$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa File: a76314ae-59f4-3476-b766-0a9d1e2f435c.roa (raw, json) Hash identifier: QPdhFs202tfv7qN1mFIvyBOWKz6eKKuHTgam3RJSwyQ= Subject key identifier: B2:84:17:EB:ED:9C:91:15:F1:92:E3:CC:DE:88:88:9D:12:21:46:84 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE495A16A2E7435E971D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:49:5a:16:a2:e7:43:5e:97:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=de7b6c14-613b-4b0a-97ec-c09828559511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:27:5e:96:85:0f:2a:98:6a:ef:ed:50:68:ae: 84:a5:7d:b0:57:c4:71:68:39:67:90:8f:f7:f8:9e: 03:88:c4:7c:ce:9c:75:55:79:1f:a8:6b:a9:ae:95: 0c:72:b2:ae:73:68:30:42:9d:5f:cb:e2:f9:7f:91: 58:bb:f7:fc:bd:dd:61:11:c1:a5:0a:d4:30:cc:0f: 1a:18:7b:dd:ca:b0:ba:8f:81:a2:60:22:e8:5e:bc: 81:ae:70:55:a2:37:14:54:8e:cd:c0:92:20:ec:2d: 66:e5:6b:64:29:ea:80:d4:8a:74:bb:97:52:e1:8a: 05:58:bd:06:7f:bd:80:06:c8:db:d9:51:9a:23:75: af:05:cf:f4:a7:82:50:74:fe:ac:48:ac:4f:e5:1e: 06:35:d7:be:f0:5d:73:01:ed:81:25:5a:1a:85:5b: 4d:24:3b:e7:34:5b:3d:47:06:00:94:7e:e3:c5:35: 22:0a:78:fa:96:98:20:44:b9:f4:62:54:86:b6:95: 3b:de:9e:3d:61:46:72:f7:0b:59:08:f1:15:3d:3d: 0f:be:6f:e5:fc:95:99:75:83:9b:36:2f:94:b7:8e: 71:d0:8f:db:93:d9:d2:a3:4d:ef:c0:b8:c8:66:a2: 78:0f:eb:d0:fc:d6:b3:19:1e:4d:63:31:75:8c:47: b0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:84:17:EB:ED:9C:91:15:F1:92:E3:CC:DE:88:88:9D:12:21:46:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:16:64:21:d8:a4:05:88:c2:b5:72:e3:f1:b1:7d:0b:65:f9: 90:bb:62:58:a7:b4:58:94:63:13:43:25:d1:ac:bb:34:f7:f7: a3:f2:45:5b:e0:6b:a9:4c:bd:27:db:60:c3:65:35:ea:9d:7b: 6f:42:f9:6d:06:3b:3e:de:78:52:67:9b:40:5d:39:25:22:eb: 09:e1:2e:37:c7:60:97:fd:f9:f2:18:7b:f9:4a:23:32:54:30: d0:94:6d:0b:5c:a3:c6:90:4b:19:1b:d0:23:ef:60:b6:10:05: fe:a1:a3:f3:ee:bd:b5:7d:d0:03:d9:69:3c:df:2c:7b:a0:89: 30:74:45:63:5b:5a:e3:cf:9d:71:6f:03:7a:56:d3:52:58:4a: ff:69:37:0f:e4:44:af:b0:66:c4:8d:c0:1b:cf:1d:9d:b1:bb: 67:40:95:ed:f9:e3:3a:59:82:33:b7:a4:64:ab:45:97:99:ee: f7:63:1d:e1:fd:b6:2d:bc:56:b3:74:44:99:ae:a6:44:6f:15: e6:a7:ce:c7:94:a3:2f:78:c6:6d:bd:fc:c2:59:9a:7c:60:79: f5:11:88:d4:f3:26:cf:70:c9:19:c5:80:41:d3:42:67:82:c3: 6c:ad:ce:7e:ed:25:0c:c0:7e:b7:76:78:43:7b:1a:ac:d7:9b: aa:90:a5:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzklaFqLnQ16XHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGU3YjZjMTQtNjEzYi00YjBhLTk3ZWMtYzA5ODI4NTU5NTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApydeloUPKphq7+1QaK6EpX2wV8RxaDlnkI/3 +J4DiMR8zpx1VXkfqGuprpUMcrKuc2gwQp1fy+L5f5FYu/f8vd1hEcGlCtQwzA8a GHvdyrC6j4GiYCLoXryBrnBVojcUVI7NwJIg7C1m5WtkKeqA1Ip0u5dS4YoFWL0G f72ABsjb2VGaI3WvBc/0p4JQdP6sSKxP5R4GNde+8F1zAe2BJVoahVtNJDvnNFs9 RwYAlH7jxTUiCnj6lpggRLn0YlSGtpU73p49YUZy9wtZCPEVPT0Pvm/l/JWZdYOb Ni+Ut45x0I/bk9nSo03vwLjIZqJ4D+vQ/NazGR5NYzF1jEewmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKEF+vtnJEV8ZLjzN6IiJ0SIUaEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTc2MzE0YWUtNTlmNC0z NDc2LWI3NjYtMGE5ZDFlMmY0MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQWZCHYpAWIwrVy4/GxfQtl+ZC7YlintFiUYxNDJdGsuzT396PyRVvg a6lMvSfbYMNlNeqde29C+W0GOz7eeFJnm0BdOSUi6wnhLjfHYJf9+fIYe/lKIzJU MNCUbQtco8aQSxkb0CPvYLYQBf6ho/PuvbV90APZaTzfLHugiTB0RWNbWuPPnXFv A3pW01JYSv9pNw/kRK+wZsSNwBvPHZ2xu2dAle354zpZgjO3pGSrRZeZ7vdjHeH9 ti28VrN0RJmupkRvFeanzseUoy94xm29/MJZmnxgefURiNTzJs9wyRnFgEHTQmeC w2ytzn7tJQzAfrd2eEN7GqzXm6qQpSA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:53 2025 by rpki-client