$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa File: 45a4927d-04ce-3f81-aa78-438234fc318e.roa (raw, json) Hash identifier: Sxb2UpU9VJtGFFlpHm4sGZvh5+Z60m3Jaf49aitXAAs= Subject key identifier: 9B:99:87:27:4F:7C:C3:FD:51:F0:CA:06:BA:29:74:A1:1D:92:C8:EF Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8146498692439C4F89D7D680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:49:86:92:43:9c:4f:89:d7:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=34d717db-85f2-4a93-851e-e9ddf5c07af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:85:39:5c:ef:12:bb:ff:18:1f:d0:a4:50:55: b5:aa:99:2a:5b:a3:5d:e6:83:4f:56:86:3b:14:81: e6:7f:0c:65:91:17:9e:25:f3:e5:d4:57:3e:6f:24: 95:39:3f:a1:92:66:ca:38:1e:b7:d3:ba:67:5f:a7: bc:04:92:26:af:e0:93:f0:1d:0f:6b:7c:dc:3d:72: 3e:fd:c9:45:32:55:80:9e:69:02:bd:c3:1d:99:d6: 5b:c3:0d:21:00:2e:10:de:0c:e6:5f:0d:0a:b6:0b: 30:99:dd:4b:22:5f:9b:e9:b9:37:81:14:c6:22:f6: 4a:e1:1c:b7:23:9f:66:2c:71:fb:7c:74:9d:1b:2b: 8e:a0:55:45:a3:a4:1d:b2:4f:01:99:c5:2c:d8:0b: 3c:56:c7:81:b8:cc:50:90:7b:d1:8e:a0:d2:e0:73: f6:fe:c6:e9:b9:0e:b2:f4:91:d6:12:26:26:51:a1: 8f:47:51:5c:ca:f1:71:31:62:46:2b:d1:e7:ec:77: ba:41:0c:37:a3:db:9e:39:f0:5e:bb:6f:c9:6b:31: 65:37:b5:7a:35:f3:3e:2d:f5:04:dd:03:ef:85:b7: 99:f6:40:cf:8d:26:d8:4d:bf:a6:09:df:aa:fc:0e: 31:1c:d5:05:0e:cd:d5:13:f7:e6:da:62:e2:32:ec: 73:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:99:87:27:4F:7C:C3:FD:51:F0:CA:06:BA:29:74:A1:1D:92:C8:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/45a4927d-04ce-3f81-aa78-438234fc318e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:4f:75:2b:74:9b:1a:f4:91:9f:3d:b0:8d:5f:cb:7e:82:ab: bf:05:04:6b:2c:b6:24:fd:da:93:df:fe:fc:6f:75:fc:35:c7: 7c:47:bb:c0:a8:c8:35:45:cf:ee:c2:49:d3:6f:b6:9d:08:ac: 3e:93:e6:71:a7:a7:3f:db:d7:42:90:db:43:b4:72:2e:28:20: ac:64:29:4e:83:a5:6c:ac:09:f7:66:04:76:65:07:ed:9f:3c: c5:13:51:66:32:b7:89:22:3e:a7:b2:64:32:1a:db:61:32:30: 30:02:36:54:15:55:cb:58:d0:f6:fa:f7:1a:6d:19:ad:b0:0a: 68:78:27:4f:39:74:8c:a0:61:fc:49:02:c1:d1:85:9a:52:dc: 5c:19:6a:e4:36:c1:db:da:68:31:99:c9:ca:12:2c:2b:19:d3: de:53:d8:5d:ed:37:17:c9:ee:3c:2d:7d:56:50:54:ee:5f:db: fc:cf:af:78:bf:86:6f:4b:b2:24:ec:ce:e4:fa:c8:cb:13:6d: 1a:6f:9a:a2:92:40:97:60:a2:b0:f6:41:ea:41:41:7b:2e:63: 1d:14:d1:f6:30:fd:cd:07:e4:9f:d6:79:85:65:c4:4d:57:be: 37:af:cd:c7:fb:11:a4:f2:43:3f:ae:64:1a:7f:4e:12:cb:d7: 87:7d:fd:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkmGkkOcT4nX1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk MzRkNzE3ZGItODVmMi00YTkzLTg1MWUtZTlkZGY1YzA3YWYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYU5XO8Su/8YH9CkUFW1qpkqW6Nd5oNPVoY7 FIHmfwxlkReeJfPl1Fc+bySVOT+hkmbKOB6307pnX6e8BJImr+CT8B0Pa3zcPXI+ /clFMlWAnmkCvcMdmdZbww0hAC4Q3gzmXw0Ktgswmd1LIl+b6bk3gRTGIvZK4Ry3 I59mLHH7fHSdGyuOoFVFo6Qdsk8BmcUs2As8VseBuMxQkHvRjqDS4HP2/sbpuQ6y 9JHWEiYmUaGPR1FcyvFxMWJGK9Hn7He6QQw3o9ueOfBeu2/JazFlN7V6NfM+LfUE 3QPvhbeZ9kDPjSbYTb+mCd+q/A4xHNUFDs3VE/fm2mLiMuxz7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJuZhydPfMP9UfDKBropdKEdksjvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDVhNDkyN2QtMDRjZS0z ZjgxLWFhNzgtNDM4MjM0ZmMzMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhPdSt0mxr0kZ89sI1fy36Cq78FBGsstiT92pPf/vxvdfw1x3xHu8Co yDVFz+7CSdNvtp0IrD6T5nGnpz/b10KQ20O0ci4oIKxkKU6DpWysCfdmBHZlB+2f PMUTUWYyt4kiPqeyZDIa22EyMDACNlQVVctY0Pb69xptGa2wCmh4J085dIygYfxJ AsHRhZpS3FwZauQ2wdvaaDGZycoSLCsZ095T2F3tNxfJ7jwtfVZQVO5f2/zPr3i/ hm9LsiTszuT6yMsTbRpvmqKSQJdgorD2QepBQXsuYx0U0fYw/c0H5J/WeYVlxE1X vjevzcf7EaTyQz+uZBp/ThLL14d9/Zg= -----END CERTIFICATE-----Generated at Tue Aug 5 23:01:34 2025 by rpki-client