$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa File: be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa (raw, json) Hash identifier: 0FYyRl8esSQJJHGXmlhIer3A9ytKAoX/JrpKKk6zqoU= Subject key identifier: B5:73:63:8C:AD:25:5A:F3:2D:4F:85:13:6C:7F:3A:25:0F:0C:F0:37 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8410D54273E997700691E880 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:d5:42:73:e9:97:70:06:91:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b3dd703e-e3bf-40e7-b703-99a31d3a6475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6a:c0:2a:e5:c9:82:e2:f1:8b:6f:0d:91:69: 63:19:48:85:3a:c8:1f:30:f2:74:ca:e3:d4:ba:b3: bb:99:37:f1:71:b3:f9:f5:37:b1:0b:ac:47:d9:61: 3b:bf:e8:77:59:b3:52:c9:c1:12:d8:ac:e8:b7:ae: 79:45:38:6b:68:4d:c9:f7:ae:98:56:18:f8:b4:11: 72:32:76:6f:13:79:e5:cd:6d:7f:c2:1f:cd:a9:62: c6:b0:4c:1e:5e:24:7f:3d:2c:63:32:3d:69:d2:cd: 2e:ce:7f:de:af:1e:de:74:68:3c:f9:62:04:45:ce: 80:0b:d5:5e:b7:fd:ae:4a:4b:c0:2c:16:52:3d:66: 59:e7:45:87:23:c0:d4:b5:a2:98:a4:59:06:fc:b9: e5:c7:e2:82:a8:97:4d:6c:09:21:60:a7:70:8b:64: 6b:a5:dc:0e:af:b0:e4:09:3b:ee:36:a4:1c:52:51: c4:7f:e2:d7:62:e2:91:4c:0d:68:cd:1a:4e:b7:4b: 58:76:07:14:04:bb:32:83:9f:e6:e1:e1:ab:8f:31: 12:48:92:3c:4b:6f:a7:08:35:e4:bb:74:02:b2:e6: f9:b4:65:16:fe:cf:a5:2d:a6:51:8d:90:05:97:bd: b7:6c:93:ff:ed:49:88:ed:0f:21:eb:c7:f6:4a:a5: 53:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:73:63:8C:AD:25:5A:F3:2D:4F:85:13:6C:7F:3A:25:0F:0C:F0:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be94d24d-4eb2-3ca7-80ea-f7f9a261429c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:07:59:83:ad:80:1e:55:52:4f:aa:86:07:15:7c:ce:ea:90: d7:37:38:b2:59:bf:b4:02:b0:07:56:6c:c2:48:61:59:5f:85: d8:01:2e:01:6f:48:49:a2:ec:53:b4:29:66:08:20:ac:3e:c4: 2f:50:fa:5d:37:16:89:89:07:34:15:e6:6c:01:0b:90:04:be: c2:83:d4:e8:65:3e:10:f1:90:65:a2:dd:08:a5:80:70:4f:8f: da:67:7b:f2:51:13:cf:01:92:da:0c:b4:2b:6c:c8:ac:a2:31: 1f:44:0b:aa:d2:eb:64:c9:be:9e:dd:de:9b:90:14:69:c0:bc: 36:52:c5:fb:7f:d2:ca:f3:e9:8f:f8:91:ac:7a:3a:1a:e2:c4: a7:94:67:ee:14:26:d6:aa:7f:b9:07:db:81:da:33:04:d1:44: c4:79:a5:4c:69:cb:86:04:5e:69:36:dc:da:32:c1:04:f4:13: 23:b8:ec:8e:8b:cb:53:61:44:e0:9f:95:13:df:56:82:81:a7: 0a:28:24:d0:bb:74:e7:40:16:d0:9a:94:38:00:92:15:34:3f: 8c:ce:35:86:fd:31:54:41:5c:77:b9:02:08:89:38:b4:10:71: 5b:8d:84:64:28:d9:e7:9c:ad:61:85:79:d3:10:53:b5:35:66: a2:f2:ef:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEENVCc+mXcAaR6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjNkZDcwM2UtZTNiZi00MGU3LWI3MDMtOTlhMzFkM2E2NDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWrAKuXJguLxi28NkWljGUiFOsgfMPJ0yuPU urO7mTfxcbP59TexC6xH2WE7v+h3WbNSycES2Kzot655RThraE3J966YVhj4tBFy MnZvE3nlzW1/wh/NqWLGsEweXiR/PSxjMj1p0s0uzn/erx7edGg8+WIERc6AC9Ve t/2uSkvALBZSPWZZ50WHI8DUtaKYpFkG/Lnlx+KCqJdNbAkhYKdwi2RrpdwOr7Dk CTvuNqQcUlHEf+LXYuKRTA1ozRpOt0tYdgcUBLsyg5/m4eGrjzESSJI8S2+nCDXk u3QCsub5tGUW/s+lLaZRjZAFl723bJP/7UmI7Q8h68f2SqVTGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLVzY4ytJVrzLU+FE2x/OiUPDPA3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmU5NGQyNGQtNGViMi0z Y2E3LTgwZWEtZjdmOWEyNjE0MjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRTOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcHWYOtgB5VUk+qhgcVfM7qkNc3OLJZv7QCsAdWbMJIYVlfhdgBLgFv SEmi7FO0KWYIIKw+xC9Q+l03FomJBzQV5mwBC5AEvsKD1OhlPhDxkGWi3QilgHBP j9pne/JRE88BktoMtCtsyKyiMR9EC6rS62TJvp7d3puQFGnAvDZSxft/0srz6Y/4 kax6OhrixKeUZ+4UJtaqf7kH24HaMwTRRMR5pUxpy4YEXmk23NoywQT0EyO47I6L y1NhROCflRPfVoKBpwooJNC7dOdAFtCalDgAkhU0P4zONYb9MVRBXHe5AgiJOLQQ cVuNhGQo2eecrWGFedMQU7U1ZqLy75k= -----END CERTIFICATE-----Generated at Wed Aug 6 05:51:11 2025 by rpki-client