$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b73aebfa-938e-3aa4-ac5d-06ca012de8d3.roa File: b73aebfa-938e-3aa4-ac5d-06ca012de8d3.roa (raw, json) Hash identifier: NOfSRYdTObxVjBkMimewpo288MMepcNu4rAOnl3pjyY= Subject key identifier: 15:E5:C7:B3:CC:1E:C0:7D:94:11:19:86:96:53:C4:2F:80:65:AF:69 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B1D9C34432E45E617BB6E0DA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b73aebfa-938e-3aa4-ac5d-06ca012de8d3.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 173.20.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:34:43:2e:45:e6:17:bb:6e:0d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=43838b4d-4ccf-4092-be40-252cbc8b94a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:6c:cc:80:4d:0c:a3:f7:06:3e:ba:78:5b:13: 01:81:e0:a7:28:95:1b:8d:58:1e:2f:b8:53:84:ef: 05:33:f6:56:3c:d2:9c:7b:30:59:6a:8a:b5:7b:09: 92:a7:77:f1:91:c8:e7:86:50:dd:27:05:13:3c:12: e3:d0:d0:bc:1e:cb:8a:c7:b8:dc:a7:8a:f6:3f:da: 5b:38:e6:28:85:ad:b3:68:0c:56:21:c8:52:2b:68: 48:53:e7:d3:82:e7:66:3f:db:02:4f:3b:1d:fc:a9: 8e:5d:48:57:fa:9c:80:34:64:ce:b3:62:5e:d5:8d: 86:6a:28:cd:48:b8:e8:36:ac:3e:ae:5a:26:f0:7b: 83:f1:e6:fb:f6:78:6c:e9:c4:4f:49:0b:61:4e:88: 66:78:65:c2:d0:4e:cf:b5:1e:5d:4b:ff:49:d4:a2: 36:72:b6:64:2d:ed:73:52:dd:56:00:11:b3:41:21: f4:9d:04:d1:39:24:9c:ef:7b:a4:5a:65:3a:b0:62: f0:64:4c:93:b9:9a:1b:71:17:7b:ba:5e:e8:3d:d5: cf:b9:14:27:e1:76:08:24:20:30:19:7c:a8:f2:94: 68:5d:b6:e3:8f:c0:a7:27:d3:01:42:f6:7a:1f:f5: 0f:02:30:50:db:3c:1c:fe:6c:67:62:d9:b9:66:9b: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E5:C7:B3:CC:1E:C0:7D:94:11:19:86:96:53:C4:2F:80:65:AF:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b73aebfa-938e-3aa4-ac5d-06ca012de8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:b9:a6:10:f8:7d:ae:2f:b7:9d:ba:fd:15:82:04:11:f1:32: 78:a4:15:42:c2:e1:a6:5a:c1:27:32:39:24:f1:1a:bf:64:6d: e8:2d:71:a2:f6:ab:db:cb:3d:de:63:7d:d0:c0:40:3b:9e:36: ba:3b:3b:50:a7:d4:d3:49:80:33:ee:e4:43:47:12:6e:fe:32: 99:6e:db:67:cb:20:0c:bc:37:25:26:07:19:8f:f3:a8:10:d2: 0a:35:49:3c:bc:4e:f8:fb:96:70:d2:83:6c:54:db:0e:32:60: f4:36:d6:53:63:9e:50:fc:06:ba:d7:bc:b0:81:4c:34:38:8b: aa:41:29:2d:32:55:1c:8d:0f:c2:22:45:45:3c:44:44:e8:1f: 27:83:ce:ea:e9:28:ef:97:d2:e3:d3:69:ed:79:16:55:61:8e: f5:47:47:56:b0:ff:1a:d8:49:58:91:12:44:fd:a6:d9:02:d4: 96:91:f5:e6:aa:f3:ad:54:96:21:df:aa:79:f6:f7:b9:43:8f: 50:be:d0:f0:22:56:54:20:7c:ff:24:8b:6c:e9:8e:de:6d:b0: 5c:d0:6d:3c:09:86:c2:f8:a4:f4:8f:c4:e0:10:f8:9d:2c:08: c0:b6:75:1f:36:a9:04:60:64:bb:f6:05:e8:97:a2:80:50:27: 57:18:5e:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDRDLkXmF7tuDaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NDM4MzhiNGQtNGNjZi00MDkyLWJlNDAtMjUyY2JjOGI5NGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2zMgE0Mo/cGPrp4WxMBgeCnKJUbjVgeL7hT hO8FM/ZWPNKcezBZaoq1ewmSp3fxkcjnhlDdJwUTPBLj0NC8HsuKx7jcp4r2P9pb OOYoha2zaAxWIchSK2hIU+fTgudmP9sCTzsd/KmOXUhX+pyANGTOs2Je1Y2GaijN SLjoNqw+rlom8HuD8eb79nhs6cRPSQthTohmeGXC0E7PtR5dS/9J1KI2crZkLe1z Ut1WABGzQSH0nQTROSSc73ukWmU6sGLwZEyTuZobcRd7ul7oPdXPuRQn4XYIJCAw GXyo8pRoXbbjj8CnJ9MBQvZ6H/UPAjBQ2zwc/mxnYtm5ZpvSTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXlx7PMHsB9lBEZhpZTxC+AZa9pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjczYWViZmEtOTM4ZS0z YWE0LWFjNWQtMDZjYTAxMmRlOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEG5phD4fa4vt526/RWCBBHxMnikFULC4aZawScyOSTxGr9kbegtcaL2 q9vLPd5jfdDAQDueNro7O1Cn1NNJgDPu5ENHEm7+Mplu22fLIAy8NyUmBxmP86gQ 0go1STy8Tvj7lnDSg2xU2w4yYPQ21lNjnlD8BrrXvLCBTDQ4i6pBKS0yVRyND8Ii RUU8REToHyeDzurpKO+X0uPTae15FlVhjvVHR1aw/xrYSViREkT9ptkC1JaR9eaq 861UliHfqnn297lDj1C+0PAiVlQgfP8ki2zpjt5tsFzQbTwJhsL4pPSPxOAQ+J0s CMC2dR82qQRgZLv2BeiXooBQJ1cYXtM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:49 2025 by rpki-client