$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c60f2806-a2a0-3863-9b42-326e0105ebfe.roa File: c60f2806-a2a0-3863-9b42-326e0105ebfe.roa (raw, json) Hash identifier: 4NlsVPcwWYzZRF3WGusC0e7rm6ixFj99nCgzHno1GiM= Subject key identifier: 5A:29:5B:51:C1:89:DB:92:86:A9:88:2E:64:85:2D:D5:B2:B7:99:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE53301D50A3D50FE38340 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c60f2806-a2a0-3863-9b42-326e0105ebfe.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:53:30:1d:50:a3:d5:0f:e3:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8dbf7104-0f17-4bfe-911a-608f3f0acc0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:ea:38:bc:a5:12:11:af:c5:a1:0e:90:14:28: c5:9b:4f:5c:5d:8c:1f:83:bb:f0:5c:c1:d3:ff:c1: b2:63:7f:82:0c:b1:d6:72:11:48:d7:99:a0:20:63: 06:87:37:c6:db:79:1c:37:01:a8:de:a0:f7:35:9e: 7b:47:b0:0a:e0:7e:ae:4d:1e:3e:1b:c5:57:b6:1f: 29:c4:dd:45:b3:26:53:92:be:5f:ec:1b:33:c5:8e: b6:9e:c8:1a:f6:cf:a7:6c:09:56:90:83:8e:3a:1a: e0:b0:b8:be:d3:08:b4:42:79:4e:db:89:76:f8:dd: 29:4b:f6:11:38:3e:0a:f1:e6:4f:d1:d6:59:f8:86: 45:5f:1c:20:b3:c0:52:94:28:27:b1:20:0c:0c:23: 96:77:56:f7:10:68:74:05:51:53:f1:7a:7a:96:8e: 0e:cf:51:db:e3:79:35:dc:c8:df:13:b6:00:41:59: 25:86:3d:2d:91:43:cf:b8:58:a9:dc:b2:23:dd:af: 9d:6e:dd:8e:51:7d:38:c2:b8:7e:77:9f:62:85:08: 7f:8e:7f:c5:c6:50:70:54:dc:cb:2d:5f:8c:b3:4d: 51:90:62:86:d1:63:cf:ce:f9:13:04:3b:ef:57:4f: 1d:36:12:06:59:b1:23:7c:80:9e:7e:a1:86:38:2c: 09:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:29:5B:51:C1:89:DB:92:86:A9:88:2E:64:85:2D:D5:B2:B7:99:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c60f2806-a2a0-3863-9b42-326e0105ebfe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:43:2d:cf:88:50:bd:cc:e6:92:69:e0:f0:f9:b2:0b:bf:52: 09:cc:c1:ec:70:87:1c:81:ce:02:53:ba:bd:06:87:c0:bc:54: ed:2c:4c:c9:6b:3c:1e:17:ca:75:1c:fb:ac:13:03:2b:aa:99: b0:df:45:2f:f4:63:02:44:d9:ed:c1:36:f9:51:8d:28:c6:d8: 9d:ad:69:e0:52:a3:83:04:47:7c:8d:e1:38:29:c7:7c:8a:01: ee:06:91:56:68:9f:7a:34:c6:fd:db:15:00:0e:7f:d7:6a:9f: 9a:9b:d0:e7:84:50:a6:7b:74:26:fb:11:2f:89:f7:93:61:3c: a2:6d:76:a4:af:91:b3:c0:56:7e:db:90:9d:81:8c:7f:44:9f: ab:bc:df:51:b6:71:5c:e4:0c:10:13:27:d1:aa:ab:db:5d:d1: 65:e5:85:ab:cb:3b:13:b7:da:b9:d3:43:28:37:4e:31:fe:7d: 6c:52:27:66:94:b2:43:d3:17:65:f9:76:8e:82:fe:53:74:b1: 26:31:a8:8b:89:8d:37:4c:b8:47:5b:9e:fc:e1:d7:c3:be:ff: 45:b5:4a:ad:0b:6f:d3:93:ea:66:89:17:6d:85:2f:9f:8c:b3: a0:24:79:eb:ea:3f:81:58:53:91:ec:93:59:94:a0:64:ba:87: a1:ee:06:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlMwHVCj1Q/jg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGRiZjcxMDQtMGYxNy00YmZlLTkxMWEtNjA4ZjNmMGFjYzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOo4vKUSEa/FoQ6QFCjFm09cXYwfg7vwXMHT /8GyY3+CDLHWchFI15mgIGMGhzfG23kcNwGo3qD3NZ57R7AK4H6uTR4+G8VXth8p xN1FsyZTkr5f7BszxY62nsga9s+nbAlWkIOOOhrgsLi+0wi0QnlO24l2+N0pS/YR OD4K8eZP0dZZ+IZFXxwgs8BSlCgnsSAMDCOWd1b3EGh0BVFT8Xp6lo4Oz1Hb43k1 3MjfE7YAQVklhj0tkUPPuFip3LIj3a+dbt2OUX04wrh+d59ihQh/jn/FxlBwVNzL LV+Ms01RkGKG0WPPzvkTBDvvV08dNhIGWbEjfICefqGGOCwJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFopW1HBiduShqmILmSFLdWyt5kCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzYwZjI4MDYtYTJhMC0z ODYzLTliNDItMzI2ZTAxMDVlYmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5DLc+IUL3M5pJp4PD5sgu/UgnMwexwhxyBzgJTur0Gh8C8VO0sTMlr PB4XynUc+6wTAyuqmbDfRS/0YwJE2e3BNvlRjSjG2J2taeBSo4MER3yN4Tgpx3yK Ae4GkVZon3o0xv3bFQAOf9dqn5qb0OeEUKZ7dCb7ES+J95NhPKJtdqSvkbPAVn7b kJ2BjH9En6u831G2cVzkDBATJ9Gqq9td0WXlhavLOxO32rnTQyg3TjH+fWxSJ2aU skPTF2X5do6C/lN0sSYxqIuJjTdMuEdbnvzh18O+/0W1Sq0Lb9OT6maJF22FL5+M s6AkeevqP4FYU5Hsk1mUoGS6h6HuBvY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:37 2025 by rpki-client