$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa File: c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa (raw, json) Hash identifier: bKTBSRAWb+DoIlGlPMMo+3b5Uqt8DbvuRC3ngDwm0EY= Subject key identifier: EB:21:55:DD:E8:47:34:4D:4C:84:FB:45:3C:0C:65:B3:C7:CE:A9:1D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841243CC5B5620663B337CC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.60.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:43:cc:5b:56:20:66:3b:33:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=33ac0e42-69b0-4790-9869-0deb39f4b67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:10:3f:37:4d:3f:f5:4b:2c:ba:4d:cb:72:48: 25:a8:01:98:46:ff:4c:67:cd:ed:82:9e:10:5d:af: 5e:df:31:d5:5e:7a:c8:29:bc:ff:9d:9a:22:11:44: 59:a8:f6:12:51:6f:85:2b:3d:03:00:f7:46:5e:cc: fc:68:b4:fe:6c:47:d4:02:89:c7:d2:d0:af:0b:87: 9a:e5:35:78:11:9e:5a:f6:51:35:17:d7:ba:8c:b0: d0:0d:00:cd:0d:17:37:d7:96:15:c5:fa:9a:9d:23: 1b:3e:a9:0c:cf:4d:05:99:d4:af:1c:bb:e7:09:f9: 2e:cf:da:57:0e:b6:d2:f3:d5:84:5d:13:be:d9:b9: 0c:e9:b7:33:e3:08:22:57:ac:94:aa:bf:e6:49:77: f7:01:da:8f:c8:d2:4e:07:9d:de:45:91:62:f1:a3: 9b:4e:52:af:6f:87:c3:d7:08:53:bd:f1:fc:5a:1a: f9:b6:56:60:19:39:7a:b2:cd:4a:36:a3:37:94:77: b8:df:e0:6f:3c:c4:94:67:22:93:da:ef:ee:e4:5f: b4:b0:28:7c:f6:d5:d9:4c:cd:f9:94:f0:75:71:6c: d1:78:a9:3e:15:d0:d5:e3:5c:07:68:cc:dd:db:1e: 86:4b:eb:ab:65:fe:ab:91:ef:aa:90:b3:0b:fa:38: 0e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:21:55:DD:E8:47:34:4D:4C:84:FB:45:3C:0C:65:B3:C7:CE:A9:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c2f6da8e-7e77-3e5c-ac76-e72f1be59b0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.60.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:82:fa:61:73:43:06:fb:fc:c1:8d:63:3a:b4:89:76:84:03: 7d:d0:ad:e4:c8:fb:e6:37:1c:59:63:6d:f4:f6:46:fa:fa:32: 67:d3:dc:6e:ed:2c:21:ce:51:08:81:c5:4e:3f:9b:84:c7:b8: 40:32:41:33:84:68:22:0e:42:f9:69:f0:15:6a:62:a9:5d:f1: c1:59:46:39:1a:47:86:5b:42:8e:55:ca:b4:b3:68:ad:bd:df: c5:a6:64:fc:e6:52:9b:ae:33:b8:5c:87:cc:7d:cb:e9:49:83: 47:8c:64:76:e1:cc:7f:8e:05:d5:71:b5:fe:0f:5c:e6:ae:72: 08:b2:ba:d7:fa:cd:f9:b9:dd:66:46:bf:d7:b4:f8:ca:ea:3a: ae:a4:7a:4f:7d:68:e0:7b:6c:be:c3:a3:d5:9a:89:cf:b0:41: 3d:7a:39:ba:14:0b:85:63:12:54:f6:cb:df:f6:15:63:67:ca: eb:98:96:61:ba:c8:cf:d0:33:00:32:5c:74:fd:42:d3:98:97: ae:14:0e:2a:24:ba:49:17:c3:50:8d:8d:fa:2e:64:12:05:d3: 1f:78:9a:aa:8f:f2:db:a0:ff:a1:29:9d:d0:9e:59:c2:f8:a0: 0a:1c:0a:de:d3:f2:35:8f:93:8f:7c:d3:c4:32:8c:92:14:31: 3b:b3:41:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkPMW1YgZjszfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzNhYzBlNDItNjliMC00NzkwLTk4NjktMGRlYjM5ZjRiNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RA/N00/9Ussuk3LckglqAGYRv9MZ83tgp4Q Xa9e3zHVXnrIKbz/nZoiEURZqPYSUW+FKz0DAPdGXsz8aLT+bEfUAonH0tCvC4ea 5TV4EZ5a9lE1F9e6jLDQDQDNDRc315YVxfqanSMbPqkMz00FmdSvHLvnCfkuz9pX DrbS89WEXRO+2bkM6bcz4wgiV6yUqr/mSXf3AdqPyNJOB53eRZFi8aObTlKvb4fD 1whTvfH8Whr5tlZgGTl6ss1KNqM3lHe43+BvPMSUZyKT2u/u5F+0sCh89tXZTM35 lPB1cWzReKk+FdDV41wHaMzd2x6GS+urZf6rke+qkLML+jgOowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOshVd3oRzRNTIT7RTwMZbPHzqkdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzJmNmRhOGUtN2U3Ny0z ZTVjLWFjNzYtZTcyZjFiZTU5YjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRQ8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGyC+mFzQwb7/MGNYzq0iXaEA33QreTI++Y3HFljbfT2Rvr6MmfT3G7t LCHOUQiBxU4/m4THuEAyQTOEaCIOQvlp8BVqYqld8cFZRjkaR4ZbQo5VyrSzaK29 38WmZPzmUpuuM7hch8x9y+lJg0eMZHbhzH+OBdVxtf4PXOaucgiyutf6zfm53WZG v9e0+MrqOq6kek99aOB7bL7Do9Waic+wQT16OboUC4VjElT2y9/2FWNnyuuYlmG6 yM/QMwAyXHT9QtOYl64UDiokukkXw1CNjfouZBIF0x94mqqP8tug/6EpndCeWcL4 oAocCt7T8jWPk49808QyjJIUMTuzQTQ= -----END CERTIFICATE-----Generated at Tue Aug 5 22:56:40 2025 by rpki-client