$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa File: c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa (raw, json) Hash identifier: NiNGUBMy27olWq0Eapfsmy1hUWZAuQc/7on7dTltHlM= Subject key identifier: 39:A2:AC:2B:89:4F:7A:D4:E9:08:3B:8A:CB:18:C6:2E:ED:46:0E:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620225BBBF9A9DB298BCD440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.20.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:25:bb:bf:9a:9d:b2:98:bc:d4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=d52c3c66-220c-4946-9b69-f26eda2860c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c5:11:f6:0e:ed:1f:3d:26:5d:52:a8:56:d2: 40:35:dd:8d:87:f3:77:60:0c:28:5b:35:34:20:23: 57:88:29:20:8c:28:22:cc:fe:43:9d:8c:14:76:ec: 41:4b:63:69:30:ec:93:45:d7:3f:1b:40:9c:b6:81: b0:26:82:92:34:7a:c2:be:3b:93:22:79:25:41:94: d2:52:c2:71:af:0c:f6:08:c5:5e:e7:02:19:33:57: 55:f6:b2:ee:b7:04:ba:b6:fc:53:bf:49:b4:ed:79: 00:7a:87:35:54:a5:25:d0:70:fc:80:87:57:56:6b: 75:8d:0e:b0:47:a9:95:7a:d2:c0:ce:4f:2a:4d:e0: 53:9e:3c:57:a3:9f:c1:68:78:8f:65:d5:d9:91:be: 24:e7:f7:13:69:8c:15:e6:82:91:3b:19:2d:5e:49: f0:3b:9f:77:a7:c4:06:7e:13:9e:62:7d:73:7c:4d: 80:ae:65:b8:5f:98:61:28:8c:23:52:1e:30:77:23: fe:c0:0b:f7:db:ad:8a:fd:2d:7c:dd:10:1d:a0:ae: 5c:aa:41:3a:ad:34:41:5b:cc:46:6e:66:27:75:d5: f0:cf:40:54:20:34:0f:f9:ab:3d:72:e9:79:f5:94: 25:74:4a:f3:86:12:8c:b1:d3:71:ea:d9:d7:94:95: 32:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A2:AC:2B:89:4F:7A:D4:E9:08:3B:8A:CB:18:C6:2E:ED:46:0E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c3434302-79ee-3bd7-aaf6-27b69f2b02e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:47:b5:d2:64:67:ea:9e:28:4b:c7:d3:2a:eb:9a:20:2e:d8: 65:64:7d:bf:90:bf:66:7a:78:f5:b3:d9:8d:73:04:ba:4f:c3: 4d:bb:19:77:ed:9c:5b:2b:91:35:16:61:60:22:c6:10:fa:dc: 97:f1:2f:cf:c4:e6:a4:63:54:53:2b:2f:d9:f1:d2:9d:c1:d5: 5b:f4:16:15:6c:37:8c:ce:1a:b4:c2:27:29:49:8d:3d:02:1e: 6f:e4:53:92:66:70:66:ac:b2:a4:5c:bc:cf:0c:cf:78:7b:c1: b4:b5:a5:8e:05:50:93:82:e9:df:d1:68:b6:84:3c:b6:74:75: 3e:0d:3a:77:bd:0e:bb:36:cf:18:5f:14:43:57:8d:9c:98:d0: cf:1f:c5:4a:8d:91:5d:4c:00:07:7f:79:18:82:1b:02:0c:ba: 3e:c0:60:8c:e1:d6:98:1d:10:69:a7:b5:f4:7c:cc:39:56:18: 52:ac:cf:71:c9:04:64:a3:d2:7e:bb:ed:3e:01:30:0c:be:b0: 6c:1c:b2:f8:ef:ce:ae:70:a7:de:62:b4:32:a3:84:bb:25:d9: 10:f5:bf:64:2a:a0:a2:ec:26:b1:91:e6:40:1c:d7:63:2c:1c: 04:03:dc:c0:9a:ae:99:62:bc:e2:97:bd:09:eb:c1:48:3b:a4: 45:1b:1b:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiW7v5qdspi81EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZDUyYzNjNjYtMjIwYy00OTQ2LTliNjktZjI2ZWRhMjg2MGM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8UR9g7tHz0mXVKoVtJANd2Nh/N3YAwoWzU0 ICNXiCkgjCgizP5DnYwUduxBS2NpMOyTRdc/G0CctoGwJoKSNHrCvjuTInklQZTS UsJxrwz2CMVe5wIZM1dV9rLutwS6tvxTv0m07XkAeoc1VKUl0HD8gIdXVmt1jQ6w R6mVetLAzk8qTeBTnjxXo5/BaHiPZdXZkb4k5/cTaYwV5oKROxktXknwO593p8QG fhOeYn1zfE2ArmW4X5hhKIwjUh4wdyP+wAv3262K/S183RAdoK5cqkE6rTRBW8xG bmYnddXwz0BUIDQP+as9cul59ZQldErzhhKMsdNx6tnXlJUytwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmirCuJT3rU6Qg7issYxi7tRg5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzM0MzQzMDItNzllZS0z YmQ3LWFhZjYtMjdiNjlmMmIwMmUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRTGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJHtdJkZ+qeKEvH0yrrmiAu2GVkfb+Qv2Z6ePWz2Y1zBLpPw027GXft nFsrkTUWYWAixhD63JfxL8/E5qRjVFMrL9nx0p3B1Vv0FhVsN4zOGrTCJylJjT0C Hm/kU5JmcGassqRcvM8Mz3h7wbS1pY4FUJOC6d/RaLaEPLZ0dT4NOne9Drs2zxhf FENXjZyY0M8fxUqNkV1MAAd/eRiCGwIMuj7AYIzh1pgdEGmntfR8zDlWGFKsz3HJ BGSj0n677T4BMAy+sGwcsvjvzq5wp95itDKjhLsl2RD1v2QqoKLsJrGR5kAc12Ms HAQD3MCarplivOKXvQnrwUg7pEUbG0Q= -----END CERTIFICATE-----Generated at Sat Oct 11 02:42:54 2025 by rpki-client