$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa File: e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa (raw, json) Hash identifier: vE/pIvBDoVIkO4tyfPnSfnp1KeB/6uftbbK3tbLFX14= Subject key identifier: DE:74:6F:B7:EF:E1:39:BD:CF:4F:48:59:3E:22:26:00:74:5A:5A:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B1D9C3430BD2B0A30E2D18474 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa Signing time: Sun 07 Sep 2025 13:00:41 +0000 ROA not before: Sun 07 Sep 2025 13:00:41 +0000 ROA not after: Sat 06 Dec 2025 14:00:41 +0000 asID: 19905 IP address blocks: 173.20.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1d:9c:34:30:bd:2b:0a:30:e2:d1:84:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 7 13:00:41 2025 GMT Not After : Dec 6 14:00:41 2025 GMT Subject: CN=542b6b3d-1862-4871-adda-bf2329af33db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:45:ec:c0:14:68:b7:52:41:f3:31:50:29:70: 8e:ad:f0:96:88:e0:c1:70:50:aa:d9:97:65:64:7d: fe:00:ec:c9:25:10:f8:90:cd:b7:d5:00:79:60:9a: 4f:12:a6:6f:c1:41:26:d9:bd:34:db:8e:de:fc:d3: f3:7f:b6:b0:09:c9:c6:69:84:9c:16:53:c7:96:70: a2:7d:81:fd:2a:c8:ba:27:cf:be:6b:13:1d:61:35: ca:72:36:16:b4:2e:ba:e1:9a:40:cf:5f:fe:47:92: 83:a6:70:23:96:49:68:3f:52:70:ca:b6:77:e5:ec: 71:65:38:bc:b2:4d:28:67:ea:3c:2f:40:a2:a6:fa: b1:54:5a:64:b3:96:a7:99:05:84:75:11:41:7a:96: bd:64:e3:81:23:d4:fb:5c:58:b9:41:35:ac:bf:48: 0e:4d:88:cd:2a:0c:95:75:d1:54:8c:2a:af:b1:6c: 51:d7:30:fc:71:64:a3:a2:b7:2a:60:04:0e:96:fe: 42:81:b1:fd:ff:1b:e3:43:e2:0f:4a:a7:99:8c:31: b0:8c:12:26:df:f4:4e:3c:93:b8:61:e1:27:8a:6e: 3b:32:ac:52:48:da:cd:25:bf:94:61:d1:2c:a0:cb: 7a:18:e0:0e:b6:1f:12:82:29:77:a7:76:4f:1b:96: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:74:6F:B7:EF:E1:39:BD:CF:4F:48:59:3E:22:26:00:74:5A:5A:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1dd3f3a-52d4-3ad8-be2d-85789a4bd46f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:f4:ec:da:27:d5:d3:c9:26:3e:99:cb:17:ac:4f:23:37:24: 3b:81:a6:ed:fb:16:56:ba:54:d6:8d:6a:9b:22:50:fe:0e:36: e6:bb:18:4a:58:6c:3d:0d:d8:7a:b4:a2:ae:08:af:64:b8:ee: 53:d1:55:67:57:6e:9e:b3:f3:43:36:cb:07:22:31:73:25:c9: 4d:40:85:54:03:ca:45:36:35:97:9d:8c:0f:0b:d1:1e:f3:73: 49:ff:54:87:75:5b:e1:3c:cb:64:e3:83:7b:b0:5a:b0:e1:ae: de:6f:28:e0:eb:82:d5:d8:86:dc:cc:4c:75:15:7d:d0:ad:81: a1:e1:6f:70:42:59:7d:44:0a:6f:a2:ee:74:81:64:9f:98:17: 42:c9:87:4e:3e:c2:e6:6a:cb:5a:e4:d8:d9:62:c8:8d:ce:46: 35:82:ba:07:b4:08:e6:9a:83:8c:f0:7c:78:a6:99:75:56:b6: 06:fb:20:3b:3a:3c:12:44:2e:6d:3c:81:d4:27:97:53:77:07: a9:cb:ac:f2:ea:ef:01:ef:5d:ad:af:5c:2a:d0:2d:dc:0d:9c: c7:b0:03:b0:7b:da:99:8e:cc:c6:87:6d:97:09:d4:d3:02:7f: fd:dd:e2:95:06:f7:55:a6:e3:3c:53:cb:73:29:91:7c:93:4e: 99:c5:60:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsdnDQwvSsKMOLRhHQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwNzEzMDA0MVoXDTI1MTIwNjE0MDA0MVowLzEtMCsGA1UEAxMk NTQyYjZiM2QtMTg2Mi00ODcxLWFkZGEtYmYyMzI5YWYzM2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0XswBRot1JB8zFQKXCOrfCWiODBcFCq2Zdl ZH3+AOzJJRD4kM231QB5YJpPEqZvwUEm2b00247e/NPzf7awCcnGaYScFlPHlnCi fYH9Ksi6J8++axMdYTXKcjYWtC664ZpAz1/+R5KDpnAjlkloP1JwyrZ35exxZTi8 sk0oZ+o8L0CipvqxVFpks5anmQWEdRFBepa9ZOOBI9T7XFi5QTWsv0gOTYjNKgyV ddFUjCqvsWxR1zD8cWSjorcqYAQOlv5CgbH9/xvjQ+IPSqeZjDGwjBIm3/ROPJO4 YeEnim47MqxSSNrNJb+UYdEsoMt6GOAOth8Sgil3p3ZPG5b5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN50b7fv4Tm9z09IWT4iJgB0Wlo+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTFkZDNmM2EtNTJkNC0z YWQ4LWJlMmQtODU3ODlhNGJkNDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf07Non1dPJJj6ZyxesTyM3JDuBpu37Fla6VNaNapsiUP4ONua7GEpY bD0N2Hq0oq4Ir2S47lPRVWdXbp6z80M2ywciMXMlyU1AhVQDykU2NZedjA8L0R7z c0n/VId1W+E8y2Tjg3uwWrDhrt5vKODrgtXYhtzMTHUVfdCtgaHhb3BCWX1ECm+i 7nSBZJ+YF0LJh04+wuZqy1rk2NliyI3ORjWCuge0COaag4zwfHimmXVWtgb7IDs6 PBJELm08gdQnl1N3B6nLrPLq7wHvXa2vXCrQLdwNnMewA7B72pmOzMaHbZcJ1NMC f/3d4pUG91Wm4zxTy3MpkXyTTpnFYDc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:14 2025 by rpki-client