$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be5c030-0632-3791-ba93-286c38bc25b6.roa File: 5be5c030-0632-3791-ba93-286c38bc25b6.roa (raw, json) Hash identifier: eDdbNPZ5Ui6o5ySZksvebpgSp4EEa+Vz+uQ7PK8O8SE= Subject key identifier: 19:35:21:58:95:DC:EC:5D:32:B6:6F:56:B5:72:65:0A:50:BA:8E:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84125754B9F23EC27D74C480 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be5c030-0632-3791-ba93-286c38bc25b6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:57:54:b9:f2:3e:c2:7d:74:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fbc69a38-8c0e-458b-98d0-1299939cec8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:43:91:b4:bc:57:b4:ca:a9:17:23:2b:4f:4d: 59:75:b0:d3:7b:87:e4:cd:a1:2f:5e:ee:38:50:b5: dc:cf:3d:22:6a:d0:ba:0b:14:5e:91:eb:5d:1b:49: 2d:90:fe:78:7f:78:3d:cd:92:bb:5b:86:98:f4:e6: a5:ad:6d:a4:e0:59:6f:8b:87:df:ff:7f:c8:8f:2e: a9:c5:77:52:c0:2c:91:ae:2c:4c:3a:28:50:e5:ef: b8:6c:63:b9:98:60:04:b0:4d:3a:10:cd:f8:8d:6e: 3e:00:fe:5b:63:63:43:45:19:08:3d:37:14:c0:37: 62:d0:b5:ef:f1:68:4d:72:5a:56:90:3b:01:54:c9: 51:30:b9:3d:0e:24:d6:eb:cf:19:d9:ac:e5:be:39: f8:d0:ae:e1:be:d9:ef:d6:9e:18:b2:16:e9:b7:fa: 9e:39:eb:ea:10:41:74:6a:39:5a:1b:47:20:47:7b: df:ae:66:c3:1b:38:54:66:8e:d4:37:55:f3:db:db: e8:4d:b7:42:09:12:56:f1:85:ad:04:b1:7b:5c:e9: cf:3f:3c:54:08:98:ae:c8:5b:38:5b:ce:e5:e8:1d: 25:73:7c:58:e3:11:cc:14:d1:33:5b:0f:eb:03:6c: f5:a0:b2:a7:a5:10:8d:cd:90:94:02:56:47:ab:4c: bf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:35:21:58:95:DC:EC:5D:32:B6:6F:56:B5:72:65:0A:50:BA:8E:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5be5c030-0632-3791-ba93-286c38bc25b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:b4:53:17:35:91:93:a2:f2:96:4b:e9:08:fb:5f:78:9b:4f: d1:c2:9c:4e:03:0d:a2:2b:3a:74:ee:f4:ac:be:55:f8:60:af: 07:71:9e:56:72:2b:e5:8a:54:5f:57:cb:6d:fd:b3:d8:0f:b1: ad:73:04:df:6b:d4:30:5e:2c:28:a6:46:25:53:27:01:4a:89: 1c:40:25:56:11:49:51:8f:f5:df:f5:62:c6:cb:86:af:62:be: ce:a2:4c:fd:5e:02:12:37:77:99:83:d6:b0:f4:a3:2f:a1:67: 25:ef:f6:b8:5c:92:5d:4f:c2:b3:e4:c8:70:d7:60:6e:84:bb: 87:c7:a3:b0:5e:06:05:85:69:93:d3:a5:4c:10:75:46:6e:14: 3d:07:7f:19:7d:43:0e:e4:d6:a8:81:4a:36:63:22:14:65:33: c1:63:cc:d4:ef:af:1e:72:19:13:8e:e2:73:40:ee:c3:4c:0d: 99:59:dd:d6:a1:74:5c:48:67:cf:27:60:e1:01:5e:f2:15:f2: 1c:46:08:4b:de:80:f1:74:19:b0:02:11:9f:da:2c:7c:5d:75: 3a:2f:f7:ea:06:a7:f1:3a:76:d2:36:1a:18:92:d7:2f:e3:bd: 2d:29:04:f8:f3:28:a0:a7:ca:64:37:6a:49:1d:2d:7d:20:9b: 00:a1:0c:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEldUufI+wn10xIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmJjNjlhMzgtOGMwZS00NThiLTk4ZDAtMTI5OTkzOWNlYzhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkORtLxXtMqpFyMrT01ZdbDTe4fkzaEvXu44 ULXczz0iatC6CxReketdG0ktkP54f3g9zZK7W4aY9OalrW2k4Flvi4ff/3/Ijy6p xXdSwCyRrixMOihQ5e+4bGO5mGAEsE06EM34jW4+AP5bY2NDRRkIPTcUwDdi0LXv 8WhNclpWkDsBVMlRMLk9DiTW688Z2azlvjn40K7hvtnv1p4Yshbpt/qeOevqEEF0 ajlaG0cgR3vfrmbDGzhUZo7UN1Xz29voTbdCCRJW8YWtBLF7XOnPPzxUCJiuyFs4 W87l6B0lc3xY4xHMFNEzWw/rA2z1oLKnpRCNzZCUAlZHq0y/YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk1IViV3OxdMrZvVrVyZQpQuo4dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWJlNWMwMzAtMDYzMi0z NzkxLWJhOTMtMjg2YzM4YmMyNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGa0Uxc1kZOi8pZL6Qj7X3ibT9HCnE4DDaIrOnTu9Ky+VfhgrwdxnlZy K+WKVF9Xy239s9gPsa1zBN9r1DBeLCimRiVTJwFKiRxAJVYRSVGP9d/1YsbLhq9i vs6iTP1eAhI3d5mD1rD0oy+hZyXv9rhckl1PwrPkyHDXYG6Eu4fHo7BeBgWFaZPT pUwQdUZuFD0Hfxl9Qw7k1qiBSjZjIhRlM8FjzNTvrx5yGROO4nNA7sNMDZlZ3dah dFxIZ88nYOEBXvIV8hxGCEvegPF0GbACEZ/aLHxddTov9+oGp/E6dtI2GhiS1y/j vS0pBPjzKKCnymQ3akkdLX0gmwChDJQ= -----END CERTIFICATE-----Generated at Wed Aug 6 16:08:43 2025 by rpki-client