$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/916d8888-4891-3bd8-82bc-b94d42302312.roa File: 916d8888-4891-3bd8-82bc-b94d42302312.roa (raw, json) Hash identifier: kIQAiLjbQGfeiQSdwrRjga0K52SfKG4BMWkT4z95Fn0= Subject key identifier: 95:AC:DE:72:6C:BB:FB:09:6D:93:76:44:67:45:0C:20:4A:65:D1:30 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973C53A1489DBA5D629380 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/916d8888-4891-3bd8-82bc-b94d42302312.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.92.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:3c:53:a1:48:9d:ba:5d:62:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=42d87faf-c2e4-49b1-8215-f9e56d1f6eae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:91:70:ac:87:5d:8a:61:9d:30:5e:33:78:8b: bd:a6:e1:0b:0b:72:bd:37:9a:54:49:f2:01:e3:a0: cb:ab:1f:a4:8a:70:0d:89:ab:4b:97:09:81:a9:67: 7d:6d:a1:ad:2d:e2:f7:7f:25:b8:04:1e:30:db:7b: 25:62:ce:89:d6:3e:5f:4e:9d:1b:3d:21:04:4d:6d: 62:77:5b:bb:7f:92:1f:cd:f9:42:ac:1c:08:47:dc: a2:5a:7e:e6:6e:09:85:63:b4:88:bc:a8:15:79:1a: c0:9b:d8:e9:1f:88:0c:b6:c7:26:cb:c6:21:37:23: 08:d9:76:7a:79:31:08:5e:5e:5e:69:fb:ec:fb:a1: fc:5c:cb:a3:dd:fe:a0:d2:12:55:cf:b3:9c:78:1c: c0:81:28:94:b4:1f:fd:3b:c2:9b:4e:f7:77:9b:2b: 8f:50:fb:59:7c:93:80:1c:56:fa:cf:c0:e1:c3:0a: 06:97:bc:4e:dd:48:87:fc:f6:54:b6:5b:cf:3a:a3: 03:03:94:ac:bf:32:08:84:ed:91:8a:0a:fb:40:0d: 66:a4:24:75:37:b1:7a:b1:36:bc:9b:4e:3c:9d:d1: 7b:c8:9c:5a:b4:4f:d2:e9:e7:3e:6b:91:71:2c:97: 67:0c:71:af:9e:03:9a:31:c3:f2:da:93:c9:27:b2: ae:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AC:DE:72:6C:BB:FB:09:6D:93:76:44:67:45:0C:20:4A:65:D1:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/916d8888-4891-3bd8-82bc-b94d42302312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.92.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:6d:3e:7b:71:70:b6:c3:b7:46:e2:23:b8:29:0d:8d:c6:e4: 7e:a5:31:47:f4:8a:e7:95:a3:15:78:68:56:cf:f9:2d:49:50: 91:0b:40:41:bd:68:f5:d1:7d:52:15:3b:e1:8d:1e:ff:e3:ad: 21:09:54:24:c0:73:b4:50:c8:34:43:1f:e1:14:b1:df:a1:f3: 75:69:75:47:ad:1f:85:a3:42:f0:d6:1d:38:51:52:7c:b7:22: 44:12:a0:24:b6:0e:b3:5b:91:85:6f:68:85:a5:c0:2f:25:77: 92:c3:df:1c:1a:bd:bd:51:63:00:8a:53:19:02:56:de:48:54: 87:f5:ff:40:2a:a1:20:c0:b8:89:76:5e:aa:84:67:a0:8f:ef: 89:fc:c5:88:39:a0:68:b5:e6:16:93:9b:5b:cb:58:6d:cd:a5: b3:fe:46:d4:e8:57:bf:d7:c0:97:14:58:5a:f9:7d:78:63:02: 6f:f0:37:c8:79:fc:b7:de:fd:d6:b1:e5:32:c8:48:08:72:c4: 50:52:0e:7a:b4:92:83:80:16:e3:b3:fd:23:cd:44:53:2e:d2: 70:f1:35:ba:31:69:c2:bd:d8:2b:5c:5b:5b:4e:ef:81:e1:9f: 4a:c6:35:f4:93:d0:b7:a8:dc:36:bb:23:0e:4e:c7:3f:c2:41: 08:ea:b3:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzxToUidul1ik4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NDJkODdmYWYtYzJlNC00OWIxLTgyMTUtZjllNTZkMWY2ZWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15FwrIddimGdMF4zeIu9puELC3K9N5pUSfIB 46DLqx+kinANiatLlwmBqWd9baGtLeL3fyW4BB4w23slYs6J1j5fTp0bPSEETW1i d1u7f5IfzflCrBwIR9yiWn7mbgmFY7SIvKgVeRrAm9jpH4gMtscmy8YhNyMI2XZ6 eTEIXl5eafvs+6H8XMuj3f6g0hJVz7OceBzAgSiUtB/9O8KbTvd3myuPUPtZfJOA HFb6z8DhwwoGl7xO3UiH/PZUtlvPOqMDA5SsvzIIhO2Rigr7QA1mpCR1N7F6sTa8 m048ndF7yJxatE/S6ec+a5FxLJdnDHGvngOaMcPy2pPJJ7Ku1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWs3nJsu/sJbZN2RGdFDCBKZdEwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTE2ZDg4ODgtNDg5MS0z YmQ4LTgyYmMtYjk0ZDQyMzAyMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVtPntxcLbDt0biI7gpDY3G5H6lMUf0iueVoxV4aFbP+S1JUJELQEG9 aPXRfVIVO+GNHv/jrSEJVCTAc7RQyDRDH+EUsd+h83VpdUetH4WjQvDWHThRUny3 IkQSoCS2DrNbkYVvaIWlwC8ld5LD3xwavb1RYwCKUxkCVt5IVIf1/0AqoSDAuIl2 XqqEZ6CP74n8xYg5oGi15haTm1vLWG3NpbP+RtToV7/XwJcUWFr5fXhjAm/wN8h5 /Lfe/dax5TLISAhyxFBSDnq0koOAFuOz/SPNRFMu0nDxNboxacK92CtcW1tO74Hh n0rGNfST0Leo3Da7Iw5Oxz/CQQjqsxk= -----END CERTIFICATE-----Generated at Sat Oct 11 02:55:55 2025 by rpki-client