$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa File: 99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa (raw, json) Hash identifier: JIUFvtjofmkOfmrrQVtrmqPfv7y5/6HZCP6lYEs/pCU= Subject key identifier: 94:1C:01:A6:67:A7:3E:FD:D5:B0:A7:2A:C1:64:65:58:96:B8:D6:C3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124A166AC49BC13D2F3100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4a:16:6a:c4:9b:c1:3d:2f:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=27cb4ac2-436b-44bc-8ad2-c0f20646b383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:42:04:69:f0:46:30:3f:15:f1:d7:35:eb: 44:01:23:a3:1e:c1:8a:f8:4d:28:e9:e9:20:79:f1: 0a:31:ff:24:93:0b:a9:9c:62:a2:f8:cf:4a:92:ba: 22:5c:82:ff:26:5a:80:b8:45:76:13:4b:3d:ce:16: a4:90:90:b2:d0:e9:e8:94:9e:6c:3a:c9:cc:88:81: e7:b8:a6:ee:95:d8:03:aa:75:61:c7:e3:05:c4:e9: fc:a1:95:56:85:28:97:d2:31:5e:d2:11:3a:88:e0: 12:c2:7f:8f:64:45:7b:07:57:52:73:c0:62:c1:2b: d4:51:bb:01:53:ce:f4:f7:86:2e:39:06:e6:3b:14: 1c:24:90:67:9a:4c:64:db:46:75:da:d1:35:24:26: f3:6a:e8:f7:94:9c:41:91:6a:7b:9d:62:19:20:c9: d6:7a:c2:9a:68:3f:1b:77:01:e0:7c:11:bd:22:e5: da:45:30:4c:4d:25:78:d5:bc:50:79:3d:11:56:73: aa:e4:95:7b:9f:9d:a7:65:d3:37:57:f2:08:43:e8: d8:85:63:d4:6b:2c:e6:15:fd:16:ec:d9:0e:af:91: 02:ee:81:fd:54:95:ff:a2:9d:aa:5c:ee:34:1a:66: 5e:f3:81:b0:93:b1:11:ec:a8:74:f6:55:a1:fe:e5: af:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:01:A6:67:A7:3E:FD:D5:B0:A7:2A:C1:64:65:58:96:B8:D6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99fc4a6a-c757-3b96-98a8-03d52a13a94f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:17:42:2c:d0:7c:36:0e:db:62:81:61:9f:ce:8c:51:9d:3c: 44:79:5b:3d:8b:3c:a3:9b:05:61:d1:f7:19:b1:c2:d0:9f:a3: e9:68:0b:90:1d:d1:20:b4:48:28:34:21:fa:92:9d:04:21:5d: b9:97:28:a3:50:bb:9e:c9:53:c3:5d:4a:db:ff:8b:da:41:20: d8:c7:f8:a7:03:35:13:99:30:ca:5c:43:30:a2:65:e1:e3:27: 24:84:ec:b2:59:65:a9:40:b9:27:f2:b0:51:01:23:a7:98:30: a7:fe:6c:00:94:a6:90:f7:e1:fd:aa:6c:b4:71:e5:db:46:df: 99:30:03:96:d6:de:84:e3:79:42:ac:6c:e2:b4:eb:31:d3:ca: f9:9c:4d:31:f7:a0:a7:4a:71:dd:fe:1f:1c:5a:af:5f:bc:36: 0f:33:c8:3c:f6:09:de:2c:a0:1c:03:e0:f4:77:1f:5c:31:3c: b0:86:9e:06:5a:84:60:8b:79:21:91:2b:fb:38:23:d1:e4:6d: 1c:84:cf:39:49:57:96:76:3e:e5:3b:01:9c:79:c2:50:1f:90: 1a:e9:9e:6c:6b:d5:64:00:bd:16:0d:bb:78:20:fd:5d:e1:70: 4d:d9:af:36:0a:62:67:c9:67:48:df:c0:e6:f1:2a:39:7f:df: fa:35:0e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkoWasSbwT0vMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjdjYjRhYzItNDM2Yi00NGJjLThhZDItYzBmMjA2NDZiMzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDlCBGnwRjA/FfHXNetEASOjHsGK+E0o6ekg efEKMf8kkwupnGKi+M9KkroiXIL/JlqAuEV2E0s9zhakkJCy0OnolJ5sOsnMiIHn uKbuldgDqnVhx+MFxOn8oZVWhSiX0jFe0hE6iOASwn+PZEV7B1dSc8BiwSvUUbsB U87094YuOQbmOxQcJJBnmkxk20Z12tE1JCbzauj3lJxBkWp7nWIZIMnWesKaaD8b dwHgfBG9IuXaRTBMTSV41bxQeT0RVnOq5JV7n52nZdM3V/IIQ+jYhWPUayzmFf0W 7NkOr5EC7oH9VJX/op2qXO40GmZe84Gwk7ER7Kh09lWh/uWvlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJQcAaZnpz791bCnKsFkZViWuNbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTlmYzRhNmEtYzc1Ny0z Yjk2LTk4YTgtMDNkNTJhMTNhOTRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGkXQizQfDYO22KBYZ/OjFGdPER5Wz2LPKObBWHR9xmxwtCfo+loC5Ad 0SC0SCg0IfqSnQQhXbmXKKNQu57JU8NdStv/i9pBINjH+KcDNROZMMpcQzCiZeHj JySE7LJZZalAuSfysFEBI6eYMKf+bACUppD34f2qbLRx5dtG35kwA5bW3oTjeUKs bOK06zHTyvmcTTH3oKdKcd3+Hxxar1+8Ng8zyDz2Cd4soBwD4PR3H1wxPLCGngZa hGCLeSGRK/s4I9HkbRyEzzlJV5Z2PuU7AZx5wlAfkBrpnmxr1WQAvRYNu3gg/V3h cE3ZrzYKYmfJZ0jfwObxKjl/3/o1Dgw= -----END CERTIFICATE-----Generated at Wed Aug 6 04:11:57 2025 by rpki-client