$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa File: 4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa (raw, json) Hash identifier: 5ZjV//j0Zm9L8oA7Is2t+HaAkZAlWvklV5LFH8KvzQY= Subject key identifier: C7:F7:93:1B:07:B0:64:87:39:D3:15:CE:B2:F7:82:3B:3D:57:DD:33 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DB72C2063EC356F8C56940 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:db:72:c2:06:3e:c3:56:f8:c5:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=b2311e14-e023-41d6-becc-df6e7523c777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:7f:eb:fd:37:01:b4:29:f0:c9:da:c9:fa:ef: b2:91:a0:96:13:ee:42:fe:0a:d1:5b:a5:51:73:22: a9:60:77:d3:2f:d5:0c:b6:d4:34:d0:e1:cc:3d:82: b6:6f:ff:bd:a9:cf:a8:14:bf:35:28:f3:52:bb:9c: db:9d:52:1b:38:df:73:46:7f:13:a5:84:d3:12:9a: ac:36:28:ac:e1:2b:fd:3c:9e:3e:cc:89:7d:26:b2: 13:11:5c:01:39:87:79:c2:2e:f8:7e:16:a2:37:f1: 87:b0:6b:ae:41:a1:aa:0f:f2:07:ae:ad:ad:b4:73: 98:e8:c5:b7:e2:16:0e:00:31:89:2d:75:56:c4:a8: 66:99:ec:13:63:59:4c:c9:38:bc:19:dc:69:7f:9b: a0:51:6f:93:7a:c9:ae:6c:99:42:02:fa:51:67:3d: 78:bd:21:15:78:a9:c5:3b:cf:40:e7:51:3e:42:cc: 28:8f:b6:d9:e5:d1:75:14:7a:52:56:14:6b:53:07: 25:75:6d:9c:49:fe:63:4d:a0:e7:72:df:70:b5:23: cf:56:5b:db:10:99:f9:24:7a:89:92:81:53:53:13: 77:3f:37:5b:3e:76:19:a1:b3:b7:dc:43:b6:b2:22: 61:08:c0:c2:a3:61:1e:81:be:dc:72:06:47:cc:e0: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:93:1B:07:B0:64:87:39:D3:15:CE:B2:F7:82:3B:3D:57:DD:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4f52b5b4-1b76-33a9-8433-ee4c6e696c6c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f2:b7:63:0d:e9:99:d0:84:8b:8f:d7:f3:3a:06:58:f8:63: 8f:aa:dd:21:5f:30:d8:e9:73:72:df:41:3e:f5:a2:12:a7:97: da:53:6e:d9:a3:09:4f:61:96:62:f6:5e:5f:9b:1a:59:df:24: 0e:74:15:ba:fd:02:3a:b9:86:f3:a5:a8:0c:0f:ef:06:65:26: 32:c0:5b:a5:f8:82:28:2f:90:6b:01:20:38:96:c8:0a:9f:0e: 8f:d0:76:d9:7d:0f:b7:60:8f:d1:af:31:03:28:83:e6:cd:93: 0f:7b:f9:99:b4:ee:d5:34:fa:28:5e:75:0e:e5:36:02:b4:ab: e5:47:71:f3:05:64:32:08:77:ed:e9:e3:ac:b8:3a:3a:a4:c1: 21:97:96:67:74:e4:5a:a0:b5:17:33:53:b1:94:34:af:84:15: 90:47:4c:58:ed:16:df:3b:eb:52:01:48:3d:53:2b:43:d7:e5: 44:de:e9:c2:70:19:55:74:90:be:64:10:88:2e:89:e5:01:6a: 76:13:fb:76:d9:07:cf:0f:70:96:9b:a2:6a:ca:50:24:b0:7f: bc:ae:7a:70:7f:39:b6:c3:6f:a7:f2:ee:18:32:4d:f3:8d:d4: b1:cc:6e:44:49:45:28:8b:50:00:19:16:73:5d:56:89:e5:4d: 33:6d:cf:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG23LCBj7DVvjFaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk YjIzMTFlMTQtZTAyMy00MWQ2LWJlY2MtZGY2ZTc1MjNjNzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4H/r/TcBtCnwydrJ+u+ykaCWE+5C/grRW6VR cyKpYHfTL9UMttQ00OHMPYK2b/+9qc+oFL81KPNSu5zbnVIbON9zRn8TpYTTEpqs Niis4Sv9PJ4+zIl9JrITEVwBOYd5wi74fhaiN/GHsGuuQaGqD/IHrq2ttHOY6MW3 4hYOADGJLXVWxKhmmewTY1lMyTi8Gdxpf5ugUW+TesmubJlCAvpRZz14vSEVeKnF O89A51E+Qswoj7bZ5dF1FHpSVhRrUwcldW2cSf5jTaDnct9wtSPPVlvbEJn5JHqJ koFTUxN3PzdbPnYZobO33EO2siJhCMDCo2Eegb7ccgZHzODKJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMf3kxsHsGSHOdMVzrL3gjs9V90zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNGY1MmI1YjQtMWI3Ni0z M2E5LTg0MzMtZWU0YzZlNjk2YzZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACLyt2MN6ZnQhIuP1/M6Blj4Y4+q3SFfMNjpc3LfQT71ohKnl9pTbtmj CU9hlmL2Xl+bGlnfJA50Fbr9Ajq5hvOlqAwP7wZlJjLAW6X4gigvkGsBIDiWyAqf Do/Qdtl9D7dgj9GvMQMog+bNkw97+Zm07tU0+ihedQ7lNgK0q+VHcfMFZDIId+3p 46y4OjqkwSGXlmd05FqgtRczU7GUNK+EFZBHTFjtFt8761IBSD1TK0PX5UTe6cJw GVV0kL5kEIguieUBanYT+3bZB88PcJabomrKUCSwf7yuenB/ObbDb6fy7hgyTfON 1LHMbkRJRSiLUAAZFnNdVonlTTNtzxo= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:15 2025 by rpki-client