$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa File: c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa (raw, json) Hash identifier: zVImV5De+C+EJO9nUXluEETw3WCfkYAeNU5BUdm+n3c= Subject key identifier: 10:03:42:F2:D7:44:E8:7E:18:2F:89:3A:F9:D4:30:04:A2:A3:CD:CC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841258E9A92CDA89007C3B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:58:e9:a9:2c:da:89:00:7c:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3b896f4c-59a4-4884-832c-e9ba7f49eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d6:f9:ab:cc:e9:3a:d1:e1:86:20:bf:ef:6a: b6:8e:c3:5e:99:d1:89:04:4f:de:ae:5e:a4:13:9d: 50:8e:98:e8:3b:95:1d:ef:ca:2a:4c:bd:ee:6d:3a: 8c:5a:e1:42:09:e6:ba:8a:51:85:62:38:a4:fb:e3: 9d:6b:8d:aa:28:b7:6f:dc:cc:bc:91:aa:03:70:65: 5c:8b:4f:3e:19:2b:c1:53:e0:af:2d:f8:03:05:88: 8d:68:44:4d:72:ef:39:31:c2:ea:e5:65:87:36:d5: 8d:a4:e8:6d:8b:0f:07:1b:08:bf:c5:22:e9:29:87: 62:b2:56:fe:28:17:ee:af:b5:cb:70:e5:23:47:fa: 67:33:56:a2:8b:fc:84:95:2b:ce:bd:66:57:62:ad: 40:e9:91:dc:a6:3b:85:0e:b5:a6:22:00:01:f0:1f: 08:2e:6c:a4:59:81:51:7b:f2:ca:c2:8a:b4:a4:78: bb:4e:a9:53:09:9e:da:38:4e:64:a6:49:91:8d:49: 1e:09:44:77:86:f0:be:57:41:2b:4a:a7:d5:93:d7: e2:23:c9:1b:2b:92:34:ed:23:f1:d7:97:3d:92:ab: 50:0c:e6:8c:2d:ac:a4:27:0a:62:b8:35:60:07:84: af:25:83:08:99:90:da:40:c3:45:36:2b:8e:01:60: aa:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:03:42:F2:D7:44:E8:7E:18:2F:89:3A:F9:D4:30:04:A2:A3:CD:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c1fa6f86-5c5f-35e8-b050-4d0d08635614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.124.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:a6:94:0a:3b:a2:f7:12:42:a9:1b:51:5b:82:88:d0:32:ca: 5c:1a:b0:f1:0e:d4:ec:ac:33:4e:ba:9d:37:dc:5c:f8:e6:b9: f2:16:c4:5e:3b:ef:a1:a4:ae:88:ef:13:14:cf:79:5e:02:24: e6:6a:ff:06:3e:ff:1b:f2:ed:3c:b1:46:6a:d8:25:41:7a:4b: b8:93:67:e9:08:a1:57:02:97:28:82:03:4b:be:87:db:cb:4e: 11:42:9d:63:fd:8c:36:02:60:a0:3f:64:17:e0:84:07:da:58: e0:2f:bf:a0:73:02:f9:a9:c4:6e:8b:21:29:2f:c5:eb:d3:81: 81:18:8d:1e:9a:e3:c6:7a:86:bb:59:b0:a2:52:1f:31:ea:22: bc:d6:88:a9:57:10:a2:e2:9b:24:46:43:82:74:54:aa:43:db: 48:32:f7:dd:0b:91:d0:5b:bd:30:5e:ae:8a:43:67:e2:8b:37: eb:2a:25:47:4d:ac:73:a9:26:8c:60:00:90:2d:b6:13:1f:ff: 91:87:b5:58:b6:bb:41:0a:dd:72:ad:b6:ab:c3:d7:92:70:c4: c8:a4:20:e2:79:4d:48:c7:90:13:98:ca:3e:09:2e:f8:0d:14: 3a:45:09:f9:b6:a6:a6:ea:86:f0:56:4e:29:6b:7a:11:57:c0: e2:3e:da:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEljpqSzaiQB8OwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2I4OTZmNGMtNTlhNC00ODg0LTgzMmMtZTliYTdmNDllYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs9b5q8zpOtHhhiC/72q2jsNemdGJBE/erl6k E51QjpjoO5Ud78oqTL3ubTqMWuFCCea6ilGFYjik++Oda42qKLdv3My8kaoDcGVc i08+GSvBU+CvLfgDBYiNaERNcu85McLq5WWHNtWNpOhtiw8HGwi/xSLpKYdislb+ KBfur7XLcOUjR/pnM1aii/yElSvOvWZXYq1A6ZHcpjuFDrWmIgAB8B8ILmykWYFR e/LKwoq0pHi7TqlTCZ7aOE5kpkmRjUkeCUR3hvC+V0ErSqfVk9fiI8kbK5I07SPx 15c9kqtQDOaMLaykJwpiuDVgB4SvJYMImZDaQMNFNiuOAWCqGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBADQvLXROh+GC+JOvnUMASio83MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzFmYTZmODYtNWM1Zi0z NWU4LWIwNTAtNGQwZDA4NjM1NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRR8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmmlAo7ovcSQqkbUVuCiNAyylwasPEO1OysM066nTfcXPjmufIWxF47 76GkrojvExTPeV4CJOZq/wY+/xvy7TyxRmrYJUF6S7iTZ+kIoVcClyiCA0u+h9vL ThFCnWP9jDYCYKA/ZBfghAfaWOAvv6BzAvmpxG6LISkvxevTgYEYjR6a48Z6hrtZ sKJSHzHqIrzWiKlXEKLimyRGQ4J0VKpD20gy990LkdBbvTBeropDZ+KLN+sqJUdN rHOpJoxgAJAtthMf/5GHtVi2u0EK3XKttqvD15JwxMikIOJ5TUjHkBOYyj4JLvgN FDpFCfm2pqbqhvBWTilrehFXwOI+2j0= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:55 2025 by rpki-client