$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c6e671f-5a50-329a-8395-aa7a440f3342.roa File: 6c6e671f-5a50-329a-8395-aa7a440f3342.roa (raw, json) Hash identifier: zljWtv99Y/w4VCOh184oFAUywIcI+655QY/nj9EplbQ= Subject key identifier: 2B:A1:5B:62:AF:55:63:62:AB:16:24:2C:91:36:10:15:D6:E1:A1:2C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841257FA0F1578CB0FAEBA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c6e671f-5a50-329a-8395-aa7a440f3342.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:57:fa:0f:15:78:cb:0f:ae:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4c67e7c1-e9fa-42d2-b06e-8dd974a8830d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:93:13:4f:35:ac:37:40:f6:b1:7c:cf:ae:e5: 4d:48:b9:ea:2d:a0:ca:62:47:66:52:61:b3:bd:62: 7e:8d:af:2d:b7:aa:3f:b5:55:99:d7:f2:86:73:22: 1d:ae:c7:1e:6a:ae:98:c7:34:fd:61:98:71:fe:6e: 39:16:30:27:ff:1e:00:0c:23:7d:e3:02:19:3b:7b: 3c:6a:d1:90:b4:68:4d:40:d2:9d:78:a5:e3:6a:88: 3e:24:70:e2:7b:ee:ee:2e:4e:03:9f:f3:d1:80:a2: cf:2a:d9:9d:c4:41:8b:51:f8:1b:5a:20:fe:30:46: 55:1d:47:bd:fc:eb:18:c5:0f:8d:b3:2e:82:8b:a2: 32:de:7a:2a:c3:5b:a2:bc:ac:af:a4:33:7c:55:f0: 69:f8:a5:7d:1c:cd:63:d5:dc:f0:cb:1a:17:92:47: 29:ae:1d:a0:c8:0e:32:53:6d:0d:9a:a1:2d:12:d2: ac:6d:3e:78:e2:1f:4e:0c:39:f2:52:17:d8:25:37: e2:0a:69:a9:33:68:b4:19:e2:86:d4:a9:2f:c0:c1: 42:bf:47:f0:6f:d7:25:78:2e:a4:97:47:54:d3:0d: 04:b7:f2:6c:83:d6:d1:1a:5a:12:af:61:fb:3e:6c: 3d:36:70:94:a6:81:fb:8d:da:52:cd:ca:53:d7:42: 39:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:A1:5B:62:AF:55:63:62:AB:16:24:2C:91:36:10:15:D6:E1:A1:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/6c6e671f-5a50-329a-8395-aa7a440f3342.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.86.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:e7:ff:31:44:35:55:ba:0a:85:5f:16:0f:81:9f:26:92:71: 0b:d9:9c:a9:98:b6:5d:93:4d:88:d6:88:09:db:36:70:e5:56: b6:4c:57:3d:6e:0b:7d:45:dc:1b:b9:1e:22:85:eb:74:c1:26: ba:c3:08:9e:0a:5d:d6:50:d3:47:bf:e0:92:08:db:19:3a:1d: 4c:56:c1:2d:06:92:c4:ea:c5:5d:c2:e3:29:67:63:14:c7:38: 26:21:9d:6d:34:b7:52:7a:6a:6b:44:cd:eb:a3:0f:54:c4:27: 16:f0:f8:8d:c3:72:1f:66:33:11:36:f2:a1:cc:35:e8:59:a8: 1b:86:29:d4:82:c0:b3:3b:6b:15:33:aa:b6:b6:09:ab:f9:65: 84:30:00:06:ce:a2:3c:0e:19:b0:02:d9:b8:3f:5a:55:bc:fa: 94:8c:65:9e:0d:97:74:8f:46:27:e4:14:91:7d:a1:8d:2b:26: c8:22:4e:a5:5d:02:da:6a:f3:d9:7b:38:43:eb:a0:95:6c:a1: 62:6a:36:d1:f9:25:7d:7f:79:9b:22:7e:76:d3:ee:82:1d:28: 39:88:59:e7:c0:5e:43:72:8e:f4:ec:1b:05:6d:1b:96:0f:3d: e1:c6:09:f6:66:0e:40:a5:d1:52:91:79:f3:99:de:b8:da:d9: 8d:9a:f4:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElf6DxV4yw+uugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGM2N2U3YzEtZTlmYS00MmQyLWIwNmUtOGRkOTc0YTg4MzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZMTTzWsN0D2sXzPruVNSLnqLaDKYkdmUmGz vWJ+ja8tt6o/tVWZ1/KGcyIdrsceaq6YxzT9YZhx/m45FjAn/x4ADCN94wIZO3s8 atGQtGhNQNKdeKXjaog+JHDie+7uLk4Dn/PRgKLPKtmdxEGLUfgbWiD+MEZVHUe9 /OsYxQ+Nsy6Ci6Iy3noqw1uivKyvpDN8VfBp+KV9HM1j1dzwyxoXkkcprh2gyA4y U20NmqEtEtKsbT544h9ODDnyUhfYJTfiCmmpM2i0GeKG1KkvwMFCv0fwb9cleC6k l0dU0w0Et/Jsg9bRGloSr2H7Pmw9NnCUpoH7jdpSzcpT10I5UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuhW2KvVWNiqxYkLJE2EBXW4aEsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNmM2ZTY3MWYtNWE1MC0z MjlhLTgzOTUtYWE3YTQ0MGYzMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRRWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfn/zFENVW6CoVfFg+BnyaScQvZnKmYtl2TTYjWiAnbNnDlVrZMVz1u C31F3Bu5HiKF63TBJrrDCJ4KXdZQ00e/4JII2xk6HUxWwS0GksTqxV3C4ylnYxTH OCYhnW00t1J6amtEzeujD1TEJxbw+I3Dch9mMxE28qHMNehZqBuGKdSCwLM7axUz qra2Cav5ZYQwAAbOojwOGbAC2bg/WlW8+pSMZZ4Nl3SPRifkFJF9oY0rJsgiTqVd Atpq89l7OEProJVsoWJqNtH5JX1/eZsifnbT7oIdKDmIWefAXkNyjvTsGwVtG5YP PeHGCfZmDkCl0VKRefOZ3rja2Y2a9NE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:38 2025 by rpki-client