$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa File: c043170f-a250-3170-a4aa-5ad85a821236.roa (raw, json) Hash identifier: us6mW3EU5KAUK2gWu+IH5qSE/aO73YnXlet+wTR2otk= Subject key identifier: 8E:77:82:67:AE:75:6A:E1:D7:3B:F0:6C:5D:FC:5F:DF:E9:DE:EF:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC8A1FF2E63B3A996D45C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:8a:1f:f2:e6:3b:3a:99:6d:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=e86be99d-927d-43c9-87f0-a4255da50235 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0e:ad:1a:60:31:1c:6a:7d:97:17:4a:0a:08: d7:a8:ab:44:86:b1:1a:63:6b:ee:0f:a5:fe:9d:7f: 78:62:06:dc:3b:f5:c8:ec:87:54:f3:42:21:75:e3: 86:3a:fd:d1:e1:f0:2f:5d:28:9d:92:02:e5:3b:91: a1:09:1a:64:a7:6e:ba:72:1e:7c:de:3c:02:11:67: 44:0a:a3:37:71:80:9d:c1:ec:92:3a:e2:9e:83:98: 2e:91:a0:9c:cc:f9:a6:2d:89:e0:9a:b2:67:30:41: 92:bd:45:29:b1:83:1e:79:ed:b8:99:28:09:08:62: dd:95:77:2a:9b:19:6e:b2:0c:62:bf:17:cb:3b:4f: 43:18:79:7d:c0:f4:a0:22:05:23:07:5a:a5:6c:16: 95:d4:ce:f4:46:6b:f1:dc:41:cb:ed:b3:01:33:56: b7:2a:de:5f:7f:6b:cd:d8:6b:d1:7c:1b:48:b7:c5: ff:ca:81:81:81:33:14:e3:0d:87:23:90:37:24:04: bd:3a:cc:da:a0:a1:37:da:91:5a:63:3f:38:2c:40: f0:58:e5:05:fb:79:b9:16:6f:b4:cf:bc:65:86:58: e4:58:20:02:57:cc:b9:cf:3c:a8:be:27:0b:3b:f6: 6b:6c:b2:f5:3c:b0:9f:80:af:09:cd:72:8e:7c:90: a0:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:77:82:67:AE:75:6A:E1:D7:3B:F0:6C:5D:FC:5F:DF:E9:DE:EF:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c043170f-a250-3170-a4aa-5ad85a821236.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:97:da:84:b2:43:d5:58:f2:7c:89:1d:95:62:06:f0:32:b2: 49:40:73:ad:df:6b:fd:b8:c8:42:5e:b5:c3:53:f8:99:2e:d6: 3b:2a:29:43:d1:a5:96:dc:02:99:94:9e:04:46:58:b4:de:ce: e3:d5:54:69:50:a1:8e:df:9e:78:94:7c:f1:b2:5f:5b:a3:4e: 4b:3c:52:10:e8:5a:0a:e5:71:99:1e:71:96:65:dc:a4:23:db: b5:11:25:61:d9:42:2f:69:36:34:3f:93:80:7a:c9:12:ce:a3: 21:67:d5:7f:b0:e2:e8:d1:26:cc:39:ed:95:a4:85:6c:d2:39: e7:3b:8b:4e:7a:89:0a:ea:5a:f3:92:de:d8:46:2c:ed:9d:93: 36:a4:08:ef:ad:5c:c9:7b:8a:c0:57:ad:66:14:e9:9f:18:c7: f0:8a:a5:5a:75:3b:7b:70:d9:3c:61:e8:a9:3f:99:9c:d6:57: 6b:44:6c:75:af:b2:09:ec:f3:28:69:1b:38:d4:1c:89:6e:84: 83:c2:e4:e6:fd:f6:84:d8:70:a3:f1:67:5b:b9:d2:90:58:d4: 3f:32:c7:99:52:67:70:67:37:69:47:dc:2c:da:85:bd:31:4a: 87:6f:ff:02:d9:79:e0:64:95:81:d7:4e:6e:94:66:24:dd:12: 2e:11:63:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIof8uY7OpltRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZTg2YmU5OWQtOTI3ZC00M2M5LTg3ZjAtYTQyNTVkYTUwMjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA6tGmAxHGp9lxdKCgjXqKtEhrEaY2vuD6X+ nX94YgbcO/XI7IdU80IhdeOGOv3R4fAvXSidkgLlO5GhCRpkp266ch583jwCEWdE CqM3cYCdweySOuKeg5gukaCczPmmLYngmrJnMEGSvUUpsYMeee24mSgJCGLdlXcq mxlusgxivxfLO09DGHl9wPSgIgUjB1qlbBaV1M70Rmvx3EHL7bMBM1a3Kt5ff2vN 2GvRfBtIt8X/yoGBgTMU4w2HI5A3JAS9OszaoKE32pFaYz84LEDwWOUF+3m5Fm+0 z7xlhljkWCACV8y5zzyovicLO/ZrbLL1PLCfgK8JzXKOfJCg4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI53gmeudWrh1zvwbF38X9/p3u8NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzA0MzE3MGYtYTI1MC0z MTcwLWE0YWEtNWFkODVhODIxMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2X2oSyQ9VY8nyJHZViBvAysklAc63fa/24yEJetcNT+Jku1jsqKUPR pZbcApmUngRGWLTezuPVVGlQoY7fnniUfPGyX1ujTks8UhDoWgrlcZkecZZl3KQj 27URJWHZQi9pNjQ/k4B6yRLOoyFn1X+w4ujRJsw57ZWkhWzSOec7i056iQrqWvOS 3thGLO2dkzakCO+tXMl7isBXrWYU6Z8Yx/CKpVp1O3tw2Txh6Kk/mZzWV2tEbHWv sgns8yhpGzjUHIluhIPC5Ob99oTYcKPxZ1u50pBY1D8yx5lSZ3BnN2lH3Czahb0x Sodv/wLZeeBklYHXTm6UZiTdEi4RY00= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:16 2025 by rpki-client