$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa File: 0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa (raw, json) Hash identifier: 5ueGTmslKcLmD9sl3G8xUlYYw1Q3IPYyGtYn5GfjEbU= Subject key identifier: 90:69:E8:CF:35:60:F3:A7:96:D3:DE:3E:16:D7:A3:FD:E7:0A:26:C2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A81462C5A905822C37100E93E Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 19905 IP address blocks: 173.20.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:2c:5a:90:58:22:c3:71:00:e9:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=dfe50b94-82de-4a6e-b9ef-51a3503b342e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0c:c0:47:14:51:f2:d0:f1:3a:44:b0:40:d2: aa:6e:fd:ee:70:d2:2e:69:d3:33:89:95:c4:5c:f5: f6:26:bf:5d:41:d8:e9:d1:5d:7b:43:a0:02:0c:48: 58:38:ea:1e:50:cb:5b:e0:9e:b3:a8:d9:49:3e:22: 9f:22:ca:db:c1:0d:37:67:33:56:9e:1a:3d:e8:fe: d9:89:5a:18:21:84:9e:3b:d9:bd:20:14:a0:82:49: cc:63:c1:02:60:ae:4f:3e:ed:41:f1:30:d2:c9:9c: 27:42:c7:f9:8a:ee:70:0b:44:cf:9f:78:07:7e:2d: 42:ae:2c:96:2b:c6:74:e9:08:83:80:34:8a:34:c2: 37:83:05:82:d6:64:9b:13:1b:59:f3:08:97:4c:89: 22:27:92:5e:3a:6c:16:47:7d:98:d9:f4:d8:a6:37: f4:e5:ff:f0:5a:82:0d:53:ad:61:7f:f6:0e:ee:ca: 8d:2c:a1:b9:8c:df:a9:b5:14:43:e4:b6:04:64:9e: a3:78:bb:29:7d:a8:5e:a2:ee:31:73:2b:22:54:b9: 86:01:ab:96:eb:49:91:7f:89:47:60:d1:79:58:2f: 94:29:ec:13:a7:f9:bd:3f:69:5d:55:bb:68:64:43: 1f:d1:e6:be:2e:8d:33:dd:3f:37:c0:db:25:8b:49: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:69:E8:CF:35:60:F3:A7:96:D3:DE:3E:16:D7:A3:FD:E7:0A:26:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0ed70fe1-b5ba-3697-8cd7-f89ab7fb4079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e5:c1:13:98:b9:d6:1b:22:01:b3:25:ad:57:51:48:18:45: df:86:e1:c2:e5:d4:d3:d7:7c:f1:f3:46:c6:5d:7e:8c:7c:fd: e6:46:9a:cb:09:b5:0a:c8:0a:19:54:bd:20:c4:bc:16:c3:3c: 1d:76:bc:c9:3f:b4:22:96:35:d9:da:38:ae:67:a0:70:09:e2: bd:a0:a9:78:87:e6:31:37:3a:b3:11:29:d5:e7:04:81:85:4f: 5b:8c:59:b0:88:80:d0:51:ca:0b:a8:8f:cf:c3:e2:a8:0e:9e: df:59:db:c0:5b:f1:aa:70:46:e3:da:18:e7:44:6c:dd:8b:81: 9f:ff:75:10:3b:33:67:ff:a1:e0:27:01:bc:fe:fe:88:21:6d: 22:8b:c3:13:33:3f:d6:28:93:8f:e2:90:3e:b0:5c:41:c3:7d: 2e:0b:72:09:ef:3e:0f:76:9a:34:b4:79:2f:38:56:9e:96:0a: 0d:6f:cf:76:9e:94:89:87:5d:09:df:77:ba:17:11:74:50:99: 00:7e:2f:cf:57:3e:e2:06:01:4b:80:3c:36:ae:b1:36:58:b9: 79:1b:99:ad:1d:fe:ff:47:35:ce:e0:40:5d:2e:0a:cd:49:d3: 03:fd:84:d5:a5:cd:9d:aa:e9:6c:36:9c:dd:33:2b:26:65:89: 3c:14:7b:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRixakFgiw3EA6T4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk ZGZlNTBiOTQtODJkZS00YTZlLWI5ZWYtNTFhMzUwM2IzNDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggzARxRR8tDxOkSwQNKqbv3ucNIuadMziZXE XPX2Jr9dQdjp0V17Q6ACDEhYOOoeUMtb4J6zqNlJPiKfIsrbwQ03ZzNWnho96P7Z iVoYIYSeO9m9IBSggknMY8ECYK5PPu1B8TDSyZwnQsf5iu5wC0TPn3gHfi1CriyW K8Z06QiDgDSKNMI3gwWC1mSbExtZ8wiXTIkiJ5JeOmwWR32Y2fTYpjf05f/wWoIN U61hf/YO7sqNLKG5jN+ptRRD5LYEZJ6jeLspfaheou4xcysiVLmGAauW60mRf4lH YNF5WC+UKewTp/m9P2ldVbtoZEMf0ea+Lo0z3T83wNsli0mGnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBp6M81YPOnltPePhbXo/3nCibCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGVkNzBmZTEtYjViYS0z Njk3LThjZDctZjg5YWI3ZmI0MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHlwROYudYbIgGzJa1XUUgYRd+G4cLl1NPXfPHzRsZdfox8/eZGmssJ tQrIChlUvSDEvBbDPB12vMk/tCKWNdnaOK5noHAJ4r2gqXiH5jE3OrMRKdXnBIGF T1uMWbCIgNBRyguoj8/D4qgOnt9Z28Bb8apwRuPaGOdEbN2LgZ//dRA7M2f/oeAn Abz+/oghbSKLwxMzP9Yok4/ikD6wXEHDfS4LcgnvPg92mjS0eS84Vp6WCg1vz3ae lImHXQnfd7oXEXRQmQB+L89XPuIGAUuAPDausTZYuXkbma0d/v9HNc7gQF0uCs1J 0wP9hNWlzZ2q6Ww2nN0zKyZliTwUe0U= -----END CERTIFICATE-----Generated at Wed Aug 6 09:33:58 2025 by rpki-client