$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8cac39c-c876-3351-a1f7-1b9979e79732.roa File: b8cac39c-c876-3351-a1f7-1b9979e79732.roa (raw, json) Hash identifier: gaAIorlYRc7Z5V2d2/BxdU9O0EHLXNNU1p45SCDDOcw= Subject key identifier: 2C:D8:72:86:EF:2C:80:54:6C:12:C9:36:D6:24:F3:8A:15:18:92:6F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B133F68F5E3307E3F0A8029C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8cac39c-c876-3351-a1f7-1b9979e79732.roa Signing time: Wed 03 Sep 2025 19:55:49 +0000 ROA not before: Wed 03 Sep 2025 19:55:49 +0000 ROA not after: Tue 02 Dec 2025 20:55:49 +0000 asID: 19905 IP address blocks: 173.20.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:3f:68:f5:e3:30:7e:3f:0a:80:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 19:55:49 2025 GMT Not After : Dec 2 20:55:49 2025 GMT Subject: CN=5bc3f027-3b91-44d9-b138-f1370f33180e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b8:db:e8:49:16:0a:62:a0:7f:b4:7d:3a:c9: 25:bf:e5:1d:94:64:b6:c8:e9:7a:fd:6a:55:f6:0a: e1:c9:9c:11:49:35:94:00:37:43:af:47:44:49:e5: 9b:e1:19:4e:25:92:16:01:29:82:02:25:89:26:fa: a0:b5:50:4a:30:90:07:a4:bc:5c:77:59:13:a2:2a: 44:37:9f:b7:51:bb:10:18:fb:72:58:ee:38:96:f9: 2b:41:84:fd:26:b2:9e:82:98:01:66:e6:f6:6f:ab: 18:d1:44:65:4b:29:81:ca:fe:be:ef:39:cd:08:d6: d7:dc:cc:69:a7:10:d2:33:19:c5:2e:e7:25:03:d4: 04:57:aa:76:e1:8f:50:a8:4f:51:de:d9:82:94:55: 42:99:9f:cb:cb:89:ce:65:f0:24:62:41:9a:5d:66: 53:d7:47:37:71:ad:5f:93:67:f9:86:96:4c:bc:d1: 17:3f:bb:af:dd:63:3a:a3:25:a1:13:1f:0f:6a:4a: a1:a3:aa:35:cb:e1:ee:6c:20:01:fc:dc:ca:ef:8b: 85:cd:c4:c9:1b:2d:e2:fe:d6:01:91:87:17:1f:a8: a6:0b:4b:6a:fc:51:82:42:a9:e4:e0:9c:76:b7:5d: fe:5b:97:11:7b:c7:84:3a:bf:b9:ed:c6:ad:c1:62: 84:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D8:72:86:EF:2C:80:54:6C:12:C9:36:D6:24:F3:8A:15:18:92:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b8cac39c-c876-3351-a1f7-1b9979e79732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:ac:64:a4:bd:df:c9:7f:76:17:5d:f9:54:21:3a:55:fc:3d: db:60:a1:2e:63:99:c8:de:d0:09:3b:ce:9e:e5:dc:f8:da:d1: c4:c8:b2:89:6c:03:a4:1b:e4:22:ce:57:85:22:07:c8:ae:f1: 7d:9b:5b:fc:82:7b:30:3e:94:f0:a2:f4:e9:b5:88:06:a8:65: 20:da:97:9a:cf:9b:5c:03:b0:05:6e:d4:d5:4b:15:74:2b:12: 94:09:db:f9:61:36:9f:1d:6c:b9:56:d9:46:e8:23:ea:cd:dc: f4:c8:b4:a3:c3:a5:99:67:ef:64:1a:03:07:96:8b:ca:47:1d: 4d:d1:77:71:c1:d6:ca:8e:5c:22:74:5d:eb:59:62:07:f3:22: 14:b7:93:25:f1:07:bb:47:13:99:e6:22:0f:10:94:0b:7f:92: f2:eb:53:44:47:92:b2:36:06:09:6e:18:32:87:08:38:24:61: df:98:0b:c6:f7:5d:98:cf:75:e5:c7:f1:bf:69:50:e7:4e:1e: cb:cb:ef:fd:ee:e0:d3:a7:c4:65:d5:13:41:6a:e9:1c:13:43: 45:b9:68:ab:18:55:9d:50:1b:83:e7:96:15:dc:4a:bf:71:3e: eb:f2:39:5e:69:83:ca:56:3d:3a:18:35:3d:7e:68:08:86:65: 11:0f:bb:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsTP2j14zB+PwqAKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzE5NTU0OVoXDTI1MTIwMjIwNTU0OVowLzEtMCsGA1UEAxMk NWJjM2YwMjctM2I5MS00NGQ5LWIxMzgtZjEzNzBmMzMxODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbjb6EkWCmKgf7R9Osklv+UdlGS2yOl6/WpV 9grhyZwRSTWUADdDr0dESeWb4RlOJZIWASmCAiWJJvqgtVBKMJAHpLxcd1kToipE N5+3UbsQGPtyWO44lvkrQYT9JrKegpgBZub2b6sY0URlSymByv6+7znNCNbX3Mxp pxDSMxnFLuclA9QEV6p24Y9QqE9R3tmClFVCmZ/Ly4nOZfAkYkGaXWZT10c3ca1f k2f5hpZMvNEXP7uv3WM6oyWhEx8Pakqho6o1y+HubCAB/NzK74uFzcTJGy3i/tYB kYcXH6imC0tq/FGCQqnk4Jx2t13+W5cRe8eEOr+57catwWKEbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzYcobvLIBUbBLJNtYk84oVGJJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjhjYWMzOWMtYzg3Ni0z MzUxLWExZjctMWI5OTc5ZTc5NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWsZKS938l/dhdd+VQhOlX8PdtgoS5jmcje0Ak7zp7l3Pja0cTIsols A6Qb5CLOV4UiB8iu8X2bW/yCezA+lPCi9Om1iAaoZSDal5rPm1wDsAVu1NVLFXQr EpQJ2/lhNp8dbLlW2UboI+rN3PTItKPDpZln72QaAweWi8pHHU3Rd3HB1sqOXCJ0 XetZYgfzIhS3kyXxB7tHE5nmIg8QlAt/kvLrU0RHkrI2BgluGDKHCDgkYd+YC8b3 XZjPdeXH8b9pUOdOHsvL7/3u4NOnxGXVE0Fq6RwTQ0W5aKsYVZ1QG4PnlhXcSr9x PuvyOV5pg8pWPToYNT1+aAiGZREPux0= -----END CERTIFICATE-----Generated at Sat Sep 6 09:56:47 2025 by rpki-client