$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa File: 0bf38020-85dc-33fa-8296-a789f8c70a70.roa (raw, json) Hash identifier: cXYKyrICLR1pKPAGWfSMZijXBL6Bo6+QZQA/wy1sNbU= Subject key identifier: FF:45:D0:04:5E:55:22:67:44:0E:99:35:6E:BE:7A:23:E9:00:4F:21 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB67967781E631AF100C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:67:96:77:81:e6:31:af:10:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=818f4081-ac0c-4ca0-ade9-94d67cac00d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:05:e5:5c:82:9c:91:2e:96:e9:51:c9:59:d5: 72:34:4e:06:09:82:f3:67:de:71:b3:07:22:ef:d0: 32:3f:77:d9:19:2b:d1:e5:73:f5:83:85:82:d1:fa: 61:39:cb:50:89:b4:92:72:b7:62:a6:ce:05:fc:16: 7a:e5:ec:66:f7:39:38:8f:fa:df:10:8e:96:f2:64: b0:af:0c:c6:03:8d:a5:97:a9:17:78:b7:da:ce:67: e8:70:e7:a4:ab:8e:8d:49:5d:ba:8d:d2:c6:50:fc: cb:0d:99:0a:d0:5b:04:78:87:c7:ca:bb:bb:31:b9: b3:71:29:21:fc:22:56:9a:3c:43:f5:65:59:55:da: 89:17:07:95:ce:f5:3e:77:b0:37:f0:53:18:c0:34: f0:ae:36:0f:96:1d:0a:3d:1f:a9:5a:59:d6:e1:1d: 39:66:81:57:68:62:48:d1:a4:19:79:80:01:c7:c1: ba:92:40:7e:cc:bd:64:7e:df:09:fd:2c:bd:9a:aa: 6f:95:60:34:e8:31:7c:d8:c6:ad:01:a0:7d:a4:fb: 80:d1:8f:70:3a:40:8c:5f:ef:63:78:d8:c3:54:4a: 44:79:5e:2e:3c:38:6d:02:40:f6:96:30:57:29:aa: 2a:ce:20:00:68:b9:33:3f:8e:c2:00:18:fd:ab:bb: 1f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:45:D0:04:5E:55:22:67:44:0E:99:35:6E:BE:7A:23:E9:00:4F:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0bf38020-85dc-33fa-8296-a789f8c70a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:df:84:a3:e2:75:d2:c9:48:9c:c9:58:be:2d:0a:76:13:b4: 46:87:61:2f:de:11:ed:78:8d:fd:b0:93:e7:c5:c0:db:3a:5c: 2e:47:f2:c2:55:d7:b7:5a:b3:17:1c:eb:a7:68:bc:f7:9f:33: 99:85:08:a2:a7:5d:4b:33:bb:53:c8:fb:06:89:2a:32:48:f1: e5:cd:99:b0:38:9e:66:7a:ef:37:fc:98:37:34:9d:e5:94:3d: ff:c6:28:a7:f4:5f:7a:11:67:7b:c4:95:0c:80:e3:9d:ca:1f: 6f:e2:a9:85:b4:52:59:c2:f1:03:4a:b2:97:87:25:8f:a5:02: 9e:50:7e:c3:08:9d:4f:7d:65:46:12:2f:2c:6f:b6:67:98:96: b5:fd:de:5e:d6:7e:e4:1f:51:2d:3c:09:31:52:63:77:86:ac: b4:3f:5a:c1:9a:df:68:19:a3:cd:7d:7b:71:67:fe:8e:8d:35: 90:33:7b:f3:3c:41:74:9d:67:c7:17:75:9e:10:f0:3d:fb:e4: a0:76:30:2b:18:d1:7d:4b:1a:71:28:ef:1e:ad:7e:31:f9:7a: 4e:e9:6c:d1:1e:14:f3:c9:a4:83:5e:5c:7f:3c:44:b0:8f:4a: b4:41:89:43:fb:1e:99:55:7b:35:1f:19:7b:f8:22:0f:d6:3c: ff:7f:4b:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG22eWd4HmMa8QDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk ODE4ZjQwODEtYWMwYy00Y2EwLWFkZTktOTRkNjdjYWMwMGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAXlXIKckS6W6VHJWdVyNE4GCYLzZ95xswci 79AyP3fZGSvR5XP1g4WC0fphOctQibSScrdips4F/BZ65exm9zk4j/rfEI6W8mSw rwzGA42ll6kXeLfazmfocOekq46NSV26jdLGUPzLDZkK0FsEeIfHyru7MbmzcSkh /CJWmjxD9WVZVdqJFweVzvU+d7A38FMYwDTwrjYPlh0KPR+pWlnW4R05ZoFXaGJI 0aQZeYABx8G6kkB+zL1kft8J/Sy9mqpvlWA06DF82MatAaB9pPuA0Y9wOkCMX+9j eNjDVEpEeV4uPDhtAkD2ljBXKaoqziAAaLkzP47CABj9q7sfGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9F0AReVSJnRA6ZNW6+eiPpAE8hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGJmMzgwMjAtODVkYy0z M2ZhLTgyOTYtYTc4OWY4YzcwYTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABbfhKPiddLJSJzJWL4tCnYTtEaHYS/eEe14jf2wk+fFwNs6XC5H8sJV 17dasxcc66dovPefM5mFCKKnXUszu1PI+waJKjJI8eXNmbA4nmZ67zf8mDc0neWU Pf/GKKf0X3oRZ3vElQyA453KH2/iqYW0UlnC8QNKspeHJY+lAp5QfsMInU99ZUYS LyxvtmeYlrX93l7WfuQfUS08CTFSY3eGrLQ/WsGa32gZo819e3Fn/o6NNZAze/M8 QXSdZ8cXdZ4Q8D375KB2MCsY0X1LGnEo7x6tfjH5ek7pbNEeFPPJpINeXH88RLCP SrRBiUP7HplVezUfGXv4Ig/WPP9/Sx8= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:19 2025 by rpki-client