$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa File: f568845e-6a2b-3552-aa3f-087a3d48d162.roa (raw, json) Hash identifier: uEQ6zltNLDyv0QLSyw2TxZsOJbd2c8z3wOmPgZThsAg= Subject key identifier: E9:63:4D:D7:24:E6:F6:18:44:CF:E4:4E:E8:C8:DD:FD:7B:13:F5:EB Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D71ED71E033574292CAEE0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:1e:d7:1e:03:35:74:29:2c:ae:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=03f9f61f-68c5-44f6-a6d4-517517b2166e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a4:00:00:87:3d:4b:18:36:e4:8b:11:ad:62: 85:e8:39:91:27:9d:93:3f:88:14:1c:9b:0c:dd:17: 41:70:1b:87:b7:c7:dc:2c:76:ea:2d:d8:4b:d5:16: a4:99:30:6d:6e:e5:d5:0d:20:5e:73:cd:b2:c9:81: af:90:cc:1b:ef:cd:e9:7b:10:ca:0e:89:c5:41:e6: bc:7c:4b:31:b4:4d:61:5f:37:01:42:f2:16:5f:50: ba:ae:c6:97:d0:4c:c6:48:a6:2b:89:ca:4d:b6:02: 6f:c0:f9:3e:87:1c:1f:df:f5:2e:a4:77:91:ac:1d: 31:92:4c:75:bf:8d:93:ac:43:96:8f:2b:72:b2:65: b9:e2:5d:ca:d7:cc:67:89:33:67:58:20:75:fa:83: aa:4a:71:92:83:05:e3:23:0a:12:94:1c:c1:e7:76: e1:70:8a:20:6e:94:4e:b5:40:90:da:c3:9b:a2:51: 63:e2:57:99:d0:fd:dc:49:3b:43:50:22:25:1c:11: 9d:20:7e:b1:a2:8e:5c:7e:1c:a1:ba:df:6a:15:c3: 1a:13:b3:e2:df:7d:27:53:61:1f:fd:aa:7f:9a:bf: ec:89:ce:21:5a:f1:0e:7c:06:95:0f:4b:85:d4:e5: 3a:03:a4:42:19:85:5e:0c:e8:1c:2f:77:a7:a5:48: 5d:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:63:4D:D7:24:E6:F6:18:44:CF:E4:4E:E8:C8:DD:FD:7B:13:F5:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:bb:f3:3e:02:0c:fe:8f:44:d2:0b:b3:db:df:27:7a:16:9e: 7b:8a:ae:3b:40:ca:95:b0:33:6f:f5:c2:f3:52:29:00:08:94: 67:4c:2a:36:41:09:9b:8b:5f:5d:59:60:c7:66:c1:7e:62:01: 91:6c:d3:9d:29:5f:df:1d:c1:1d:d0:d9:ef:4d:81:1c:a7:7b: fd:c8:f6:cd:24:c8:dc:c3:a8:6c:a7:5b:e6:00:0e:42:07:88: c9:a2:4e:8c:9e:d3:04:3d:4b:95:5a:a8:58:dc:01:60:50:06: f7:02:c5:52:95:fa:62:60:a9:b1:d7:dd:1f:41:15:7a:b0:53: cf:ef:27:ce:0f:14:ac:24:c2:83:52:00:17:5c:be:1b:01:d1: 2c:9d:0d:89:b1:cb:87:1b:c2:2a:95:bd:ea:21:16:1e:72:54: b9:07:ff:f1:78:77:1d:dc:f6:a9:69:ec:11:7b:28:d3:68:73: 5b:79:55:62:1a:30:16:93:e6:d2:48:04:c0:ae:34:46:d1:08: f8:3d:42:ef:d8:fb:0e:1c:07:e7:2e:21:f6:c1:dd:2c:ef:e6: 6e:30:d7:ad:75:35:6d:a6:38:39:ff:fc:ea:5a:48:8b:ef:1b: b5:c5:50:05:27:4d:5f:ab:ed:35:cc:2f:16:1c:fc:88:fd:3a: 4f:7e:53:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1x7XHgM1dCksruAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MDNmOWY2MWYtNjhjNS00NGY2LWE2ZDQtNTE3NTE3YjIxNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqQAAIc9Sxg25IsRrWKF6DmRJ52TP4gUHJsM 3RdBcBuHt8fcLHbqLdhL1RakmTBtbuXVDSBec82yyYGvkMwb783pexDKDonFQea8 fEsxtE1hXzcBQvIWX1C6rsaX0EzGSKYricpNtgJvwPk+hxwf3/UupHeRrB0xkkx1 v42TrEOWjytysmW54l3K18xniTNnWCB1+oOqSnGSgwXjIwoSlBzB53bhcIogbpRO tUCQ2sObolFj4leZ0P3cSTtDUCIlHBGdIH6xoo5cfhyhut9qFcMaE7Pi330nU2Ef /ap/mr/sic4hWvEOfAaVD0uF1OU6A6RCGYVeDOgcL3enpUhdxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOljTdck5vYYRM/kTujI3f17E/XrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU2ODg0NWUtNmEyYi0z NTUyLWFhM2YtMDg3YTNkNDhkMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS78z4CDP6PRNILs9vfJ3oWnnuKrjtAypWwM2/1wvNSKQAIlGdMKjZB CZuLX11ZYMdmwX5iAZFs050pX98dwR3Q2e9NgRyne/3I9s0kyNzDqGynW+YADkIH iMmiToye0wQ9S5VaqFjcAWBQBvcCxVKV+mJgqbHX3R9BFXqwU8/vJ84PFKwkwoNS ABdcvhsB0SydDYmxy4cbwiqVveohFh5yVLkH//F4dx3c9qlp7BF7KNNoc1t5VWIa MBaT5tJIBMCuNEbRCPg9Qu/Y+w4cB+cuIfbB3Szv5m4w1611NW2mODn//OpaSIvv G7XFUAUnTV+r7TXMLxYc/Ij9Ok9+U8I= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:08 2025 by rpki-client