$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa File: a71b911c-6645-3ed7-91de-4999d41633e7.roa (raw, json) Hash identifier: M3dnv+kL8+1zFj1uCtp5oKFHJMJZX/sCpJZeNcTNDO8= Subject key identifier: EF:6B:ED:B6:B0:B9:97:8C:47:A3:6C:A4:83:3A:31:B0:6E:77:E7:EC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124FBA020416A2F1868B40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4f:ba:02:04:16:a2:f1:86:8b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cf533ad5-611d-4d35-8510-94837d530026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:43:7f:09:61:c4:ce:32:0e:93:66:09:d6: 11:08:09:34:65:97:d2:d5:db:46:68:16:09:df:6b: 75:85:76:09:da:c7:a4:41:3a:aa:57:9b:fa:03:3a: 30:56:d9:12:02:91:57:fb:73:c9:e6:dc:c3:33:19: 78:8c:54:e7:92:ac:d8:c3:04:2a:f4:e0:19:22:32: ac:5f:2c:81:2b:91:c4:3c:b2:48:a2:69:9b:f2:0b: 26:98:13:23:9e:a3:2c:1c:e9:74:a9:4d:cb:81:c9: 00:23:12:b5:1f:d4:f6:76:77:b9:2d:f2:06:f3:5f: 9d:17:92:1e:bd:0a:01:bd:e2:63:49:6c:12:8c:cc: 02:92:30:1e:c7:cf:d8:bd:5a:ea:bc:68:64:ea:f2: 51:7f:49:f9:62:c0:af:93:b1:ee:65:ef:2d:5d:d4: ba:4f:2d:2c:53:1e:60:e3:80:0f:89:f7:25:41:8c: 2b:d9:f8:36:15:bc:03:1b:69:74:87:96:e1:12:47: 03:3d:ba:e0:ea:c5:8d:0c:e2:12:1e:01:be:75:03: 31:60:0b:05:4d:43:4e:73:0c:d3:10:c0:d1:7b:b6: cf:9f:3a:ef:57:4e:1d:39:98:b1:91:94:e4:a7:e3: b8:13:41:fe:78:17:75:c5:75:d3:76:85:01:96:ee: 79:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:6B:ED:B6:B0:B9:97:8C:47:A3:6C:A4:83:3A:31:B0:6E:77:E7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a71b911c-6645-3ed7-91de-4999d41633e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:e2:6a:9b:54:ce:98:da:71:7f:62:de:ae:70:f3:0f:af:9d: da:8f:02:f2:bc:ed:90:13:bb:2f:39:5a:ce:a7:94:59:b4:b1: 9b:3a:32:37:1b:23:5a:c5:56:5a:f1:78:9f:f4:0f:cb:cd:be: 05:52:b9:15:a9:63:d7:62:30:c7:dc:2f:b6:bc:9c:36:54:7a: a4:41:0f:64:11:36:42:88:d8:16:78:a5:f6:95:67:1f:f2:35: 66:e5:39:d3:cc:df:5a:42:5b:77:2c:11:f3:23:b0:9a:31:eb: 84:f6:c4:04:d7:7c:3a:eb:91:21:4a:5e:ed:09:78:31:fa:8a: 89:98:22:4b:cc:a7:9f:2f:f9:7d:d5:fc:1d:14:f9:9f:2b:16: cc:3d:01:4d:a9:bf:32:4e:fb:2a:03:f7:6b:02:7c:1f:ca:c7: 76:fb:52:d4:74:de:b7:06:14:e5:ff:ea:3c:c0:34:5c:6e:92: 2e:1b:b2:a0:1d:c9:f8:0f:bf:f4:73:71:17:7b:cd:14:e6:ac: ec:85:03:fa:3b:1d:66:b4:12:0e:15:3f:ae:b2:ff:ec:96:9c: 40:07:e9:25:be:8b:3f:41:f6:b0:84:48:be:48:eb:16:23:18: cb:60:68:56:83:33:d3:a4:d1:08:c4:6a:fe:4d:dc:89:aa:c2: 02:1b:72:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEk+6AgQWovGGi0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2Y1MzNhZDUtNjExZC00ZDM1LTg1MTAtOTQ4MzdkNTMwMDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsdDfwlhxM4yDpNmCdYRCAk0ZZfS1dtGaBYJ 32t1hXYJ2sekQTqqV5v6AzowVtkSApFX+3PJ5tzDMxl4jFTnkqzYwwQq9OAZIjKs XyyBK5HEPLJIommb8gsmmBMjnqMsHOl0qU3LgckAIxK1H9T2dne5LfIG81+dF5Ie vQoBveJjSWwSjMwCkjAex8/YvVrqvGhk6vJRf0n5YsCvk7HuZe8tXdS6Ty0sUx5g 44APifclQYwr2fg2FbwDG2l0h5bhEkcDPbrg6sWNDOISHgG+dQMxYAsFTUNOcwzT EMDRe7bPnzrvV04dOZixkZTkp+O4E0H+eBd1xXXTdoUBlu55+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9r7bawuZeMR6NspIM6MbBud+fsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTcxYjkxMWMtNjY0NS0z ZWQ3LTkxZGUtNDk5OWQ0MTYzM2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRR4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELiaptUzpjacX9i3q5w8w+vndqPAvK87ZATuy85Ws6nlFm0sZs6Mjcb I1rFVlrxeJ/0D8vNvgVSuRWpY9diMMfcL7a8nDZUeqRBD2QRNkKI2BZ4pfaVZx/y NWblOdPM31pCW3csEfMjsJox64T2xATXfDrrkSFKXu0JeDH6iomYIkvMp58v+X3V /B0U+Z8rFsw9AU2pvzJO+yoD92sCfB/Kx3b7UtR03rcGFOX/6jzANFxuki4bsqAd yfgPv/RzcRd7zRTmrOyFA/o7HWa0Eg4VP66y/+yWnEAH6SW+iz9B9rCESL5I6xYj GMtgaFaDM9Ok0QjEav5N3ImqwgIbcgY= -----END CERTIFICATE-----Generated at Tue Aug 5 23:05:43 2025 by rpki-client