$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa File: f568845e-6a2b-3552-aa3f-087a3d48d162.roa (raw, json) Hash identifier: e0Hwv2BqKdwnpbBJ537NypAA+gcMLwWoxIVPLmagGao= Subject key identifier: D9:B0:E5:BF:C0:CB:38:C2:D7:74:CC:59:F4:D0:73:5B:7B:99:6F:99 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A761B51787662AC68B813ED80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:51:78:76:62:ac:68:b8:13:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=f373121a-276b-48b0-a784-352809e56a70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:61:dc:87:b3:45:6a:5a:c8:d7:31:4f:d7: 4f:af:d5:95:3f:50:d5:d8:12:7c:3a:92:0a:d6:50: f4:48:a7:ce:5a:f6:68:f1:8e:f7:51:27:e7:90:68: b0:3b:a4:4b:e8:62:81:fe:58:e7:f2:e3:74:4a:bd: 2f:43:81:19:ee:36:6a:cd:be:b7:16:d4:da:f3:08: 4b:a9:c4:97:4d:9b:c6:0d:af:08:76:0b:e8:33:e8: 61:24:8f:e8:fc:e5:aa:bd:e9:5f:5e:1d:17:19:74: 1c:ad:1f:8d:03:a5:a9:dd:11:a0:f5:dc:8d:b9:3e: 6c:96:1b:58:3e:b2:84:5e:bc:35:01:ab:76:2e:51: c8:2e:27:b4:3a:6a:16:d1:e1:b4:0f:8b:e1:ac:06: 46:85:55:12:10:1e:77:ac:03:34:8b:ac:3a:f9:8d: 93:1e:d3:f4:dd:bb:04:49:06:c4:1a:29:cc:14:4e: ff:6d:4d:03:07:46:2a:42:76:43:24:5f:2c:0c:bc: 8c:99:51:cb:b7:23:c7:09:2f:9f:32:cf:80:a9:e0: d4:79:68:26:fe:2e:e4:20:3e:c6:51:59:31:e0:48: 07:7a:9c:09:3d:65:52:fa:9c:21:03:ec:03:ba:1f: 2f:85:a1:c3:4e:ae:77:dd:36:b0:ec:7f:40:65:1e: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:E5:BF:C0:CB:38:C2:D7:74:CC:59:F4:D0:73:5B:7B:99:6F:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f568845e-6a2b-3552-aa3f-087a3d48d162.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:15:ca:01:a6:c0:d5:73:46:b7:5f:aa:a6:7b:2e:80:e3:76: c0:66:62:af:7e:2b:e7:1b:b7:32:01:d9:b8:44:38:62:1f:d0: b2:82:6a:0a:82:99:b8:c8:ef:81:1f:86:03:34:3d:8f:c2:d1: d9:c4:44:67:eb:c5:9a:bb:2a:f8:e8:6c:aa:a0:93:16:ec:f3: 7f:72:47:27:82:41:34:21:d6:4c:39:f8:08:b3:a6:5e:23:bf: ee:ae:be:40:48:c7:65:42:e1:b7:79:4e:a3:4e:48:76:3d:f1: 3b:a6:78:04:b2:f7:b4:b2:39:3d:19:11:b3:da:aa:51:28:6f: de:4e:b3:8f:4b:ea:5a:48:a5:50:24:60:63:e7:29:20:9a:1e: fd:2b:30:df:71:bf:d5:c8:af:bd:d9:18:ab:50:d6:7e:53:d0: 40:64:1d:f1:7c:e6:5c:6a:f5:10:eb:66:2c:17:b0:9e:82:27: fe:db:8a:dd:c7:d7:c1:67:97:e5:0c:20:85:ee:f5:db:e6:d2: af:d3:3c:06:1f:b0:be:63:5e:f7:25:e7:d3:9f:fa:8f:53:21: c1:ac:90:40:95:d2:81:1e:a2:6a:f9:80:f3:50:65:fb:31:88: a4:52:58:2a:50:f2:55:72:a3:16:a1:2a:b4:da:ad:51:8f:81: 41:90:ec:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G1F4dmKsaLgT7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZjM3MzEyMWEtMjc2Yi00OGIwLWE3ODQtMzUyODA5ZTU2YTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05Rh3IezRWpayNcxT9dPr9WVP1DV2BJ8OpIK 1lD0SKfOWvZo8Y73USfnkGiwO6RL6GKB/ljn8uN0Sr0vQ4EZ7jZqzb63FtTa8whL qcSXTZvGDa8IdgvoM+hhJI/o/OWqvelfXh0XGXQcrR+NA6Wp3RGg9dyNuT5slhtY PrKEXrw1Aat2LlHILie0OmoW0eG0D4vhrAZGhVUSEB53rAM0i6w6+Y2THtP03bsE SQbEGinMFE7/bU0DB0YqQnZDJF8sDLyMmVHLtyPHCS+fMs+AqeDUeWgm/i7kID7G UVkx4EgHepwJPWVS+pwhA+wDuh8vhaHDTq533Taw7H9AZR4PkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNmw5b/AyzjC13TMWfTQc1t7mW+ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjU2ODg0NWUtNmEyYi0z NTUyLWFhM2YtMDg3YTNkNDhkMTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMVygGmwNVzRrdfqqZ7LoDjdsBmYq9+K+cbtzIB2bhEOGIf0LKCagqC mbjI74EfhgM0PY/C0dnERGfrxZq7KvjobKqgkxbs839yRyeCQTQh1kw5+Aizpl4j v+6uvkBIx2VC4bd5TqNOSHY98TumeASy97SyOT0ZEbPaqlEob95Os49L6lpIpVAk YGPnKSCaHv0rMN9xv9XIr73ZGKtQ1n5T0EBkHfF85lxq9RDrZiwXsJ6CJ/7bit3H 18Fnl+UMIIXu9dvm0q/TPAYfsL5jXvcl59Of+o9TIcGskECV0oEeomr5gPNQZfsx iKRSWCpQ8lVyoxahKrTarVGPgUGQ7Gw= -----END CERTIFICATE-----Generated at Thu Jul 10 09:33:24 2025 by rpki-client