$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa File: bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa (raw, json) Hash identifier: i3v+N67ON8e6G1f2D0kK29qn6GwiYQFJ8dOZAK2Zqls= Subject key identifier: C2:AE:CF:76:78:37:B3:4D:D2:25:AB:19:1B:94:2C:08:49:BB:18:A5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC7F567D16DFD130EE4140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:7f:56:7d:16:df:d1:30:ee:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ae7cf4c4-c51e-4257-b830-b820745728f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:fc:ed:c5:53:00:a5:e7:35:03:b7:9b:c1:ef: 6f:dc:0b:9b:c8:86:43:da:8c:4a:2d:e9:0a:f6:80: bf:33:b6:00:47:e9:a3:3d:9d:8f:83:2c:4f:59:28: 0d:28:93:49:a2:a6:4c:2d:15:d9:35:3c:5e:83:e3: 29:b1:1b:67:09:79:b4:01:06:8a:a8:ae:ca:63:7c: 7f:1a:a5:49:65:8b:22:2c:93:90:86:50:d0:b4:26: dd:86:33:32:99:e1:7a:40:87:b3:09:e3:9c:1d:b2: f8:11:8b:6f:ec:e8:5e:15:18:c6:bf:d5:12:65:db: 0f:02:e7:4b:9e:58:47:c0:53:ef:08:3b:c1:75:0c: 3e:00:d9:72:4d:08:17:41:c9:95:d6:93:25:f5:48: db:9f:10:9e:04:a9:b2:7e:31:8b:a4:21:06:36:b0: 36:af:5f:46:1c:41:3d:3d:91:6d:9b:c0:9d:d2:0d: 0d:e4:e1:f9:52:e0:02:64:91:f6:51:ee:f9:5a:c7: 03:50:99:eb:4e:ff:af:12:9c:0b:68:91:b8:08:ee: be:db:cb:4e:07:19:c1:61:1e:a3:ab:15:48:b2:86: da:d8:c6:90:29:4b:2b:59:18:46:52:ce:de:89:8b: 79:ce:0a:13:c4:41:27:c4:25:37:44:28:b3:20:41: f3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:AE:CF:76:78:37:B3:4D:D2:25:AB:19:1B:94:2C:08:49:BB:18:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bae82f37-608b-3f2e-b0e4-c00ad7106a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:a5:19:21:07:4b:4f:60:19:96:1c:c8:9e:27:ff:7b:33:35: d9:d3:91:ed:03:81:37:24:d0:e0:1c:07:71:ab:46:0a:a2:7a: 66:12:a6:a1:dc:d9:a9:9f:8f:d7:fb:9d:6d:0a:38:3d:33:96: 22:36:8e:2b:13:77:49:f2:24:5d:6a:d4:db:b4:a3:33:73:ab: 13:25:c8:e3:99:4b:64:7b:b6:36:98:73:2a:f0:01:59:ae:b9: 73:ff:f5:fa:17:8d:2e:da:66:36:7b:9f:43:2b:10:0e:b4:be: 61:3b:26:62:de:81:93:23:d9:90:d7:de:84:c3:99:23:a0:0c: 26:76:a7:81:78:99:28:a5:f9:85:7c:2b:25:5a:65:5c:ab:77: d8:8a:14:c4:58:33:a4:70:42:a6:08:39:ce:eb:91:d4:fb:18: 13:bb:ca:15:24:17:3a:66:b7:4b:91:70:92:4f:1b:7d:0e:28: 72:7c:31:31:bd:37:29:f5:ea:b9:0e:6e:e8:7c:0f:69:9c:bb: 93:d8:77:f3:8a:4c:37:de:69:d3:27:ea:1d:75:82:14:16:fd: ac:d4:b8:94:e2:7c:aa:91:6f:33:a9:04:9a:06:80:47:c6:35: 4b:4a:4b:d2:e7:8f:40:85:4e:1b:a8:6d:2d:9b:ad:d1:0d:99: 52:94:7f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzH9WfRbf0TDuQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWU3Y2Y0YzQtYzUxZS00MjU3LWI4MzAtYjgyMDc0NTcyOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfztxVMApec1A7ebwe9v3AubyIZD2oxKLekK 9oC/M7YAR+mjPZ2PgyxPWSgNKJNJoqZMLRXZNTxeg+MpsRtnCXm0AQaKqK7KY3x/ GqVJZYsiLJOQhlDQtCbdhjMymeF6QIezCeOcHbL4EYtv7OheFRjGv9USZdsPAudL nlhHwFPvCDvBdQw+ANlyTQgXQcmV1pMl9UjbnxCeBKmyfjGLpCEGNrA2r19GHEE9 PZFtm8Cd0g0N5OH5UuACZJH2Ue75WscDUJnrTv+vEpwLaJG4CO6+28tOBxnBYR6j qxVIsoba2MaQKUsrWRhGUs7eiYt5zgoTxEEnxCU3RCizIEHzPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKuz3Z4N7NN0iWrGRuULAhJuxilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmFlODJmMzctNjA4Yi0z ZjJlLWIwZTQtYzAwYWQ3MTA2YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFalGSEHS09gGZYcyJ4n/3szNdnTke0DgTck0OAcB3GrRgqiemYSpqHc 2amfj9f7nW0KOD0zliI2jisTd0nyJF1q1Nu0ozNzqxMlyOOZS2R7tjaYcyrwAVmu uXP/9foXjS7aZjZ7n0MrEA60vmE7JmLegZMj2ZDX3oTDmSOgDCZ2p4F4mSil+YV8 KyVaZVyrd9iKFMRYM6RwQqYIOc7rkdT7GBO7yhUkFzpmt0uRcJJPG30OKHJ8MTG9 Nyn16rkObuh8D2mcu5PYd/OKTDfeadMn6h11ghQW/azUuJTifKqRbzOpBJoGgEfG NUtKS9Lnj0CFThuobS2brdENmVKUf70= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:25 2025 by rpki-client