$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa File: c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa (raw, json) Hash identifier: FgOVklMqQx2FgpkCktJn+oVRN71+R/Vs4xz1R6/KGuQ= Subject key identifier: 32:70:8D:1C:F6:E5:FB:47:DE:8E:F6:B2:60:40:18:15:D5:77:29:F2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB3A4F3B5CA3B73BE2C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b3:a4:f3:b5:ca:3b:73:be:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a46dadfc-906b-428a-b765-cb2667736376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:98:88:84:da:02:ff:2e:d1:e5:e8:f4:5a:06: a3:fa:46:e3:62:2d:a3:7d:41:06:78:2b:8c:6a:ef: 04:58:4e:12:41:db:7d:50:39:aa:5f:ef:32:99:de: d0:a1:60:0e:75:0b:59:6d:11:9a:38:f5:37:f7:1a: 25:45:6d:0a:fc:a9:25:63:02:8e:d6:9a:1a:2a:99: 68:f9:f6:00:19:9c:fa:85:7d:67:06:ac:d1:ea:c6: 90:41:74:c9:55:e3:6a:5e:63:c4:53:09:d0:a9:77: 56:53:e7:3c:9b:e6:48:83:8b:19:94:8a:fb:48:9d: c8:f8:f9:16:3b:f1:53:4b:37:6c:8c:58:9f:0b:e1: ac:bf:48:0b:23:cd:28:ff:cc:e6:89:98:6d:e4:d9: 1e:b0:89:c7:65:be:67:52:14:57:43:ab:ef:bb:94: 84:b9:60:96:16:0b:82:0f:e8:15:bf:2f:9d:9d:09: f4:7f:7f:66:c9:f0:01:ba:56:b7:20:35:7d:2a:91: 78:52:bb:89:e5:f2:82:e4:9b:ae:29:9e:9d:ca:c6: cc:95:87:58:4f:97:33:ed:9e:37:68:81:8f:ce:6f: ca:c3:97:c6:c2:63:bb:53:c2:b0:f6:8f:6e:30:10: 2d:22:e4:db:45:70:12:2f:ae:21:cd:56:6d:43:62: e3:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:70:8D:1C:F6:E5:FB:47:DE:8E:F6:B2:60:40:18:15:D5:77:29:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c9a32d2c-a3d9-3ee3-bf99-51eb175d0498.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:a0:1d:7e:95:5b:77:f1:21:80:3b:46:e8:a1:aa:f9:ac:49: dd:9b:21:94:e5:82:e6:e4:4e:7c:04:90:76:92:e6:35:d0:f5: b9:df:10:e9:7d:5a:ed:f9:77:60:ef:98:76:6a:d6:6d:24:ca: 11:0e:f8:9e:4e:9a:47:da:03:d7:ba:84:73:29:1a:0b:ed:a9: 79:96:50:4b:36:e4:18:8e:1d:81:b0:60:e9:2b:31:85:f0:03: bb:bc:05:db:74:e4:2d:83:f2:a4:ab:0d:8c:55:af:fa:bf:b7: de:6b:99:a3:fa:cd:83:7b:c0:f3:b5:32:a4:ed:83:89:ca:1d: 68:b2:46:42:5f:16:43:80:36:14:67:5d:d1:71:98:71:77:43: 7f:4e:08:63:12:ed:7f:b7:f0:98:cf:93:75:b4:4f:b8:1e:9e: f7:ee:3f:d6:59:08:56:56:b1:75:79:21:3a:4c:1f:28:3c:bd: b5:40:f1:df:9a:ad:a1:69:1b:e4:19:64:d7:a4:7f:27:cc:80: de:1f:11:e4:36:20:ab:66:9b:c7:98:c0:2b:e3:4d:81:32:3e: 72:d4:d6:ea:ad:a6:d7:cc:11:27:9a:cb:07:eb:10:50:91:eb: 22:3d:d2:9f:c9:d7:64:c7:06:7a:f8:76:3f:68:82:ca:52:77: 8e:84:9c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLOk87XKO3O+LAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTQ2ZGFkZmMtOTA2Yi00MjhhLWI3NjUtY2IyNjY3NzM2Mzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6piIhNoC/y7R5ej0Wgaj+kbjYi2jfUEGeCuM au8EWE4SQdt9UDmqX+8ymd7QoWAOdQtZbRGaOPU39xolRW0K/KklYwKO1poaKplo +fYAGZz6hX1nBqzR6saQQXTJVeNqXmPEUwnQqXdWU+c8m+ZIg4sZlIr7SJ3I+PkW O/FTSzdsjFifC+Gsv0gLI80o/8zmiZht5NkesInHZb5nUhRXQ6vvu5SEuWCWFguC D+gVvy+dnQn0f39myfABula3IDV9KpF4UruJ5fKC5JuuKZ6dysbMlYdYT5cz7Z43 aIGPzm/Kw5fGwmO7U8Kw9o9uMBAtIuTbRXASL64hzVZtQ2LjoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDJwjRz25ftH3o72smBAGBXVdynyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzlhMzJkMmMtYTNkOS0z ZWUzLWJmOTktNTFlYjE3NWQwNDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGygHX6VW3fxIYA7RuihqvmsSd2bIZTlgubkTnwEkHaS5jXQ9bnfEOl9 Wu35d2DvmHZq1m0kyhEO+J5OmkfaA9e6hHMpGgvtqXmWUEs25BiOHYGwYOkrMYXw A7u8Bdt05C2D8qSrDYxVr/q/t95rmaP6zYN7wPO1MqTtg4nKHWiyRkJfFkOANhRn XdFxmHF3Q39OCGMS7X+38JjPk3W0T7genvfuP9ZZCFZWsXV5ITpMHyg8vbVA8d+a raFpG+QZZNekfyfMgN4fEeQ2IKtmm8eYwCvjTYEyPnLU1uqtptfMESeaywfrEFCR 6yI90p/J12THBnr4dj9ogspSd46EnJE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:53 2025 by rpki-client