$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa File: d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa (raw, json) Hash identifier: U2q4iGITYPB532p7RqaDAGkbuPr1+YC8gPYxqAzMhCw= Subject key identifier: 3E:22:5E:C2:AE:2B:D1:EE:F0:F3:65:E7:64:82:3E:72:0A:75:67:4D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A814662EC8B96B7B5CF071580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa Signing time: Sun 13 Jul 2025 13:01:03 +0000 ROA not before: Sun 13 Jul 2025 13:01:03 +0000 ROA not after: Sat 11 Oct 2025 13:01:03 +0000 asID: 30036 IP address blocks: 173.20.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:81:46:62:ec:8b:96:b7:b5:cf:07:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 13 13:01:03 2025 GMT Not After : Oct 11 13:01:03 2025 GMT Subject: CN=782182a0-ffa8-4637-93f5-50aa6f19f71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2b:4d:dc:c2:44:b9:8c:e3:97:3d:5a:08:d3: dd:5c:38:83:9a:d3:f7:54:f3:14:fb:99:cb:cb:36: ad:9d:0c:9e:5f:fb:a7:11:28:08:7a:ec:33:72:f5: 69:fc:03:55:f9:93:d8:9c:19:aa:8f:c4:14:04:f8: 71:7e:ce:1c:3f:be:4b:c7:94:95:99:dd:9f:f1:00: 62:c5:13:60:fa:ae:7a:ec:1e:f3:f2:36:ce:d5:e0: 4a:a9:2e:71:76:25:d3:96:ca:1e:29:0e:4a:0b:08: 42:3c:a8:c1:ad:7f:ac:26:e5:3c:9d:81:0f:df:c1: 93:86:e5:e4:22:6b:7d:38:42:be:75:23:bd:7b:5e: 75:7e:b2:24:2c:5b:a5:fa:49:a5:2c:29:2e:c5:f6: 6d:cc:f9:98:92:16:8a:f8:bb:f3:d8:d9:38:0d:21: 66:5b:18:8b:14:2b:8b:ce:30:92:e7:20:12:6a:5c: 04:77:89:35:c1:d7:c0:d4:37:41:a2:e0:21:2e:fa: f8:fc:64:f9:ec:0a:35:a1:ba:13:28:83:6e:64:60: 9d:11:b7:ca:51:12:64:6f:71:b6:f7:23:c5:60:44: 92:9e:4e:a2:a6:0a:f4:ce:7e:30:4c:df:54:0c:9a: a8:e5:be:0e:f6:dc:12:e8:9a:d9:7e:4a:4a:01:39: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:22:5E:C2:AE:2B:D1:EE:F0:F3:65:E7:64:82:3E:72:0A:75:67:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d4b5e94a-6b60-3496-b03c-5f4cbe337664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.122.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:46:2f:32:7c:bc:27:f4:b5:af:fa:15:76:57:17:73:f4:cf: 76:00:a7:bb:66:18:f7:cd:7d:04:75:93:86:a2:ff:1d:e6:e9: 88:78:5d:16:4c:d2:c6:4d:19:19:dc:39:22:1c:cd:6a:2f:2c: 35:63:1a:5c:77:03:58:98:62:c9:17:2e:27:ac:ba:28:e7:5a: 70:a1:51:a7:61:8a:1a:2c:b0:b7:2a:0f:75:3b:61:7d:6c:39: ef:10:81:2f:89:02:d7:d9:a2:05:1a:1b:c6:1f:b4:b9:51:fc: b4:78:34:b1:33:56:b1:42:32:b3:4a:3f:d2:84:40:2b:a5:57: 99:07:94:fa:58:20:c3:2e:bb:15:f3:a1:52:cf:8c:06:7f:40: f5:9f:d2:74:01:38:cf:65:71:b4:42:c3:47:b4:85:c3:44:3d: c2:92:07:56:ed:42:b5:35:9b:2f:ff:80:1d:ba:8d:1f:93:21: 2e:36:c7:08:03:b1:29:a6:0d:f1:4a:bf:03:c5:78:ed:48:a3: 87:12:b9:15:c9:10:a5:16:d6:b6:36:14:1c:be:c5:fe:04:f4: ab:e6:93:9b:66:6f:a2:9d:e2:c0:7d:d6:43:0d:2b:fa:fe:b7: f4:2b:ee:fc:db:8b:5d:82:e5:f6:79:d2:f5:44:e0:f0:d6:83: 63:06:20:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRmLsi5a3tc8HFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk NzgyMTgyYTAtZmZhOC00NjM3LTkzZjUtNTBhYTZmMTlmNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxStN3MJEuYzjlz1aCNPdXDiDmtP3VPMU+5nL yzatnQyeX/unESgIeuwzcvVp/ANV+ZPYnBmqj8QUBPhxfs4cP75Lx5SVmd2f8QBi xRNg+q567B7z8jbO1eBKqS5xdiXTlsoeKQ5KCwhCPKjBrX+sJuU8nYEP38GThuXk Imt9OEK+dSO9e151frIkLFul+kmlLCkuxfZtzPmYkhaK+Lvz2Nk4DSFmWxiLFCuL zjCS5yASalwEd4k1wdfA1DdBouAhLvr4/GT57Ao1oboTKINuZGCdEbfKURJkb3G2 9yPFYESSnk6ipgr0zn4wTN9UDJqo5b4O9twS6JrZfkpKATm/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4iXsKuK9Hu8PNl52SCPnIKdWdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDRiNWU5NGEtNmI2MC0z NDk2LWIwM2MtNWY0Y2JlMzM3NjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRR6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5GLzJ8vCf0ta/6FXZXF3P0z3YAp7tmGPfNfQR1k4ai/x3m6Yh4XRZM 0sZNGRncOSIczWovLDVjGlx3A1iYYskXLiesuijnWnChUadhihossLcqD3U7YX1s Oe8QgS+JAtfZogUaG8YftLlR/LR4NLEzVrFCMrNKP9KEQCulV5kHlPpYIMMuuxXz oVLPjAZ/QPWf0nQBOM9lcbRCw0e0hcNEPcKSB1btQrU1my//gB26jR+TIS42xwgD sSmmDfFKvwPFeO1Io4cSuRXJEKUW1rY2FBy+xf4E9Kvmk5tmb6Kd4sB91kMNK/r+ t/Qr7vzbi12C5fZ50vVE4PDWg2MGIPI= -----END CERTIFICATE-----Generated at Wed Aug 6 04:14:21 2025 by rpki-client