$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa File: ca678994-138f-3640-a31c-0c61ce87c7a5.roa (raw, json) Hash identifier: hUYtgO83IhyZgRdW43//PRvD9ynsTi7Vsjeul1+wt0E= Subject key identifier: 31:4F:4B:6D:20:CF:BF:62:DA:42:8D:DD:BE:E6:56:82:09:31:6E:F6 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797403B4AC2EF064A7CDF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.12.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:40:3b:4a:c2:ef:06:4a:7c:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3055909d-9795-419d-abbd-b02218bc51f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:a2:c2:09:e3:ae:2d:0a:c3:ca:ab:57:48:92: 54:27:b4:37:7c:82:71:d1:51:02:82:e4:0f:c7:71: 4e:40:69:01:0a:cb:1c:06:0e:64:6f:ee:f8:de:29: a5:73:bf:87:98:dd:d8:d5:1a:6f:35:f4:b4:c2:ba: 15:53:d8:c6:b9:9a:35:d4:25:c4:96:25:e9:86:91: 37:2a:e6:34:97:d4:0a:9f:82:6a:72:7b:8d:f1:98: 7c:ac:03:b9:b7:97:49:35:ba:e1:27:96:7a:a7:69: 54:b9:15:e9:6e:35:b3:67:52:cd:a6:bf:8c:48:68: 00:8d:49:31:02:bd:42:82:79:11:c4:bb:26:3e:c6: 7b:52:9b:4c:f2:1b:b6:ba:14:87:03:c4:18:fd:a4: a5:f9:54:65:7c:2b:ee:d9:37:17:78:a5:4f:b0:e8: 37:ec:21:6f:7c:65:76:d4:79:19:d7:a9:12:07:be: e3:74:8d:c2:3f:55:15:87:54:82:df:e2:a9:76:68: a3:44:3f:19:22:19:5c:9c:5e:bf:09:3d:9a:b1:d5: 93:23:71:33:1b:b2:5a:1f:76:5f:85:d5:e5:68:d6: 52:4c:e6:4c:94:b9:a2:fa:a4:f7:29:87:cb:08:35: b6:b8:7d:1a:29:90:b2:65:18:02:13:70:4d:e1:b2: 1e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:4F:4B:6D:20:CF:BF:62:DA:42:8D:DD:BE:E6:56:82:09:31:6E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca678994-138f-3640-a31c-0c61ce87c7a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.12.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:67:8c:60:8d:e7:55:1e:ad:41:88:8c:15:ca:29:df:44:c3: 17:0c:91:3b:66:f7:d9:a0:db:5b:18:9e:a5:70:f1:41:9e:1c: c9:71:a5:55:0c:67:a7:3e:ba:69:fd:a7:6a:79:45:95:e5:92: d4:5e:1f:4b:b7:4d:d8:1c:c2:9b:cf:b0:a9:91:ea:0b:a8:32: 07:b7:93:a3:dc:a1:d0:f2:09:e0:ce:4d:1d:bc:a0:70:a5:89: a4:c0:eb:6c:a6:77:d2:b9:1c:26:b9:28:a1:df:33:5e:3d:46: 81:30:01:9c:c7:7e:59:c7:ad:6d:fa:2e:a3:bb:58:b5:c8:38: 3d:ce:80:71:3a:d9:7c:7a:ac:ac:ce:42:66:75:ba:3e:f5:8c: b8:24:13:2e:11:a1:56:26:65:d6:fe:65:3b:05:d0:6c:13:42: af:a3:7e:f2:54:2c:84:ee:9e:93:a7:0f:68:1d:b8:2c:69:f2: 47:ae:f7:ca:68:d9:ec:3d:80:da:b8:bd:b7:4d:55:2b:c5:1c: 66:bf:5b:de:35:ca:3c:1b:56:40:7c:1a:8c:68:0d:14:83:ae: e7:29:f1:82:a4:7f:49:1c:ae:fe:ee:1a:7e:37:3e:ef:a8:6c: c7:78:91:ee:95:8a:1f:27:82:d4:cc:75:55:9e:c6:44:e6:bf: 61:90:56:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl0A7SsLvBkp834AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzA1NTkwOWQtOTc5NS00MTlkLWFiYmQtYjAyMjE4YmM1MWY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaLCCeOuLQrDyqtXSJJUJ7Q3fIJx0VECguQP x3FOQGkBCsscBg5kb+743imlc7+HmN3Y1RpvNfS0wroVU9jGuZo11CXEliXphpE3 KuY0l9QKn4JqcnuN8Zh8rAO5t5dJNbrhJ5Z6p2lUuRXpbjWzZ1LNpr+MSGgAjUkx Ar1CgnkRxLsmPsZ7UptM8hu2uhSHA8QY/aSl+VRlfCvu2TcXeKVPsOg37CFvfGV2 1HkZ16kSB77jdI3CP1UVh1SC3+KpdmijRD8ZIhlcnF6/CT2asdWTI3EzG7JaH3Zf hdXlaNZSTOZMlLmi+qT3KYfLCDW2uH0aKZCyZRgCE3BN4bIe4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFPS20gz79i2kKN3b7mVoIJMW72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E2Nzg5OTQtMTM4Zi0z NjQwLWEzMWMtMGM2MWNlODdjN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVnjGCN51UerUGIjBXKKd9EwxcMkTtm99mg21sYnqVw8UGeHMlxpVUM Z6c+umn9p2p5RZXlktReH0u3TdgcwpvPsKmR6guoMge3k6PcodDyCeDOTR28oHCl iaTA62ymd9K5HCa5KKHfM149RoEwAZzHflnHrW36LqO7WLXIOD3OgHE62Xx6rKzO QmZ1uj71jLgkEy4RoVYmZdb+ZTsF0GwTQq+jfvJULITunpOnD2gduCxp8keu98po 2ew9gNq4vbdNVSvFHGa/W941yjwbVkB8GoxoDRSDrucp8YKkf0kcrv7uGn43Pu+o bMd4ke6Vih8ngtTMdVWexkTmv2GQVlI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:49 2025 by rpki-client