$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa File: b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa (raw, json) Hash identifier: /d7ouH/eRgU2FKGcPGETHtvaPoHlXzQaz6NPMpO2qVM= Subject key identifier: 3C:F1:11:ED:78:AF:5C:B6:EE:C0:7F:94:90:25:AC:44:D9:AC:C5:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A86DC060F20E404F51A68CE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa Signing time: Tue 15 Jul 2025 13:01:04 +0000 ROA not before: Tue 15 Jul 2025 13:01:04 +0000 ROA not after: Mon 13 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.32.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:86:dc:06:0f:20:e4:04:f5:1a:68:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 13:01:04 2025 GMT Not After : Oct 13 13:01:04 2025 GMT Subject: CN=76bc8253-1e44-4cee-a97e-2c30e8507bdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:51:a8:0a:27:73:e4:fe:73:a8:c6:3b:57:d8: 4a:49:4d:43:87:8c:c0:05:3e:54:89:17:15:4e:c7: 7b:9e:78:f7:f0:3a:70:32:86:ef:a3:29:8e:6a:41: b3:26:48:86:56:51:57:bf:08:1c:75:15:cf:8d:fb: 9d:1a:84:c6:c1:e3:ba:8f:4a:cc:ae:6f:2f:ec:f0: ad:3d:3b:e4:64:ae:7c:d3:8e:6b:2c:1e:9c:fe:1f: db:d3:b6:b0:b0:d5:1b:ed:3a:df:03:58:b2:73:90: a9:3a:e2:d7:eb:3b:f2:c8:5d:49:47:ab:d6:47:ee: e5:4f:14:7b:77:99:d4:07:25:7a:9a:fb:25:93:18: 58:60:ce:60:de:0b:d7:b4:11:61:e0:b0:96:da:2e: a4:59:2e:10:e6:77:63:57:85:4d:b3:c4:61:38:57: 4f:b7:80:69:9e:67:59:f1:d1:c3:4b:1c:bb:f0:ea: 27:29:3d:0e:0b:f7:41:4c:54:cb:99:79:89:8a:c7: 32:74:fb:73:14:11:2f:06:42:ec:7b:dd:58:50:52: 73:b2:56:6c:94:7d:c5:5e:80:2c:5a:e5:4f:31:8b: 8b:b0:0c:80:06:1c:fd:a2:88:6c:ef:f6:ca:62:48: c9:60:98:34:3d:b0:fc:e8:6e:b8:46:4b:81:97:d4: 86:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F1:11:ED:78:AF:5C:B6:EE:C0:7F:94:90:25:AC:44:D9:AC:C5:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0abd5f1-a9e6-3ba5-acf8-3a8445a4b7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9c:2d:f3:14:8f:db:fe:46:65:7c:17:e4:56:7b:63:4f:d8: 93:88:d5:17:f9:7e:06:d7:fd:d2:48:80:f4:c2:97:ec:55:68: 3f:dc:07:83:cc:bc:60:8c:cd:33:13:80:e3:e3:58:ef:1f:11: 75:bd:a6:a8:ea:d6:3e:50:73:5d:08:f1:1d:4f:15:1d:65:63: ef:f5:ab:b8:f6:a3:eb:e2:be:db:98:55:18:05:d0:2f:4e:5b: 9b:3f:f2:14:31:cf:19:17:f3:69:72:94:b9:3b:6d:59:3c:7e: 72:af:1c:6a:74:ea:f3:fe:56:18:92:e6:73:af:f0:01:64:23: 04:8e:c0:f7:30:45:80:dc:c7:14:c5:a6:de:6c:7f:6a:d8:77: ce:52:4e:81:88:e5:cd:82:97:bd:45:0a:95:fa:58:dc:ce:22: f4:13:a8:91:db:35:46:12:00:8b:e1:2b:cb:13:1a:4d:e3:0c: ac:73:eb:30:4e:d6:36:71:82:43:d2:86:7c:2b:0b:5e:f7:72: 4f:b5:65:cd:35:6b:48:f4:42:cc:90:2c:80:10:b9:91:17:de: 7a:85:f4:23:ae:50:3b:ac:c0:a4:f4:12:32:68:b3:02:64:f6: f6:32:ad:da:82:c1:ca:1c:5a:86:3b:60:c5:f1:4e:ba:5d:3a: 76:72:f1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqG3AYPIOQE9RpozgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk NzZiYzgyNTMtMWU0NC00Y2VlLWE5N2UtMmMzMGU4NTA3YmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1GoCidz5P5zqMY7V9hKSU1Dh4zABT5UiRcV Tsd7nnj38DpwMobvoymOakGzJkiGVlFXvwgcdRXPjfudGoTGweO6j0rMrm8v7PCt PTvkZK58045rLB6c/h/b07awsNUb7TrfA1iyc5CpOuLX6zvyyF1JR6vWR+7lTxR7 d5nUByV6mvslkxhYYM5g3gvXtBFh4LCW2i6kWS4Q5ndjV4VNs8RhOFdPt4BpnmdZ 8dHDSxy78OonKT0OC/dBTFTLmXmJiscydPtzFBEvBkLse91YUFJzslZslH3FXoAs WuVPMYuLsAyABhz9oohs7/bKYkjJYJg0PbD86G64RkuBl9SGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDzxEe14r1y27sB/lJAlrETZrMXFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBhYmQ1ZjEtYTllNi0z YmE1LWFjZjgtM2E4NDQ1YTRiN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACacLfMUj9v+RmV8F+RWe2NP2JOI1Rf5fgbX/dJIgPTCl+xVaD/cB4PM vGCMzTMTgOPjWO8fEXW9pqjq1j5Qc10I8R1PFR1lY+/1q7j2o+vivtuYVRgF0C9O W5s/8hQxzxkX82lylLk7bVk8fnKvHGp06vP+VhiS5nOv8AFkIwSOwPcwRYDcxxTF pt5sf2rYd85SToGI5c2Cl71FCpX6WNzOIvQTqJHbNUYSAIvhK8sTGk3jDKxz6zBO 1jZxgkPShnwrC173ck+1Zc01a0j0QsyQLIAQuZEX3nqF9COuUDuswKT0EjJoswJk 9vYyrdqCwcocWoY7YMXxTrpdOnZy8eM= -----END CERTIFICATE-----Generated at Tue Aug 5 22:56:50 2025 by rpki-client