91:fd:1b:73:44:50:84:e9:37:d7:cc:71:a5:70: 4a:c5:4e:53:02:f2:6c:1b:d5:7b:b8:b5:83:49:9a: 00:29:40:85:4f:a8:2e:43:7a:4f:1d:2c:ce:4d:c2: ae:b8:30:c1:47:d7:ba:10:a3:e7:dc:bd:6f:14:f3: 6e:fe:cb:1f:dd:b4:b3:28:1a:85:3c:d3:15:81:ee: 8d:f5:84:a7:a6:4b:80:29:67:bf:84:ac:32:83:20: 96:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E5:1B:3C:96:EC:41:4B:3D:28:95:B2:AA:C1:1A:13:30:08:8F:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/804642b8-77fe-3882-9b47-82e1a4603025.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:bd:52:10:19:32:44:01:a7:4b:72:75:63:a9:01:fc:a0:39: 77:3c:76:2a:25:4e:21:90:10:31:5a:9f:a8:9f:dc:be:2c:4c: fe:ec:ec:01:12:70:92:79:12:cf:13:2b:fd:a1:b7:e8:84:6d: 70:88:e6:7f:ed:fa:c0:25:cd:bf:07:36:66:7f:a1:51:38:7f: e7:71:8a:d4:52:49:5e:15:ed:4d:01:50:44:6d:76:96:87:bf: 3f:ce:31:05:29:3e:92:64:f8:19:fc:19:75:20:9f:b0:d6:a4: 44:29:94:65:a0:70:fb:ee:47:c6:6b:12:97:86:b9:c1:8a:e3: 55:38:21:34:15:2c:70:0e:ec:21:1a:3b:49:06:04:1a:04:27: e3:e0:b0:98:4f:0e:85:eb:2e:f1:81:58:db:fa:1d:2f:79:ea: 9e:83:c5:26:88:76:cb:c3:16:41:ea:a2:81:40:dc:35:70:1b: 16:64:25:02:5c:9c:fa:13:b9:a7:58:0e:62:7f:2b:ae:e6:09: 8f:1d:3d:92:30:26:4e:60:d3:14:2b:66:52:1b:7e:51:85:3b: f5:26:10:9d:91:d0:34:7b:cd:6b:da:e0:e7:e3:2a:54:b9:8b: bc:ba:46:6c:fa:25:df:db:74:50:89:8c:4c:bf:05:87:93:ea: a0:f6:c7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiXmEb5RjMFJ4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk MTc1OGYwYTQtNzYwNS00YTExLTkyN2EtMGI1NjE3MTdhMDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0/AcL+IRlJByed3loEW0sitm8b+0E6FlLs8 Dj1OWJjipMzzKkIqwv0Cm4Dgceb1Cfs0Mgj09Kbs9atzpynDpFvt13zqPuc+OxcD 5jaT/92gcurKjsKvis29VAR/qYsKdowoqkHFr1kyZ86a6mkXGwV9HRCCJviqnx0f GqoMd2sv93LnxcjHCNigN5pWMh+2RTsQwCqeqsb4Ib1O+07yUyg8cQYTkf0bc0RQ hOk318xxpXBKxU5TAvJsG9V7uLWDSZoAKUCFT6guQ3pPHSzOTcKuuDDBR9e6EKPn 3L1vFPNu/ssf3bSzKBqFPNMVge6N9YSnpkuAKWe/hKwygyCWiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjlGzyW7EFLPSiVsqrBGhMwCI9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODA0NjQyYjgtNzdmZS0z ODgyLTliNDctODJlMWE0NjAzMDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA29UhAZMkQBp0tydWOpAfygOXc8diolTiGQEDFan6if3L4sTP7s7AES cJJ5Es8TK/2ht+iEbXCI5n/t+sAlzb8HNmZ/oVE4f+dxitRSSV4V7U0BUERtdpaH vz/OMQUpPpJk+Bn8GXUgn7DWpEQplGWgcPvuR8ZrEpeGucGK41U4ITQVLHAO7CEa O0kGBBoEJ+PgsJhPDoXrLvGBWNv6HS956p6DxSaIdsvDFkHqooFA3DVwGxZkJQJc nPoTuadYDmJ/K67mCY8dPZIwJk5g0xQrZlIbflGFO/UmEJ2R0DR7zWva4OfjKlS5 i7y6Rmz6Jd/bdFCJjEy/BYeT6qD2x5Q= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:17 2025 by rpki-client