$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d68661e1-f7d3-31d8-af08-c6f1a4212fb6.roa File: d68661e1-f7d3-31d8-af08-c6f1a4212fb6.roa (raw, json) Hash identifier: 5jQkfFrSSWZh/8gAHnLewvH+0/Ixjy/hm8OH5EQKgX0= Subject key identifier: F4:DB:90:5A:1A:48:98:D4:EA:AE:DC:38:CE:C2:26:45:CF:EE:C7:91 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CC893307B4C6C03322D3D0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d68661e1-f7d3-31d8-af08-c6f1a4212fb6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:89:33:07:b4:c6:c0:33:22:d3:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=beaf5afd-61cc-49fc-8ff8-538ab42cfcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c2:64:5d:ce:05:1d:8d:65:9e:4b:cf:4d:51: 36:da:3f:b1:5a:78:68:26:fd:ea:79:f2:23:78:e7: 16:5d:94:e5:83:36:0b:4a:d1:1f:cd:11:5d:ce:77: 56:94:be:4b:55:09:fb:4f:ed:c0:b1:11:c2:33:67: 83:85:31:58:85:16:57:c1:2e:7f:cd:9e:28:cd:96: b4:d4:b0:25:65:7d:da:3a:e5:8e:ad:b1:90:76:01: d7:a5:a2:6f:47:0a:ef:a0:40:14:75:1c:3e:1e:45: 1e:c4:13:a1:8e:e1:54:ea:cc:91:dc:57:9d:bf:69: f7:8c:b4:f1:3b:65:2d:67:38:93:69:25:3f:2b:a5: 6a:9b:b6:30:b6:a2:fc:b4:b1:68:13:c5:56:9e:e6: 64:04:f0:97:63:a1:92:16:4a:60:f9:ed:43:71:6c: 54:d0:45:84:8c:29:0e:76:c6:8f:16:aa:9f:5b:84: 93:c8:af:f3:27:36:84:d8:db:11:92:55:59:47:f5: a1:53:1e:b5:c6:95:20:b8:80:f2:d7:6d:bc:4c:fb: 3c:c8:21:10:0c:da:aa:7e:91:b5:86:25:a8:cf:13: 71:9a:1c:92:22:52:51:c7:57:cd:c2:86:16:b0:85: 5e:42:fe:b7:67:38:70:ca:91:80:1a:69:be:97:d2: 10:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DB:90:5A:1A:48:98:D4:EA:AE:DC:38:CE:C2:26:45:CF:EE:C7:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d68661e1-f7d3-31d8-af08-c6f1a4212fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:5a:ff:94:27:e3:35:f4:8d:01:d9:08:c0:e7:bb:54:0b:11: 7b:8e:56:33:af:3e:de:a1:4b:64:96:a6:d0:84:5d:57:e2:01: e7:c0:da:0e:39:80:02:51:11:4b:1c:83:99:fe:05:21:7e:6c: 0a:dd:93:95:ed:2e:2d:13:8d:b3:66:d8:3c:fd:c9:a9:92:dd: a5:77:c4:29:95:21:d2:81:d0:fa:05:92:60:b6:c5:74:d3:b5: a1:e2:1a:91:a8:cc:ac:a1:f4:5e:6a:d7:9a:ad:20:b1:aa:f7: 13:e9:7d:6b:a0:76:0a:35:c2:ac:4f:ad:a0:e1:f7:6b:03:f7: 09:cd:bc:23:0f:a6:c8:60:2c:08:89:5a:50:cb:6e:f0:d7:66: 7b:83:9f:09:da:a1:57:89:04:8e:43:a6:06:1d:a7:80:46:c2: dd:5b:ad:ce:ec:89:36:29:8e:77:96:11:06:a5:fc:35:d8:67: 92:df:1a:0f:51:67:dc:f0:99:92:19:d4:52:53:26:0b:7e:68: ff:b0:d1:10:0d:29:d4:e2:c2:ec:c7:68:07:11:b0:52:d7:a7: 18:a8:96:02:3d:79:0f:f5:cc:8d:d0:00:5f:23:50:4b:43:62: b7:80:2d:d7:24:56:4c:db:20:d8:e0:f1:9a:ab:16:b5:83:76: 6c:ea:01:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzIkzB7TGwDMi09AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmVhZjVhZmQtNjFjYy00OWZjLThmZjgtNTM4YWI0MmNmY2I5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMJkXc4FHY1lnkvPTVE22j+xWnhoJv3qefIj eOcWXZTlgzYLStEfzRFdzndWlL5LVQn7T+3AsRHCM2eDhTFYhRZXwS5/zZ4ozZa0 1LAlZX3aOuWOrbGQdgHXpaJvRwrvoEAUdRw+HkUexBOhjuFU6syR3Fedv2n3jLTx O2UtZziTaSU/K6Vqm7YwtqL8tLFoE8VWnuZkBPCXY6GSFkpg+e1DcWxU0EWEjCkO dsaPFqqfW4STyK/zJzaE2NsRklVZR/WhUx61xpUguIDy1228TPs8yCEQDNqqfpG1 hiWozxNxmhySIlJRx1fNwoYWsIVeQv63ZzhwypGAGmm+l9IQKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTbkFoaSJjU6q7cOM7CJkXP7seRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDY4NjYxZTEtZjdkMy0z MWQ4LWFmMDgtYzZmMWE0MjEyZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFa/5Qn4zX0jQHZCMDnu1QLEXuOVjOvPt6hS2SWptCEXVfiAefA2g45 gAJREUscg5n+BSF+bArdk5XtLi0TjbNm2Dz9yamS3aV3xCmVIdKB0PoFkmC2xXTT taHiGpGozKyh9F5q15qtILGq9xPpfWugdgo1wqxPraDh92sD9wnNvCMPpshgLAiJ WlDLbvDXZnuDnwnaoVeJBI5DpgYdp4BGwt1brc7siTYpjneWEQal/DXYZ5LfGg9R Z9zwmZIZ1FJTJgt+aP+w0RANKdTiwuzHaAcRsFLXpxiolgI9eQ/1zI3QAF8jUEtD YreALdckVkzbINjg8ZqrFrWDdmzqAas= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:22 2025 by rpki-client