$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81394e3f-62ee-3bde-955e-fa07c5e7b81c.roa File: 81394e3f-62ee-3bde-955e-fa07c5e7b81c.roa (raw, json) Hash identifier: Q3QHQRQSv4rVvCOQxqiy72K8+qAO19YQpNKlnLY/Qck= Subject key identifier: 2E:C3:DD:F8:D3:F9:2E:D5:D3:89:5B:12:D9:EC:25:2D:84:A3:BE:7B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73D1EA2F88A435A75CFC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81394e3f-62ee-3bde-955e-fa07c5e7b81c.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.96.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3d:1e:a2:f8:8a:43:5a:75:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=cba591c9-ad0c-4cd8-84a6-aa913f7e92d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a2:fa:da:f7:79:4a:ac:06:75:ab:86:0a:35: 1a:64:89:45:38:ee:a9:34:b6:ae:14:e5:bd:0b:14: 25:a1:83:8e:39:0b:56:a9:51:e6:5b:a4:a3:3c:22: 83:f0:2b:f8:d2:95:38:81:ba:70:9c:90:aa:ca:bd: 2a:71:67:ca:a3:9d:d3:ff:7e:f6:2f:b1:74:a3:66: bd:51:61:bb:fc:f8:9f:06:4c:44:74:d5:a6:8a:f6: 76:65:ea:51:4a:0b:8a:3e:5e:c7:5f:d6:4e:30:a2: c3:e5:2f:8e:da:8a:2c:e0:fc:b8:81:4a:4f:02:c2: 1b:11:42:b4:a7:ec:f3:f1:8b:3f:e0:35:9b:16:2a: c2:be:00:d9:d1:e1:f6:66:ee:94:1c:4f:ee:86:ab: 46:3b:c8:9c:dd:1f:b5:54:bf:91:55:aa:57:96:f7: 0f:08:dd:16:3b:38:9e:1e:32:d7:17:75:0f:90:76: 7d:8f:0b:44:9a:73:3f:47:d2:31:4b:2b:6d:51:b9: f5:83:13:03:77:72:b5:40:ca:0d:53:ab:cd:d8:aa: 80:d7:99:5c:9c:71:73:58:34:99:2d:ee:30:a2:04: 57:9e:c9:13:d9:40:62:f4:05:f8:b9:96:e6:0a:64: d6:a1:64:66:28:7b:80:ee:eb:18:c8:76:21:38:55: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:C3:DD:F8:D3:F9:2E:D5:D3:89:5B:12:D9:EC:25:2D:84:A3:BE:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/81394e3f-62ee-3bde-955e-fa07c5e7b81c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.96.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ee:7d:3f:0a:d3:12:e0:24:e7:a5:a2:98:34:41:b6:48:7b: 98:91:0b:df:f6:b0:de:9b:ff:b1:97:db:77:18:d7:86:1b:d1: e9:9c:03:ba:7e:fd:c1:1e:56:13:19:2f:a3:bb:d3:76:c3:83: 6d:1e:b8:3f:97:56:72:be:ab:10:9e:54:d3:66:7b:6b:31:24: d0:7c:83:71:48:97:44:de:70:c0:5b:c9:c7:4e:33:db:a6:1f: a7:00:3c:bb:22:1c:47:94:5a:49:3d:14:3c:22:bd:d0:d9:3c: 68:83:d3:4b:91:bb:1f:19:72:0e:c5:25:15:29:14:a9:30:a2: c2:70:87:ef:bb:07:d5:78:83:24:57:d2:3d:a8:24:11:10:67: 12:d8:39:4f:63:55:59:0e:85:52:8f:2e:ee:92:6a:01:5e:3b: 9b:f7:05:94:a1:00:5e:2e:6c:de:ee:4e:7b:3f:b5:98:52:56: a8:9e:43:ee:53:ea:71:88:27:4e:a0:71:d8:f7:de:40:09:85: 0e:29:4a:42:0c:66:cc:8b:0e:56:24:b6:e8:f3:0d:8a:fe:42: 48:01:82:04:3f:fd:54:9a:55:32:40:9a:96:dd:25:d5:b3:2b: 23:63:ea:5d:c5:dd:6f:2d:4d:49:e6:b4:c2:8e:04:8e:0d:5e: a7:f2:db:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1z0eoviKQ1p1z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk Y2JhNTkxYzktYWQwYy00Y2Q4LTg0YTYtYWE5MTNmN2U5MmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaL62vd5SqwGdauGCjUaZIlFOO6pNLauFOW9 CxQloYOOOQtWqVHmW6SjPCKD8Cv40pU4gbpwnJCqyr0qcWfKo53T/372L7F0o2a9 UWG7/PifBkxEdNWmivZ2ZepRSguKPl7HX9ZOMKLD5S+O2oos4Py4gUpPAsIbEUK0 p+zz8Ys/4DWbFirCvgDZ0eH2Zu6UHE/uhqtGO8ic3R+1VL+RVapXlvcPCN0WOzie HjLXF3UPkHZ9jwtEmnM/R9IxSyttUbn1gxMDd3K1QMoNU6vN2KqA15lcnHFzWDSZ Le4wogRXnskT2UBi9AX4uZbmCmTWoWRmKHuA7usYyHYhOFWkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC7D3fjT+S7V04lbEtnsJS2Eo757MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODEzOTRlM2YtNjJlZS0z YmRlLTk1NWUtZmEwN2M1ZTdiODFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvufT8K0xLgJOelopg0QbZIe5iRC9/2sN6b/7GX23cY14Yb0emcA7p+ /cEeVhMZL6O703bDg20euD+XVnK+qxCeVNNme2sxJNB8g3FIl0TecMBbycdOM9um H6cAPLsiHEeUWkk9FDwivdDZPGiD00uRux8Zcg7FJRUpFKkwosJwh++7B9V4gyRX 0j2oJBEQZxLYOU9jVVkOhVKPLu6SagFeO5v3BZShAF4ubN7uTns/tZhSVqieQ+5T 6nGIJ06gcdj33kAJhQ4pSkIMZsyLDlYktujzDYr+QkgBggQ//VSaVTJAmpbdJdWz KyNj6l3F3W8tTUnmtMKOBI4NXqfy22w= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:47 2025 by rpki-client