$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa File: 18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa (raw, json) Hash identifier: fShJFZEirUZe02iNf1VnNuXpF82CmCt7Ft7gS+t+rXs= Subject key identifier: 75:F9:56:A3:49:68:53:25:47:28:84:B5:A5:55:E4:D4:C8:6B:5F:F7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F1F9999036D9AA898DA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.20.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f1:f9:99:90:36:d9:aa:89:8d:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=339b63bf-8f3f-491a-8341-529878bf95ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:31:80:91:18:36:e2:f4:d0:06:e2:3e:fd:fc: 30:1d:12:66:3b:c9:34:3c:57:15:41:2e:ac:44:ac: 7e:26:de:d2:b8:02:57:7c:39:bd:b6:f2:da:ad:05: 77:fa:a2:86:1d:23:27:74:fc:48:35:6f:d1:c3:12: 86:97:69:a6:ff:c8:e5:e0:a8:e0:17:60:07:4f:a2: b2:69:59:d4:eb:54:f7:96:10:29:d4:13:3b:3c:fa: 1d:b6:40:86:02:d6:53:e3:6f:d3:08:c3:ec:b1:02: fb:1e:1c:ec:e5:d5:5d:0b:09:fd:9c:a0:18:ab:e6: b5:e5:16:65:c9:8b:5a:92:4e:bd:17:88:f2:d3:10: 8e:dd:00:40:fa:64:46:19:0f:7a:d7:b4:7f:07:32: e4:01:c6:2b:d0:ae:35:57:b9:34:5b:1e:12:1e:6e: 6d:6a:f6:f7:4e:d8:94:aa:89:63:a3:e2:49:bc:02: 4f:e9:7c:8b:90:19:a4:4a:92:39:95:df:df:c1:2e: 0f:22:74:64:1d:d5:2b:0a:6c:c2:c8:90:6b:7f:46: be:96:a2:18:d7:28:c1:22:6f:c6:ce:d0:ca:d6:ee: 56:dc:f7:a6:1a:aa:4a:ad:cf:b1:07:b2:2b:dd:9b: 94:54:10:67:cc:47:72:06:4a:07:05:43:6b:46:29: 1a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:F9:56:A3:49:68:53:25:47:28:84:B5:A5:55:E4:D4:C8:6B:5F:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/18a916b7-a56e-3ea5-a788-1f0d0500d61a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:71:f7:6c:8e:24:a0:1d:ed:1e:58:32:cc:a6:d5:30:87:25: 36:37:f1:66:d3:3b:ee:bd:d0:64:e5:d3:fe:94:ba:34:cd:76: bd:4a:a7:6b:ed:d4:26:00:1f:b9:7f:41:96:38:91:0f:d9:fe: 07:2c:0d:00:eb:27:b2:38:d7:f2:e7:ec:0e:1c:7b:8e:2b:9d: a2:cd:81:a1:cc:2d:df:a7:cf:8d:18:23:d3:fd:d6:1f:8c:5d: 12:64:aa:28:b4:96:3a:f2:9f:bd:6c:83:94:d6:e3:c1:7a:7c: 62:95:7e:fa:3c:cf:68:c9:73:27:fa:66:4a:8e:27:02:bb:55: e0:56:3c:e2:35:e5:22:f6:d4:61:a7:a3:23:4a:ff:27:62:06: 09:05:17:91:7a:80:6c:cf:f1:ca:be:bc:58:0f:86:94:5a:7a: 99:0e:d4:4a:cd:d8:e7:36:7d:96:d1:6f:a7:34:1d:f8:5e:b6: 03:6a:45:27:d7:cb:95:80:1d:68:dd:3a:c9:ca:ae:19:04:9f: e3:6d:14:a4:78:f7:bd:1c:5d:a2:42:6f:c6:23:0a:0b:04:2b: bb:33:e4:7a:d6:b2:3e:43:28:29:14:fa:61:8e:e7:23:eb:a2: 93:c1:db:0b:76:3f:c5:b5:c7:4d:45:fd:04:e2:b3:ad:66:b9: ef:c1:f1:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/H5mZA22aqJjaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzM5YjYzYmYtOGYzZi00OTFhLTgzNDEtNTI5ODc4YmY5NWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDGAkRg24vTQBuI+/fwwHRJmO8k0PFcVQS6s RKx+Jt7SuAJXfDm9tvLarQV3+qKGHSMndPxINW/RwxKGl2mm/8jl4KjgF2AHT6Ky aVnU61T3lhAp1BM7PPodtkCGAtZT42/TCMPssQL7Hhzs5dVdCwn9nKAYq+a15RZl yYtakk69F4jy0xCO3QBA+mRGGQ9617R/BzLkAcYr0K41V7k0Wx4SHm5tavb3TtiU qoljo+JJvAJP6XyLkBmkSpI5ld/fwS4PInRkHdUrCmzCyJBrf0a+lqIY1yjBIm/G ztDK1u5W3PemGqpKrc+xB7Ir3ZuUVBBnzEdyBkoHBUNrRikawQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHX5VqNJaFMlRyiEtaVV5NTIa1/3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMThhOTE2YjctYTU2ZS0z ZWE1LWE3ODgtMWYwZDA1MDBkNjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABFx92yOJKAd7R5YMsym1TCHJTY38WbTO+690GTl0/6UujTNdr1Kp2vt 1CYAH7l/QZY4kQ/Z/gcsDQDrJ7I41/Ln7A4ce44rnaLNgaHMLd+nz40YI9P91h+M XRJkqii0ljryn71sg5TW48F6fGKVfvo8z2jJcyf6ZkqOJwK7VeBWPOI15SL21GGn oyNK/ydiBgkFF5F6gGzP8cq+vFgPhpRaepkO1ErN2Oc2fZbRb6c0HfhetgNqRSfX y5WAHWjdOsnKrhkEn+NtFKR4970cXaJCb8YjCgsEK7sz5HrWsj5DKCkU+mGO5yPr opPB2wt2P8W1x01F/QTis61mue/B8Vo= -----END CERTIFICATE-----Generated at Wed Nov 5 10:46:45 2025 by rpki-client