$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa File: 88821259-86eb-3f8e-9596-d8278bba51aa.roa (raw, json) Hash identifier: vHA8nn+vbtFTm0o1wmGfjgaiOe4+RNYiONKsF3/jwKU= Subject key identifier: 31:9A:4C:53:A0:D1:0D:31:17:37:E1:48:F2:D4:94:29:20:A8:93:2D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B434CAE329B7CCA678241A200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.212.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ae:32:9b:7c:ca:67:82:41:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=516bbb0d-1635-4d83-9705-f16a07c32063 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:5a:3a:16:7b:94:49:dd:79:e8:43:68:1f:a8: 8c:66:77:c6:c8:0f:93:66:cc:b7:bb:db:da:c6:4a: 95:22:6d:0a:7b:d7:ec:42:6e:68:4f:a3:84:67:75: 01:88:07:ed:5d:6a:14:2b:aa:19:ad:18:d4:1e:26: 10:10:1b:64:6d:9f:d6:fa:79:dc:24:8f:b5:1b:8b: 1f:b9:95:a4:11:88:b2:7e:1c:4d:cb:6f:d5:3d:31: 86:78:e1:0d:9b:ec:4e:07:0a:bc:10:d2:ec:ab:83: 55:68:0f:43:d6:0b:98:6a:a5:88:27:70:9d:28:33: be:a3:a9:6d:45:86:2c:d1:9c:d6:1c:86:84:01:51: 78:f4:36:61:cb:94:e1:02:2f:92:63:9d:3c:4e:ae: 0f:f1:61:43:be:c5:61:73:97:d8:2f:5c:a6:e9:6d: d5:db:bc:c1:58:a5:d0:02:4e:dd:2c:a8:1b:f3:71: 3d:10:a8:c4:25:ab:b8:e5:49:d9:79:c8:d9:bc:24: 01:bc:f7:d9:44:84:08:3e:96:f4:a4:7d:36:f7:57: 16:ba:83:62:9c:1c:ea:3c:a3:b7:97:f8:5b:ac:ed: f1:16:db:c9:9d:ac:a8:37:4f:8d:80:91:44:74:c3: bb:79:06:40:9a:e7:ed:66:19:39:6d:a4:dd:e7:20: 6b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:9A:4C:53:A0:D1:0D:31:17:37:E1:48:F2:D4:94:29:20:A8:93:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/88821259-86eb-3f8e-9596-d8278bba51aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:10:e2:35:af:c2:85:64:fe:74:db:ae:0c:eb:fe:18:1a:50: bc:dd:1d:22:5b:27:8d:7a:44:03:a2:d7:c3:b1:08:dc:24:81: 51:50:6b:5d:e8:2a:ff:a5:e5:56:cd:ae:b2:a5:09:ad:81:14: 73:f4:26:e3:bd:53:ea:cf:0a:a9:de:57:88:a7:75:8a:48:40: ba:cb:c4:e9:48:ad:8e:73:e5:4d:e0:4a:03:30:3c:1f:6a:87: 20:3b:bc:08:4d:65:06:58:85:db:00:d0:7b:e4:55:2a:7e:92: ae:21:29:b1:2d:b5:5d:17:82:73:5b:61:fb:c5:63:5b:01:38: 91:e5:35:76:40:91:17:84:cc:52:1a:ee:64:10:07:ea:28:20: 38:2b:8d:1a:e8:12:da:51:a6:56:4c:e2:dc:08:e0:bd:9b:65: 6b:ad:83:93:5e:53:0a:7b:62:fa:a7:c5:70:b5:cb:10:a7:c9: d4:8b:5a:74:6e:ae:f1:3f:cd:0e:57:4e:87:bc:6c:6a:60:25: 29:4e:49:64:d7:c4:ce:35:77:d6:15:6b:79:c7:f2:0c:da:c9: f7:31:d9:e6:35:0c:a2:97:13:0c:82:ef:80:b7:3a:1f:25:8c: c5:93:29:2e:e7:62:43:53:8d:91:23:c0:cf:35:29:19:80:22: 4f:01:db:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK4ym3zKZ4JBogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NTE2YmJiMGQtMTYzNS00ZDgzLTk3MDUtZjE2YTA3YzMyMDYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVo6FnuUSd156ENoH6iMZnfGyA+TZsy3u9va xkqVIm0Ke9fsQm5oT6OEZ3UBiAftXWoUK6oZrRjUHiYQEBtkbZ/W+nncJI+1G4sf uZWkEYiyfhxNy2/VPTGGeOENm+xOBwq8ENLsq4NVaA9D1guYaqWIJ3CdKDO+o6lt RYYs0ZzWHIaEAVF49DZhy5ThAi+SY508Tq4P8WFDvsVhc5fYL1ym6W3V27zBWKXQ Ak7dLKgb83E9EKjEJau45UnZecjZvCQBvPfZRIQIPpb0pH0291cWuoNinBzqPKO3 l/hbrO3xFtvJnayoN0+NgJFEdMO7eQZAmuftZhk5baTd5yBrnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGaTFOg0Q0xFzfhSPLUlCkgqJMtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODg4MjEyNTktODZlYi0z ZjhlLTk1OTYtZDgyNzhiYmE1MWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgQ4jWvwoVk/nTbrgzr/hgaULzdHSJbJ416RAOi18OxCNwkgVFQa13o Kv+l5VbNrrKlCa2BFHP0JuO9U+rPCqneV4indYpIQLrLxOlIrY5z5U3gSgMwPB9q hyA7vAhNZQZYhdsA0HvkVSp+kq4hKbEttV0XgnNbYfvFY1sBOJHlNXZAkReEzFIa 7mQQB+ooIDgrjRroEtpRplZM4twI4L2bZWutg5NeUwp7YvqnxXC1yxCnydSLWnRu rvE/zQ5XToe8bGpgJSlOSWTXxM41d9YVa3nH8gzayfcx2eY1DKKXEwyC74C3Oh8l jMWTKS7nYkNTjZEjwM81KRmAIk8B2wI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:10 2025 by rpki-client