$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b40c9a13-013a-3d8f-b84c-da231aeff18f.roa File: b40c9a13-013a-3d8f-b84c-da231aeff18f.roa (raw, json) Hash identifier: w+XpSbgZ/mlMzZ2sKoNlhaF7IQn3wKXm6m3UIYzlMxE= Subject key identifier: B7:85:09:E4:86:71:3D:62:CB:8E:7B:E3:A9:60:6E:6E:31:13:F0:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B26CA1926E2EE6C1B4D905680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b40c9a13-013a-3d8f-b84c-da231aeff18f.roa Signing time: Wed 10 Sep 2025 19:55:37 +0000 ROA not before: Wed 10 Sep 2025 19:55:37 +0000 ROA not after: Tue 09 Dec 2025 20:55:37 +0000 asID: 19905 IP address blocks: 173.20.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:ca:19:26:e2:ee:6c:1b:4d:90:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 19:55:37 2025 GMT Not After : Dec 9 20:55:37 2025 GMT Subject: CN=d773d2a4-4bdc-40a0-b6b0-2de246ac1cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:25:43:d6:e0:e0:29:04:0b:6e:9e:69:f7:c1: 29:9d:56:60:ba:3c:e3:31:b6:47:e1:eb:ff:dd:71: f3:c2:8d:c8:d4:63:a9:7e:94:44:df:38:74:9b:0f: 78:71:71:57:96:22:eb:47:22:11:d7:95:d4:82:bd: 8d:ed:9a:3d:ad:ea:2b:e1:73:6f:d0:ad:20:dc:0a: 76:d5:45:7d:9e:e4:62:9f:85:9b:14:17:b8:fa:5a: 37:3d:c2:da:d4:c9:69:ac:4d:7d:c6:8b:cc:f0:84: 99:eb:95:21:2e:91:2b:9e:cb:60:84:a6:fc:c7:10: 45:1c:eb:57:4d:c9:08:18:b3:c2:81:40:3c:1b:1c: 2b:6c:56:11:48:7a:fa:3a:6b:3b:40:ff:06:07:05: 2c:fa:93:95:5a:25:71:6c:8f:6f:26:e7:8b:c7:26: 88:82:e0:a6:2b:b4:95:54:90:31:3f:ce:cc:e9:bb: f7:6e:f3:61:3f:e1:8f:80:55:33:f6:0b:dd:37:ed: 47:d6:96:52:2e:d9:83:e3:fd:ca:bf:84:d0:0a:ff: b3:84:46:cc:16:a5:d9:94:6f:ba:0a:d9:11:82:42: 35:c0:c5:ce:af:06:47:c6:be:a0:39:8b:5a:ff:16: 50:86:a7:c9:24:c9:1a:04:77:7f:96:dc:43:97:09: 02:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:85:09:E4:86:71:3D:62:CB:8E:7B:E3:A9:60:6E:6E:31:13:F0:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b40c9a13-013a-3d8f-b84c-da231aeff18f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:9d:2d:22:71:f6:a4:c2:d2:67:ef:86:6e:7d:59:b4:50:58: 9c:c4:1b:18:4c:9b:4e:9a:36:3e:45:09:4e:9d:ec:2a:f8:fd: d0:f5:c5:65:be:06:1e:16:75:58:9e:09:3b:f8:53:a9:92:ba: 07:e8:4c:2c:43:79:03:00:1a:fd:ad:64:1a:d1:7d:3c:7e:e9: 42:2d:e7:49:0b:d9:b5:45:46:c3:ae:75:97:94:13:53:b2:ea: e7:42:90:d2:35:cc:8e:e2:8f:8b:85:d2:e3:1e:90:b1:bd:98: 27:5a:6f:e4:6b:29:58:64:67:c7:87:1b:87:b3:9c:0e:11:d1: af:30:0d:06:c7:05:02:a3:d2:ec:3a:c9:25:a4:5d:ea:29:42: a5:72:32:1c:29:96:94:cb:46:33:bf:49:4e:c1:39:17:15:3d: 44:bd:42:e6:94:ec:36:38:0b:03:11:da:10:4f:10:95:97:96: 66:61:72:3c:7c:85:89:64:a7:30:ae:54:41:24:f8:de:55:5d: 04:56:1f:77:00:6a:be:ff:b6:5f:e8:b6:e6:f9:e2:c3:72:e7: 15:c8:6b:16:c8:d3:bb:29:a6:ea:b9:b5:39:c0:b0:54:90:75: 7b:ab:94:4e:a7:29:ef:ce:f6:58:98:e5:fa:ac:e8:d1:22:45: 04:99:91:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmyhkm4u5sG02QVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxMDE5NTUzN1oXDTI1MTIwOTIwNTUzN1owLzEtMCsGA1UEAxMk ZDc3M2QyYTQtNGJkYy00MGEwLWI2YjAtMmRlMjQ2YWMxY2Y0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iVD1uDgKQQLbp5p98EpnVZgujzjMbZH4ev/ 3XHzwo3I1GOpfpRE3zh0mw94cXFXliLrRyIR15XUgr2N7Zo9reor4XNv0K0g3Ap2 1UV9nuRin4WbFBe4+lo3PcLa1MlprE19xovM8ISZ65UhLpErnstghKb8xxBFHOtX TckIGLPCgUA8GxwrbFYRSHr6Oms7QP8GBwUs+pOVWiVxbI9vJueLxyaIguCmK7SV VJAxP87M6bv3bvNhP+GPgFUz9gvdN+1H1pZSLtmD4/3Kv4TQCv+zhEbMFqXZlG+6 CtkRgkI1wMXOrwZHxr6gOYta/xZQhqfJJMkaBHd/ltxDlwkCNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLeFCeSGcT1iy45746lgbm4xE/A+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjQwYzlhMTMtMDEzYS0z ZDhmLWI4NGMtZGEyMzFhZWZmMThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqdLSJx9qTC0mfvhm59WbRQWJzEGxhMm06aNj5FCU6d7Cr4/dD1xWW+ Bh4WdVieCTv4U6mSugfoTCxDeQMAGv2tZBrRfTx+6UIt50kL2bVFRsOudZeUE1Oy 6udCkNI1zI7ij4uF0uMekLG9mCdab+RrKVhkZ8eHG4eznA4R0a8wDQbHBQKj0uw6 ySWkXeopQqVyMhwplpTLRjO/SU7BORcVPUS9QuaU7DY4CwMR2hBPEJWXlmZhcjx8 hYlkpzCuVEEk+N5VXQRWH3cAar7/tl/otub54sNy5xXIaxbI07sppuq5tTnAsFSQ dXurlE6nKe/O9liY5fqs6NEiRQSZkcM= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:44 2025 by rpki-client