$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa File: a76314ae-59f4-3476-b766-0a9d1e2f435c.roa (raw, json) Hash identifier: gAuXeEgKE13qcBnuZcTGg03npgu6BRVeghc1NgTZVpw= Subject key identifier: 0F:5B:21:D9:42:51:D9:06:FB:17:19:35:63:66:D1:89:74:A6:5E:1E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84124A65084134129D56BF00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:4a:65:08:41:34:12:9d:56:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f7c69c9b-cdf3-4367-b429-4fb52d799c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:86:30:cd:04:4b:35:57:e3:36:4c:da:e7:6a: 6e:ad:74:c9:1a:09:4e:d7:71:6c:cc:c0:80:6c:de: 92:7f:b5:9d:15:aa:d7:62:63:03:39:ba:86:1f:4e: c5:88:a9:52:6c:56:7e:33:0a:55:b1:21:6e:93:d8: 7a:a3:8a:0a:89:8c:ba:2a:44:04:38:e1:99:03:02: cc:64:f4:02:39:1f:34:52:45:c3:8a:da:3a:fe:ff: 74:04:92:e9:61:46:c6:4e:c8:65:b9:5b:a7:1c:60: 35:68:fd:77:d9:64:4a:a2:7c:92:2a:3c:a0:f0:9c: 47:37:51:5f:97:f3:c2:00:05:89:ea:31:c8:c1:8e: 7f:70:2e:81:f9:4b:50:40:f7:6c:2a:c2:db:fd:36: cd:cf:ff:b9:cc:a2:22:d3:4d:86:de:c3:bc:88:ad: bc:4b:6c:e8:e2:0c:53:70:7b:c3:dc:11:31:95:76: 13:06:79:ab:72:35:5e:67:46:37:90:92:6b:ed:7f: 70:e0:f2:68:e2:0d:30:2d:4f:05:db:bf:9c:4a:48: de:56:21:26:de:01:70:35:12:2f:d6:d2:ef:69:16: b5:8b:bb:5b:fc:c1:e8:3a:01:17:ab:6a:b3:d5:e4: 0e:f4:63:5a:27:a9:7c:0d:cc:bb:bd:d3:c3:d9:1d: 42:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:5B:21:D9:42:51:D9:06:FB:17:19:35:63:66:D1:89:74:A6:5E:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a76314ae-59f4-3476-b766-0a9d1e2f435c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:de:d9:a6:23:a0:7c:e7:21:b4:7d:fb:03:da:1b:98:70:95: a3:0d:e9:f0:47:26:8f:1f:c7:b5:47:5e:20:53:ed:40:31:3a: 12:97:82:09:55:d4:ed:fa:f0:e6:a0:73:3a:1b:d1:f3:76:d5: 5f:ca:9f:c1:0c:82:a3:84:dd:82:7a:01:1a:5d:61:60:23:96: 01:c3:bb:32:b1:d5:aa:b9:f8:f0:bd:e8:7e:5a:db:4b:49:56: ca:a3:67:01:6b:ac:e2:94:1c:b8:4b:5b:cd:5f:1d:a6:2e:41: 14:ef:e1:fe:db:f1:50:47:60:81:1f:c9:cf:bb:3a:3d:53:8d: a8:47:32:83:a4:d3:b8:2f:0f:94:70:3c:7a:c8:9f:36:fa:36: 2b:c4:9f:40:ee:35:74:e0:d7:41:ff:b5:2c:44:ea:1f:01:bb: e5:ee:0d:a0:31:57:93:90:17:41:a2:88:b8:fd:c1:0f:a9:79: 5e:1b:07:91:87:53:64:78:e1:a0:fd:6f:d2:1e:02:42:28:25: b3:3a:e6:b9:3f:9d:97:4c:cd:b4:9c:97:14:4d:70:bc:4f:d7: 25:2e:49:84:f0:8d:44:bc:8d:9f:08:34:40:53:29:a7:a0:b5: e3:a3:79:43:1a:e9:67:70:ca:92:bc:6c:35:e9:68:d6:7f:cb: dc:7f:44:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkplCEE0Ep1WvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjdjNjljOWItY2RmMy00MzY3LWI0MjktNGZiNTJkNzk5YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIYwzQRLNVfjNkza52purXTJGglO13FszMCA bN6Sf7WdFarXYmMDObqGH07FiKlSbFZ+MwpVsSFuk9h6o4oKiYy6KkQEOOGZAwLM ZPQCOR80UkXDito6/v90BJLpYUbGTshluVunHGA1aP132WRKonySKjyg8JxHN1Ff l/PCAAWJ6jHIwY5/cC6B+UtQQPdsKsLb/TbNz/+5zKIi002G3sO8iK28S2zo4gxT cHvD3BExlXYTBnmrcjVeZ0Y3kJJr7X9w4PJo4g0wLU8F27+cSkjeViEm3gFwNRIv 1tLvaRa1i7tb/MHoOgEXq2qz1eQO9GNaJ6l8Dcy7vdPD2R1C5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9bIdlCUdkG+xcZNWNm0Yl0pl4eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTc2MzE0YWUtNTlmNC0z NDc2LWI3NjYtMGE5ZDFlMmY0MzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRQcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXe2aYjoHznIbR9+wPaG5hwlaMN6fBHJo8fx7VHXiBT7UAxOhKXgglV 1O368Oagczob0fN21V/Kn8EMgqOE3YJ6ARpdYWAjlgHDuzKx1aq5+PC96H5a20tJ VsqjZwFrrOKUHLhLW81fHaYuQRTv4f7b8VBHYIEfyc+7Oj1TjahHMoOk07gvD5Rw PHrInzb6NivEn0DuNXTg10H/tSxE6h8Bu+XuDaAxV5OQF0GiiLj9wQ+peV4bB5GH U2R44aD9b9IeAkIoJbM65rk/nZdMzbSclxRNcLxP1yUuSYTwjUS8jZ8INEBTKaeg teOjeUMa6WdwypK8bDXpaNZ/y9x/RNQ= -----END CERTIFICATE-----Generated at Tue Aug 5 23:11:49 2025 by rpki-client