$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa File: d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa (raw, json) Hash identifier: +Lx2svkgVmF50bzkCYcfg0bErgKbx77389+fWT18pAc= Subject key identifier: 38:48:9B:B3:14:3A:FD:FE:BC:0A:69:52:7A:EB:AB:E0:D6:E2:14:E7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79CA51A328490652E53707C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa Signing time: Fri 10 Oct 2025 13:28:09 +0000 ROA not before: Fri 10 Oct 2025 13:28:09 +0000 ROA not after: Thu 08 Jan 2026 14:28:09 +0000 asID: 19905 IP address blocks: 173.20.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:ca:51:a3:28:49:06:52:e5:37:07:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:28:09 2025 GMT Not After : Jan 8 14:28:09 2026 GMT Subject: CN=d3ec6e83-b564-4230-ad22-b3ed73357875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:75:4e:9e:9a:e4:27:8f:2a:c4:82:93:2a: c8:2d:47:a1:76:90:f0:13:e9:4e:49:0c:a5:fe:d2: 33:31:a9:79:ae:f5:31:00:b0:45:6d:29:be:ac:35: 26:1d:a3:df:fa:4f:d8:38:8a:fb:84:3a:25:08:6e: 79:d0:3b:dc:b7:8c:2a:0b:6c:55:7a:eb:eb:a5:75: f4:80:b8:a1:e1:43:6d:d5:f4:d2:fe:5e:df:7a:6c: 7d:20:32:bb:dd:30:51:c5:12:6a:c2:3e:74:1f:92: e3:7e:2d:bb:fe:35:42:9a:69:1f:8c:72:01:9e:b8: 13:45:e6:b1:27:f3:b7:8d:13:4d:49:de:c4:b1:5b: c2:91:7b:49:11:17:64:58:e5:e3:21:81:cb:83:7f: f8:c0:ac:88:65:ac:a9:4b:6f:78:1e:4b:97:aa:c5: 87:ab:dd:81:f3:98:fb:e4:81:97:48:89:7c:4e:ad: a3:27:38:52:e1:5e:0d:3f:c1:13:2a:b8:74:fb:0c: 29:a5:3c:76:0b:fa:95:b6:aa:93:6f:9f:2e:09:9f: 7f:e6:07:59:d7:c3:75:c1:eb:df:85:05:66:55:d5: 5a:1e:b2:58:4f:c4:f4:46:d4:72:a6:4d:b6:73:a8: da:fb:1c:59:87:48:cc:8f:25:bd:ce:8c:62:de:be: 3c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:48:9B:B3:14:3A:FD:FE:BC:0A:69:52:7A:EB:AB:E0:D6:E2:14:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d0aa70b3-f3d5-36f7-8a9b-88cad79fb5d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:91:a5:50:0a:5e:ac:58:8f:84:de:ec:a6:95:9b:e7:db:24: 78:23:89:d4:08:1f:27:25:bf:19:74:16:68:1f:ca:ac:fa:dc: 99:68:01:e8:43:04:56:95:23:7e:f8:2b:e8:0e:ba:6a:af:2c: 61:e8:3f:73:3f:fa:e5:47:2d:1c:72:e0:45:53:bc:43:5f:af: 4a:fd:af:9e:20:7e:96:9d:17:04:f6:07:48:c0:54:d0:fc:2b: 5f:dd:c4:37:4e:03:2f:05:a6:fe:af:2f:24:06:0e:2d:84:30: ce:c6:ec:55:1e:85:9f:10:a4:8f:a0:15:3e:e1:e3:47:16:37: 3e:9c:53:79:db:bc:5c:48:c9:eb:61:c5:2c:df:f9:a4:82:d2: 00:04:14:fd:f6:de:95:06:93:a2:32:33:da:52:52:4a:01:47: a7:5c:48:33:d9:31:93:62:d1:89:c0:83:26:77:bb:c1:f5:3e: 66:94:6f:7d:8b:cf:ed:ba:fe:8d:ca:40:f9:f6:f6:a9:77:16: 57:39:5e:6e:59:69:6a:6f:fa:a4:42:95:0b:b9:c8:9e:15:43: 01:04:f7:a1:50:bd:a6:4c:04:a9:63:8a:19:69:8e:d6:29:b8: 4d:69:3a:0b:40:c0:71:76:41:00:7b:8b:67:05:16:5d:1d:0c: a6:2e:f1:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5ylGjKEkGUuU3B8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMjgwOVoXDTI2MDEwODE0MjgwOVowLzEtMCsGA1UEAxMk ZDNlYzZlODMtYjU2NC00MjMwLWFkMjItYjNlZDczMzU3ODc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6B1Tp6a5CePKsSCkyrILUehdpDwE+lOSQyl /tIzMal5rvUxALBFbSm+rDUmHaPf+k/YOIr7hDolCG550Dvct4wqC2xVeuvrpXX0 gLih4UNt1fTS/l7femx9IDK73TBRxRJqwj50H5Ljfi27/jVCmmkfjHIBnrgTReax J/O3jRNNSd7EsVvCkXtJERdkWOXjIYHLg3/4wKyIZaypS294HkuXqsWHq92B85j7 5IGXSIl8Tq2jJzhS4V4NP8ETKrh0+wwppTx2C/qVtqqTb58uCZ9/5gdZ18N1wevf hQVmVdVaHrJYT8T0RtRypk22c6ja+xxZh0jMjyW9zoxi3r48OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhIm7MUOv3+vAppUnrrq+DW4hTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDBhYTcwYjMtZjNkNS0z NmY3LThhOWItODhjYWQ3OWZiNWQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFORpVAKXqxYj4Te7KaVm+fbJHgjidQIHyclvxl0Fmgfyqz63JloAehD BFaVI374K+gOumqvLGHoP3M/+uVHLRxy4EVTvENfr0r9r54gfpadFwT2B0jAVND8 K1/dxDdOAy8Fpv6vLyQGDi2EMM7G7FUehZ8QpI+gFT7h40cWNz6cU3nbvFxIyeth xSzf+aSC0gAEFP323pUGk6IyM9pSUkoBR6dcSDPZMZNi0YnAgyZ3u8H1PmaUb32L z+26/o3KQPn29ql3Flc5Xm5ZaWpv+qRClQu5yJ4VQwEE96FQvaZMBKljihlpjtYp uE1pOgtAwHF2QQB7i2cFFl0dDKYu8SA= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:42 2025 by rpki-client