$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa File: b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa (raw, json) Hash identifier: tJjh4sIrLQZzeFCsIG3BJim4wiOJg9CD8fo+g3ennsY= Subject key identifier: AA:AD:2A:90:BE:DB:FC:43:B8:89:74:48:C3:19:31:46:64:6D:A3:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE45893253438574EF8A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:45:89:32:53:43:85:74:ef:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b3c0c22b-16be-42f9-8ef4-e03d5b9453b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:65:57:b3:3d:bb:11:86:bd:98:52:80:65:f8: 5e:26:4b:fc:17:6a:de:ad:43:48:09:f3:77:67:7e: a7:e8:28:5c:ea:99:85:a6:87:3b:99:b2:8f:50:38: 89:82:a4:dd:f2:47:0d:1a:9c:35:a4:06:b6:e0:82: a1:c2:4a:57:55:92:4d:cc:56:86:d2:94:7b:8e:f5: a1:07:bf:b4:98:5c:5a:a3:0c:8f:18:5b:ea:ac:82: db:f4:35:d8:6e:9d:59:b0:d0:4e:11:06:5f:69:55: 6d:3c:fd:7d:6a:77:0c:fb:7d:1d:13:3c:22:42:76: 8c:fa:44:d2:d1:8b:7a:0e:56:9e:25:43:e9:26:59: 0c:90:8e:98:1d:db:68:34:b9:48:e0:a6:82:8d:a9: 0e:88:0f:91:a1:5f:73:00:9b:62:c9:02:05:e4:58: f2:c2:5f:8e:86:29:cf:20:7b:ce:c4:58:b0:a2:c2: c6:de:84:93:6c:0f:47:da:4d:c0:e3:82:c1:30:89: 61:3f:b5:ae:0e:d3:2a:a0:62:c6:6d:a4:74:55:7c: 9f:60:a8:56:41:ce:d0:18:f2:eb:9f:53:4e:82:f4: 58:e6:79:f3:b5:41:ff:92:7a:b8:d2:39:99:57:a8: f9:77:38:76:f1:f8:e1:4c:d4:8d:6f:b1:8a:cd:de: 95:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:AD:2A:90:BE:DB:FC:43:B8:89:74:48:C3:19:31:46:64:6D:A3:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b0c1ff6c-0970-3758-8d8c-239d6b28fa99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:4a:19:d8:fc:45:15:b8:88:e4:b7:ce:f5:bd:e1:8f:2c:49: b1:7e:78:f2:19:3c:4c:e2:a0:42:2e:18:b2:2b:1b:78:42:5b: cd:30:33:57:b0:fc:ff:29:62:82:5a:3e:11:56:88:0f:31:ed: 7e:dc:32:19:7b:74:2e:de:14:9a:24:a7:12:69:5c:37:d5:61: 5c:04:f4:0d:76:5e:be:1a:e1:f1:58:5c:a7:27:af:57:ab:a4: 17:93:bf:e1:44:37:82:56:3a:c7:b0:dd:cb:21:fd:4f:42:9e: b1:39:eb:12:52:cb:05:df:0a:30:8c:55:7f:af:2c:93:b7:93: e3:80:52:84:4b:5a:18:77:1d:27:a0:66:89:53:9d:21:ab:0c: 62:74:6b:96:be:bb:ee:2e:63:87:07:26:84:0d:e3:f5:df:ce: cd:a3:38:a6:43:ab:fd:55:4c:9b:dc:87:cc:ef:02:d3:98:1a: 1a:8c:db:c4:95:a1:82:a4:0b:f2:64:ba:0e:fe:02:9f:38:2e: ce:5c:95:6b:9a:22:9d:b8:b3:5c:43:86:7d:75:04:76:2e:1f: 8a:1a:d2:b2:21:0f:01:d0:0c:39:01:94:b2:59:80:6f:7c:9d: 7b:e4:6f:38:1a:0d:78:7d:e5:64:73:bc:5c:17:e8:81:2b:fa: 5e:0c:a5:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkWJMlNDhXTvigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjNjMGMyMmItMTZiZS00MmY5LThlZjQtZTAzZDViOTQ1M2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGVXsz27EYa9mFKAZfheJkv8F2rerUNICfN3 Z36n6Chc6pmFpoc7mbKPUDiJgqTd8kcNGpw1pAa24IKhwkpXVZJNzFaG0pR7jvWh B7+0mFxaowyPGFvqrILb9DXYbp1ZsNBOEQZfaVVtPP19ancM+30dEzwiQnaM+kTS 0Yt6DlaeJUPpJlkMkI6YHdtoNLlI4KaCjakOiA+RoV9zAJtiyQIF5Fjywl+OhinP IHvOxFiwosLG3oSTbA9H2k3A44LBMIlhP7WuDtMqoGLGbaR0VXyfYKhWQc7QGPLr n1NOgvRY5nnztUH/knq40jmZV6j5dzh28fjhTNSNb7GKzd6VXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqtKpC+2/xDuIl0SMMZMUZkbaM+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjBjMWZmNmMtMDk3MC0z NzU4LThkOGMtMjM5ZDZiMjhmYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNKGdj8RRW4iOS3zvW94Y8sSbF+ePIZPEzioEIuGLIrG3hCW80wM1ew /P8pYoJaPhFWiA8x7X7cMhl7dC7eFJokpxJpXDfVYVwE9A12Xr4a4fFYXKcnr1er pBeTv+FEN4JWOsew3csh/U9CnrE56xJSywXfCjCMVX+vLJO3k+OAUoRLWhh3HSeg ZolTnSGrDGJ0a5a+u+4uY4cHJoQN4/Xfzs2jOKZDq/1VTJvch8zvAtOYGhqM28SV oYKkC/Jkug7+Ap84Ls5clWuaIp24s1xDhn11BHYuH4oa0rIhDwHQDDkBlLJZgG98 nXvkbzgaDXh95WRzvFwX6IEr+l4MpS8= -----END CERTIFICATE-----Generated at Wed Nov 5 08:36:11 2025 by rpki-client