$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a0f14c6-d4be-38a7-a3b0-69e9748b9989.roa File: 9a0f14c6-d4be-38a7-a3b0-69e9748b9989.roa (raw, json) Hash identifier: Xig7SNI7fV75ceTifgoOVXFOoaAysfIjwoDox23EbUo= Subject key identifier: 87:AE:20:F2:BB:14:DE:D3:A3:F0:67:FC:34:B6:1C:A2:6A:DD:FD:00 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B133F4DF8433525ED3C768D80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a0f14c6-d4be-38a7-a3b0-69e9748b9989.roa Signing time: Wed 03 Sep 2025 19:55:37 +0000 ROA not before: Wed 03 Sep 2025 19:55:37 +0000 ROA not after: Tue 02 Dec 2025 20:55:37 +0000 asID: 19905 IP address blocks: 173.20.100.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:3f:4d:f8:43:35:25:ed:3c:76:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 19:55:37 2025 GMT Not After : Dec 2 20:55:37 2025 GMT Subject: CN=a0457d06-80eb-4624-82a6-cbe2bba87291 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:1c:84:bd:bf:e5:71:e6:84:f7:30:cf:1d: 2c:2a:e7:05:f9:5f:e9:b1:16:0e:78:61:80:a0:b2: 2e:79:22:16:29:c6:df:c4:f8:7d:b4:d3:bc:b2:73: 5c:a1:55:41:70:e9:8d:9a:85:dd:3d:1b:3d:e3:1d: 2e:a2:f4:da:0a:62:bd:03:a3:1b:6c:63:c5:52:93: 4e:e4:21:32:89:96:f8:58:26:7f:e5:8c:7d:ab:79: 7b:a4:29:f9:62:45:cd:36:6b:48:7f:ee:c7:99:29: 59:96:1f:f4:21:11:5d:23:89:21:6a:38:34:80:50: ee:ca:13:40:66:7e:51:98:23:ef:52:dd:01:56:9d: 81:ef:6f:ac:43:a7:65:c5:23:1b:7b:33:08:2e:23: 27:69:6a:b4:68:12:e7:7c:68:a1:ea:25:93:d8:44: ad:b1:c6:80:06:2b:db:09:04:00:6d:af:2c:40:db: ec:a5:40:a1:4d:71:b1:65:c8:3b:36:ec:7b:28:ea: 55:e6:4d:30:c8:30:de:45:09:6a:60:45:61:bc:63: 7b:6b:19:19:6c:32:29:f4:17:2e:0f:b2:9f:26:7b: ec:74:45:0a:87:f1:2b:f6:ec:9a:1b:94:74:7c:a3: 02:37:01:44:20:89:8d:de:dd:5f:8c:8d:3a:de:3b: 7d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:AE:20:F2:BB:14:DE:D3:A3:F0:67:FC:34:B6:1C:A2:6A:DD:FD:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9a0f14c6-d4be-38a7-a3b0-69e9748b9989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.100.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d9:87:a1:0f:15:fe:33:e5:55:52:01:8c:da:f6:5a:26:99: 1c:db:98:f7:83:d0:26:7a:ee:bf:b9:65:4f:52:be:38:c7:ac: c0:f4:6f:84:4d:19:89:a1:2d:7f:51:bb:0f:c0:89:fc:80:91: 45:31:07:0c:e1:b2:97:12:f2:80:6c:61:2a:3c:f9:f7:d1:01: 51:b3:1b:a5:09:35:60:6f:b1:d2:6c:74:d4:33:dd:3c:33:4b: a7:24:42:c0:c8:ba:bc:48:71:e7:32:d4:6b:96:dc:87:72:7f: cf:e5:34:14:51:e2:ee:20:a1:41:ed:1c:e5:42:07:cb:f3:44: 5c:a4:82:14:44:f3:f0:27:d5:6c:aa:3e:22:37:6c:53:e3:19: 81:21:db:df:73:d5:0a:25:35:f5:ab:db:c4:93:ff:9c:8f:7e: 3e:f8:f8:7f:02:99:d5:e8:03:a7:28:bb:72:5d:3b:bb:1c:d5: 0a:36:77:94:e0:f7:5c:f6:21:f4:e8:c7:46:62:51:f9:b8:ef: 7f:2c:cd:2a:1d:9a:d5:2a:3c:55:5a:4d:0e:49:52:4b:eb:b5: dc:f3:8a:3e:39:a9:e8:df:db:7b:79:92:1a:76:4d:f9:14:02: 60:2c:80:c4:78:9f:40:2b:25:11:65:fc:7e:33:0f:a2:21:be: 16:f3:a1:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTP034QzUl7Tx2jYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzE5NTUzN1oXDTI1MTIwMjIwNTUzN1owLzEtMCsGA1UEAxMk YTA0NTdkMDYtODBlYi00NjI0LTgyYTYtY2JlMmJiYTg3MjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth0chL2/5XHmhPcwzx0sKucF+V/psRYOeGGA oLIueSIWKcbfxPh9tNO8snNcoVVBcOmNmoXdPRs94x0uovTaCmK9A6MbbGPFUpNO 5CEyiZb4WCZ/5Yx9q3l7pCn5YkXNNmtIf+7HmSlZlh/0IRFdI4khajg0gFDuyhNA Zn5RmCPvUt0BVp2B72+sQ6dlxSMbezMILiMnaWq0aBLnfGih6iWT2EStscaABivb CQQAba8sQNvspUChTXGxZcg7Nux7KOpV5k0wyDDeRQlqYEVhvGN7axkZbDIp9Bcu D7KfJnvsdEUKh/Er9uyaG5R0fKMCNwFEIImN3t1fjI063jt97QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIeuIPK7FN7To/Bn/DS2HKJq3f0AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWEwZjE0YzYtZDRiZS0z OGE3LWEzYjAtNjllOTc0OGI5OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvZh6EPFf4z5VVSAYza9lommRzbmPeD0CZ67r+5ZU9SvjjHrMD0b4RN GYmhLX9Ruw/AifyAkUUxBwzhspcS8oBsYSo8+ffRAVGzG6UJNWBvsdJsdNQz3Twz S6ckQsDIurxIcecy1GuW3Idyf8/lNBRR4u4goUHtHOVCB8vzRFykghRE8/An1Wyq PiI3bFPjGYEh299z1QolNfWr28ST/5yPfj74+H8CmdXoA6cou3JdO7sc1Qo2d5Tg 91z2IfTox0ZiUfm4738szSodmtUqPFVaTQ5JUkvrtdzzij45qejf23t5khp2TfkU AmAsgMR4n0ArJRFl/H4zD6IhvhbzoSw= -----END CERTIFICATE-----Generated at Sat Sep 6 09:47:36 2025 by rpki-client