$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa File: 2cd172de-b031-3b7a-8374-eced4e55a452.roa (raw, json) Hash identifier: +LCmVG39soR5ZFdSrS3h512JB4BLwhwyC0PhdlWffQ8= Subject key identifier: EF:5A:A9:EB:37:2A:39:F7:3B:81:AD:95:5B:C4:27:C1:28:51:9D:2A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410E1876783287C3BF3C900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.78.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:e1:87:67:83:28:7c:3b:f3:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=11d87ff8-2701-49d5-8c32-dd3f6dd585ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0c:aa:d3:c7:7c:03:eb:cd:1b:d0:44:dc:58: f7:8a:58:ad:12:3c:ee:8b:8b:e0:db:b1:46:f9:ef: f3:2c:9d:1b:a2:18:85:8f:9b:9a:bc:e5:a3:99:7f: d5:e0:6b:d6:7b:02:54:d2:03:8e:c3:25:49:45:6c: 73:d4:3a:ef:5c:ee:e4:04:1a:82:27:fc:23:18:86: bb:e6:cf:43:bc:ce:ff:4a:1f:66:cc:24:9b:56:2f: 91:e2:86:5b:34:be:10:ab:5f:12:15:c2:81:ef:33: 2a:5a:e8:a3:25:7f:9e:b9:1d:9e:19:d3:09:25:71: be:00:7b:69:0f:56:f1:8a:8c:d8:d5:cd:db:9a:cf: 79:29:00:fa:55:32:98:f0:d7:eb:b2:37:81:ca:92: dc:4c:c1:57:9e:38:9f:16:0a:65:8d:e0:ac:88:24: cf:a0:ac:c3:a9:7e:ce:3e:af:0d:a5:1c:26:3b:4e: 5a:1b:4c:24:64:e4:0d:10:1c:ce:12:55:b0:96:b1: 1a:68:2d:92:0c:a5:4b:96:01:a4:72:50:4f:7e:80: 9d:f6:1a:80:01:91:90:60:34:f6:65:98:cb:1a:1d: a0:df:ec:44:4e:1a:df:b6:c7:80:9a:fc:8b:77:1d: 4b:0d:f0:66:87:55:38:f2:7d:15:81:fa:66:eb:ca: 8f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:5A:A9:EB:37:2A:39:F7:3B:81:AD:95:5B:C4:27:C1:28:51:9D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2cd172de-b031-3b7a-8374-eced4e55a452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.78.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:48:2a:d1:a3:8e:04:11:3e:2b:67:52:f5:1d:25:b7:0b:18: b1:a3:93:23:71:f7:db:46:65:57:fc:56:fe:34:2b:04:7f:22: 8a:d6:2e:44:2a:86:e3:6a:4d:3a:98:7f:bd:fb:a7:27:85:71: e2:b9:76:80:95:da:50:18:7f:66:54:66:15:a7:66:c1:80:0a: 04:74:45:95:78:5f:b8:d9:d4:3a:7e:a0:a9:09:61:d7:ac:04: 85:dc:10:92:e7:45:dd:b0:a3:c3:c0:2f:49:7b:bb:89:c1:56: be:6e:85:74:5e:20:0a:d4:f7:f8:77:06:14:a1:7b:ba:ca:d3: 5d:c5:5a:0b:c6:91:cc:e3:54:94:dd:b0:d7:19:73:3a:1f:81: 57:5a:80:f4:bc:fb:80:14:30:ca:f9:6d:f1:98:4d:11:78:4c: 98:c7:a6:e0:0a:9c:4f:59:74:96:ce:a5:87:89:f9:c5:f6:3c: 3c:97:b6:2c:12:00:cc:b1:5d:84:38:8d:ba:6f:56:01:b2:a7: 35:a7:f2:be:78:ee:a1:9a:dc:7f:b1:30:93:94:30:8e:ac:18: b8:86:f0:36:08:8d:8f:0d:94:7c:66:a9:09:50:ca:5d:6b:eb: 3a:97:ab:73:3e:88:ce:bf:23:5f:5a:66:8d:ab:ac:e6:be:cf: c6:ef:dc:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEOGHZ4MofDvzyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTFkODdmZjgtMjcwMS00OWQ1LThjMzItZGQzZjZkZDU4NWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgyq08d8A+vNG9BE3Fj3ilitEjzui4vg27FG +e/zLJ0bohiFj5uavOWjmX/V4GvWewJU0gOOwyVJRWxz1DrvXO7kBBqCJ/wjGIa7 5s9DvM7/Sh9mzCSbVi+R4oZbNL4Qq18SFcKB7zMqWuijJX+euR2eGdMJJXG+AHtp D1bxiozY1c3bms95KQD6VTKY8NfrsjeBypLcTMFXnjifFgpljeCsiCTPoKzDqX7O Pq8NpRwmO05aG0wkZOQNEBzOElWwlrEaaC2SDKVLlgGkclBPfoCd9hqAAZGQYDT2 ZZjLGh2g3+xEThrftseAmvyLdx1LDfBmh1U48n0Vgfpm68qPLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9aqes3Kjn3O4GtlVvEJ8EoUZ0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmNkMTcyZGUtYjAzMS0z YjdhLTgzNzQtZWNlZDRlNTVhNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRROMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxIKtGjjgQRPitnUvUdJbcLGLGjkyNx99tGZVf8Vv40KwR/IorWLkQq huNqTTqYf737pyeFceK5doCV2lAYf2ZUZhWnZsGACgR0RZV4X7jZ1Dp+oKkJYdes BIXcEJLnRd2wo8PAL0l7u4nBVr5uhXReIArU9/h3BhShe7rK013FWgvGkczjVJTd sNcZczofgVdagPS8+4AUMMr5bfGYTRF4TJjHpuAKnE9ZdJbOpYeJ+cX2PDyXtiwS AMyxXYQ4jbpvVgGypzWn8r547qGa3H+xMJOUMI6sGLiG8DYIjY8NlHxmqQlQyl1r 6zqXq3M+iM6/I19aZo2rrOa+z8bv3Go= -----END CERTIFICATE-----Generated at Wed Aug 6 07:59:39 2025 by rpki-client