$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa File: d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa (raw, json) Hash identifier: sJXeKk4WWBRnM51hQXz9BJpPrIFKINTsBG/v9bbXlsM= Subject key identifier: 49:08:A5:6D:C2:E7:B7:83:A3:D1:63:31:79:94:F3:9A:27:F8:D2:D9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B67973875C05E6C9ACEF9DDA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:38:75:c0:5e:6c:9a:ce:f9:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=acb00872-e754-4033-862d-0197f56417d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9c:12:2d:e1:8e:fd:d1:17:99:c2:51:56:1d: 8f:0a:b4:c9:78:88:b4:fa:18:2b:e6:44:43:25:e3: ed:86:5b:fe:a3:89:97:41:8c:7b:53:51:47:45:77: 13:42:61:0c:01:42:9c:e0:55:15:88:db:08:65:67: bf:27:e9:60:55:7b:1d:38:da:ab:0f:65:88:52:52: bb:34:be:1c:07:f6:c7:84:94:78:a7:68:51:09:b0: fa:5b:66:55:ef:d0:8b:73:f9:c5:ad:9d:7c:80:78: d2:1f:54:59:f5:1c:f1:b8:c8:e0:4d:5e:e8:ed:c9: f4:92:61:ce:e6:11:0c:e6:6b:58:80:bc:b0:16:dc: 06:ea:3e:39:24:52:a8:63:b3:1f:a6:59:4b:a8:6a: 2d:25:68:43:d2:99:41:37:85:36:ec:01:a3:d3:26: 23:1f:3a:84:80:cc:b5:a7:38:50:5f:5b:96:db:8b: cd:6c:a1:c9:8e:c3:45:d7:38:7f:8b:2f:ec:28:bd: df:56:2f:5f:33:a0:eb:7d:3e:a4:d0:13:4f:5f:55: e5:8a:2e:88:39:0d:ca:c9:78:3c:4f:3f:7c:36:1b: 8a:da:01:cd:ad:25:11:1e:77:22:f2:d1:0f:90:11: 4d:e4:cc:7d:7a:b3:b8:30:a9:c9:84:51:31:24:b0: 4d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:08:A5:6D:C2:E7:B7:83:A3:D1:63:31:79:94:F3:9A:27:F8:D2:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4417c0f-ba6e-3ff2-90a5-291796854c9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f8:ff:ae:15:98:3a:1e:e0:35:24:96:04:ee:c6:ef:46:1f: b1:73:34:37:e4:45:e5:61:51:26:78:19:98:9d:8a:ac:96:13: 76:2b:60:e7:7d:26:38:ab:7e:da:32:73:31:0b:54:d9:63:ba: 20:24:5e:db:49:94:c9:58:4e:f2:d1:81:dd:67:92:e1:1e:39: 0c:9b:3f:1a:d8:92:5b:eb:49:1c:17:a0:7d:e5:54:f3:ed:1c: 74:a4:b4:28:9d:87:0b:7c:e2:11:26:6f:6a:cc:84:b9:f5:f2: 62:92:00:a2:fb:1c:4a:81:6a:ff:74:d1:5d:89:aa:3d:25:39: 56:84:33:b2:f0:a4:f3:11:05:71:e8:b5:60:a6:30:3f:7b:1e: dd:31:d7:05:90:81:2e:57:e2:61:ed:a3:93:77:d6:6e:5c:93: f2:8c:5a:64:f3:75:2c:a8:31:d0:d0:0e:34:ae:2d:5a:91:a0: 9e:85:04:fd:15:c5:8a:99:47:33:5f:2a:23:e4:27:99:de:25: fc:1e:43:05:c7:34:6b:18:43:36:78:a0:f5:3f:43:bd:42:8f: 55:66:7c:cd:79:81:1e:ac:0b:e2:89:b3:c8:0b:c3:94:c5:05: 47:eb:18:23:11:83:74:ed:13:40:aa:0e:c0:8a:ef:e6:49:ec: 06:3a:bf:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzh1wF5sms753aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk YWNiMDA4NzItZTc1NC00MDMzLTg2MmQtMDE5N2Y1NjQxN2Q0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZwSLeGO/dEXmcJRVh2PCrTJeIi0+hgr5kRD JePthlv+o4mXQYx7U1FHRXcTQmEMAUKc4FUViNsIZWe/J+lgVXsdONqrD2WIUlK7 NL4cB/bHhJR4p2hRCbD6W2ZV79CLc/nFrZ18gHjSH1RZ9RzxuMjgTV7o7cn0kmHO 5hEM5mtYgLywFtwG6j45JFKoY7MfpllLqGotJWhD0plBN4U27AGj0yYjHzqEgMy1 pzhQX1uW24vNbKHJjsNF1zh/iy/sKL3fVi9fM6DrfT6k0BNPX1Xlii6IOQ3KyXg8 Tz98NhuK2gHNrSURHnci8tEPkBFN5Mx9erO4MKnJhFExJLBNnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkIpW3C57eDo9FjMXmU85on+NLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ0MTdjMGYtYmE2ZS0z ZmYyLTkwYTUtMjkxNzk2ODU0YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRRNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf4/64VmDoe4DUklgTuxu9GH7FzNDfkReVhUSZ4GZidiqyWE3YrYOd9 JjirftoyczELVNljuiAkXttJlMlYTvLRgd1nkuEeOQybPxrYklvrSRwXoH3lVPPt HHSktCidhwt84hEmb2rMhLn18mKSAKL7HEqBav900V2Jqj0lOVaEM7LwpPMRBXHo tWCmMD97Ht0x1wWQgS5X4mHto5N31m5ck/KMWmTzdSyoMdDQDjSuLVqRoJ6FBP0V xYqZRzNfKiPkJ5neJfweQwXHNGsYQzZ4oPU/Q71Cj1VmfM15gR6sC+KJs8gLw5TF BUfrGCMRg3TtE0CqDsCK7+ZJ7AY6v0U= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:09 2025 by rpki-client