$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bab0bed9-2800-39cf-b644-026ef9100aee.roa File: bab0bed9-2800-39cf-b644-026ef9100aee.roa (raw, json) Hash identifier: tP8BA5dbBkRK0lBc308DMgSnrVRWnGnYxqYE/oL8PBs= Subject key identifier: 4E:B2:F3:0E:92:7B:42:A0:71:F6:FD:D6:B9:12:55:00:4E:98:16:64 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B2066E0F56E2910C3C18B1B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bab0bed9-2800-39cf-b644-026ef9100aee.roa Signing time: Mon 08 Sep 2025 13:00:41 +0000 ROA not before: Mon 08 Sep 2025 13:00:41 +0000 ROA not after: Sun 07 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 173.20.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:20:66:e0:f5:6e:29:10:c3:c1:8b:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 8 13:00:41 2025 GMT Not After : Dec 7 14:00:41 2025 GMT Subject: CN=fb19d3ad-2e1c-457a-b729-ee4ddad965d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:92:1a:ee:2e:c7:72:73:e4:a8:0f:de:35: da:6c:57:3a:93:63:37:ea:70:f3:d3:52:53:5e:dd: f1:9a:32:6a:1d:85:81:91:a4:bc:12:84:ea:3d:b8: 11:f4:96:2b:8a:49:f9:7f:2d:e1:d5:34:20:ab:75: a9:6e:b8:56:d0:7d:7b:6c:87:65:34:5d:85:92:06: 20:49:3b:6c:18:0a:b0:72:bc:7b:e0:b9:f9:b7:48: 5a:2c:7f:26:2a:35:44:ab:70:35:d2:b1:7c:38:1b: 50:c8:ad:d6:c7:61:5a:ba:7b:ce:69:7d:bc:68:93: 2a:74:52:00:5f:84:1a:c0:20:84:d0:44:3a:2b:b9: b1:7f:6f:c4:89:e7:6e:4f:1b:0f:db:93:8e:5e:37: 44:cd:f4:3a:c7:90:73:08:3f:2a:23:44:f5:e9:1c: 84:d4:3a:6e:de:36:e4:71:d7:c1:e4:d1:42:c9:58: 3f:ba:e9:c3:43:52:05:db:2a:f4:1b:53:50:ab:98: ba:ca:85:e1:a0:16:2e:18:e3:e8:83:99:9a:6f:77: 7a:8b:f3:77:a5:37:ae:79:3b:ae:3f:56:14:af:eb: b3:44:55:dc:e2:cf:5e:0b:9f:c6:3c:e4:c6:2d:fc: 11:48:c4:c2:62:9e:54:4c:63:1f:47:37:3e:14:7f: 7b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B2:F3:0E:92:7B:42:A0:71:F6:FD:D6:B9:12:55:00:4E:98:16:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bab0bed9-2800-39cf-b644-026ef9100aee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:e6:ca:a9:99:70:10:7b:b2:28:4f:62:54:9e:3a:e9:5b:58: f4:0d:52:75:24:42:51:92:b6:f3:18:10:59:fc:08:b9:a1:b2: 07:cc:fb:1a:ed:c0:a3:3c:70:ad:dd:ba:2d:3b:f7:ac:6a:c5: 70:7c:20:c1:34:29:a0:40:27:fc:3e:d8:2f:ea:84:aa:a2:0d: 24:ef:b3:aa:66:15:b5:ad:c8:5b:da:95:7e:b4:b9:a8:f7:73: 17:31:ad:13:e1:c8:90:b6:62:cb:0b:43:38:eb:f4:23:59:3a: 10:ec:fd:0b:7a:47:6d:29:8a:a3:9f:4b:93:6c:e6:d0:db:12: 11:71:b9:d0:4b:48:71:57:85:c2:07:70:46:32:7c:a2:ff:2f: 42:ee:09:01:13:65:8e:ea:16:b2:79:b1:13:cf:60:45:bc:a5: 7e:de:0b:0b:73:0a:eb:52:8e:e3:c2:2e:b8:c1:10:f4:75:54: 2f:8a:f5:fc:f3:6d:5e:00:8a:a8:40:6f:46:f3:b2:d0:58:b8: 2b:d3:0f:da:cc:41:c2:1e:b1:c1:6f:3c:14:ba:93:f2:37:a9: ed:d0:3b:9d:39:ff:c5:9b:7c:c2:7f:dd:ca:a0:d6:6a:ac:ec: e0:99:4e:90:cc:6f:08:a3:eb:21:cf:ff:83:bd:30:d8:e7:3b: de:87:a7:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsgZuD1bikQw8GLG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwODEzMDA0MVoXDTI1MTIwNzE0MDA0MVowLzEtMCsGA1UEAxMk ZmIxOWQzYWQtMmUxYy00NTdhLWI3MjktZWU0ZGRhZDk2NWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe2SGu4ux3Jz5KgP3jXabFc6k2M36nDz01JT Xt3xmjJqHYWBkaS8EoTqPbgR9JYrikn5fy3h1TQgq3WpbrhW0H17bIdlNF2FkgYg STtsGAqwcrx74Ln5t0haLH8mKjVEq3A10rF8OBtQyK3Wx2FaunvOaX28aJMqdFIA X4QawCCE0EQ6K7mxf2/EieduTxsP25OOXjdEzfQ6x5BzCD8qI0T16RyE1Dpu3jbk cdfB5NFCyVg/uunDQ1IF2yr0G1NQq5i6yoXhoBYuGOPog5mab3d6i/N3pTeueTuu P1YUr+uzRFXc4s9eC5/GPOTGLfwRSMTCYp5UTGMfRzc+FH97QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6y8w6Se0Kgcfb91rkSVQBOmBZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFiMGJlZDktMjgwMC0z OWNmLWI2NDQtMDI2ZWY5MTAwYWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnmyqmZcBB7sihPYlSeOulbWPQNUnUkQlGStvMYEFn8CLmhsgfM+xrt wKM8cK3dui0796xqxXB8IME0KaBAJ/w+2C/qhKqiDSTvs6pmFbWtyFvalX60uaj3 cxcxrRPhyJC2YssLQzjr9CNZOhDs/Qt6R20piqOfS5Ns5tDbEhFxudBLSHFXhcIH cEYyfKL/L0LuCQETZY7qFrJ5sRPPYEW8pX7eCwtzCutSjuPCLrjBEPR1VC+K9fzz bV4AiqhAb0bzstBYuCvTD9rMQcIescFvPBS6k/I3qe3QO505/8WbfMJ/3cqg1mqs 7OCZTpDMbwij6yHP/4O9MNjnO96Hp1Q= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:45 2025 by rpki-client