$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa File: d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa (raw, json) Hash identifier: LiATcfTb1jQv07uZpYHV9wNqL1mNRIaBbR27V7sWfAs= Subject key identifier: 6F:28:D8:FE:61:4B:8A:46:2F:D9:08:7A:2C:83:71:2A:88:25:1A:3A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4081E210DE1DFA83C13A71C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19905 IP address blocks: 173.20.208.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:e2:10:de:1d:fa:83:c1:3a:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=c456c6ee-64e1-412c-bf43-86a23d14f0f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:49:22:d9:25:f5:23:da:24:3b:27:ba:fe:4e: de:fc:80:5d:64:dc:95:08:ed:ce:f8:7a:a6:0d:e8: 0e:8f:85:81:51:30:94:19:0f:ff:9d:a8:36:1c:0e: 2f:c8:0f:84:49:df:7e:ba:fd:e2:ef:41:de:23:16: 62:52:70:6a:ce:93:2a:d1:07:2f:2e:72:be:ee:58: 52:c0:87:a7:67:ff:1e:e5:02:dd:da:25:5f:aa:7e: a1:01:c4:74:fc:8f:fc:56:9e:12:fa:aa:58:53:4f: 01:3d:54:11:c2:79:7d:86:20:13:9c:ce:48:12:6b: ba:84:4b:6b:a1:7a:46:2a:b9:62:02:bd:df:45:99: 19:3c:bd:7f:3a:a2:ae:fa:24:db:2f:29:f4:dc:c2: ac:f6:a4:00:dd:86:ee:e0:27:10:7a:82:3a:c0:04: d1:57:49:ee:29:99:e0:c5:08:0e:e1:ab:97:47:0d: 41:9f:6d:e3:42:61:b6:a0:87:5b:fb:dc:fb:0f:60: 06:b7:08:6d:82:27:7d:1d:0b:8e:73:8e:2d:d4:d3: 46:7c:da:a6:e8:3a:c2:01:2c:a2:74:13:13:b5:e3: 97:71:6b:5d:d7:9e:5d:7d:61:0b:52:b8:fa:d4:23: f5:30:f1:87:59:61:15:ad:b3:28:4c:c6:34:17:1d: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:28:D8:FE:61:4B:8A:46:2F:D9:08:7A:2C:83:71:2A:88:25:1A:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d6bc97fe-144e-37cb-908c-8939cb4aaa81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.208.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:33:8e:05:5f:9d:70:6d:bd:31:17:46:83:7e:3c:ca:80:b9: 13:4a:bd:f1:76:05:31:80:65:97:f4:1c:d3:34:ef:04:9b:32: 9c:e6:53:a1:30:07:93:82:ec:c0:38:1c:4b:78:c9:27:92:02: 9a:da:e9:3b:7e:d6:c4:cb:92:2f:60:2c:30:06:4e:4e:18:91: 09:16:df:c9:3f:d7:78:57:2a:f0:64:58:01:37:b0:30:2e:a1: 1f:9e:10:92:73:94:89:b9:f5:eb:91:37:20:5f:ec:f8:21:ba: 89:df:dd:54:75:d9:72:b5:02:ae:d5:10:c9:90:56:0b:48:60: eb:b3:4d:5f:ed:e7:5e:7c:bb:e6:4a:f1:92:71:b0:e7:5c:10: 8b:c0:7f:64:ec:24:da:09:1e:08:df:b7:db:12:4b:e9:20:43: a6:e1:c0:4f:21:b8:eb:92:82:f3:14:cf:0e:40:ed:92:64:7e: 50:f1:37:3e:88:c4:ca:05:42:fa:f1:9a:97:2f:56:b3:64:4c: aa:08:fc:ba:71:0d:80:62:1e:06:74:f6:a8:3c:8a:bd:61:50: 30:2a:0f:dd:72:8f:c5:3e:af:23:f4:d0:28:48:6d:c1:8f:55: 10:9f:75:bf:94:7b:c1:da:61:91:8d:ca:3f:c8:48:3a:72:ef: b5:19:03:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgeIQ3h36g8E6ccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk YzQ1NmM2ZWUtNjRlMS00MTJjLWJmNDMtODZhMjNkMTRmMGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkki2SX1I9okOye6/k7e/IBdZNyVCO3O+Hqm DegOj4WBUTCUGQ//nag2HA4vyA+ESd9+uv3i70HeIxZiUnBqzpMq0QcvLnK+7lhS wIenZ/8e5QLd2iVfqn6hAcR0/I/8Vp4S+qpYU08BPVQRwnl9hiATnM5IEmu6hEtr oXpGKrliAr3fRZkZPL1/OqKu+iTbLyn03MKs9qQA3Ybu4CcQeoI6wATRV0nuKZng xQgO4auXRw1Bn23jQmG2oIdb+9z7D2AGtwhtgid9HQuOc44t1NNGfNqm6DrCASyi dBMTteOXcWtd155dfWELUrj61CP1MPGHWWEVrbMoTMY0Fx39vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG8o2P5hS4pGL9kIeiyDcSqIJRo6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDZiYzk3ZmUtMTQ0ZS0z N2NiLTkwOGMtODkzOWNiNGFhYTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRTQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkzjgVfnXBtvTEXRoN+PMqAuRNKvfF2BTGAZZf0HNM07wSbMpzmU6Ew B5OC7MA4HEt4ySeSApra6Tt+1sTLki9gLDAGTk4YkQkW38k/13hXKvBkWAE3sDAu oR+eEJJzlIm59euRNyBf7Pghuonf3VR12XK1Aq7VEMmQVgtIYOuzTV/t5158u+ZK 8ZJxsOdcEIvAf2TsJNoJHgjft9sSS+kgQ6bhwE8huOuSgvMUzw5A7ZJkflDxNz6I xMoFQvrxmpcvVrNkTKoI/LpxDYBiHgZ09qg8ir1hUDAqD91yj8U+ryP00ChIbcGP VRCfdb+Ue8HaYZGNyj/ISDpy77UZA6o= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:53 2025 by rpki-client