$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa File: d8921189-8a05-30ea-b129-092968bc220d.roa (raw, json) Hash identifier: kr8qeoG0iYmhLjBcMo0ltWf9nnXhl9dgsfatJITleJs= Subject key identifier: FA:2C:B7:11:50:EC:57:F9:A2:A6:AE:54:04:8F:A6:EF:06:65:E5:7D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE633E5903CF409CE3C080 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.20.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:63:3e:59:03:cf:40:9c:e3:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=541f2dfa-2f5c-4ceb-bd9b-855573589ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5b:37:01:11:36:ca:58:74:d0:92:8a:e2:55: 79:1d:49:e3:01:f0:77:9c:0c:d1:28:e9:79:d4:1a: fd:8f:d9:76:d5:fc:6e:cf:2c:cb:51:e8:59:1d:9b: 5e:b1:7b:45:59:32:bc:60:7f:0b:68:eb:b2:b9:ea: 87:f1:8f:8c:81:d9:2e:32:b5:e7:01:96:24:a3:1c: 8d:85:26:cc:49:4c:5e:35:72:72:54:1c:0a:08:4f: 2e:9f:3b:db:7c:56:42:da:93:41:f5:ac:41:a3:4c: 8c:c0:e2:66:b7:a9:bf:a2:97:07:a6:bc:94:ee:f9: 5b:63:49:ff:18:56:ce:d2:e9:ac:61:4c:6b:13:5a: 67:ff:04:2a:c3:4f:36:08:9e:98:5a:bc:52:56:b4: 0b:09:bf:69:48:a9:d1:09:7f:9c:06:e4:0f:86:2c: e2:b8:f3:cc:1c:01:14:d7:80:71:8a:18:29:e7:5b: 23:03:9a:63:2f:84:49:aa:46:65:8d:03:34:80:e9: 27:89:7f:4b:2c:30:8c:01:c2:97:ff:26:dd:4b:31: 83:de:e7:57:c2:5c:54:35:b4:8e:84:78:cf:5f:4a: 64:9b:66:6b:64:fa:7a:8a:03:32:ac:ae:d1:f3:78: 8b:8e:54:39:4e:d8:13:a0:e1:99:b4:3d:ea:e2:db: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2C:B7:11:50:EC:57:F9:A2:A6:AE:54:04:8F:A6:EF:06:65:E5:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d8921189-8a05-30ea-b129-092968bc220d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:4c:7b:b8:84:c2:f1:b4:a4:08:4b:56:5e:5d:22:61:89:d8: 61:a2:e2:37:b8:17:70:cb:af:25:e4:ef:5e:5e:b1:2c:ee:95: de:1f:07:57:09:fb:01:c6:48:48:40:70:c2:d5:81:dc:f5:d9: 46:97:a8:7a:ee:ef:a9:1d:fe:a5:36:fa:49:67:95:ef:ad:06: 39:74:17:38:57:67:8b:83:7c:19:d4:e6:12:36:8f:27:ae:5f: 04:bb:f0:ca:fb:c3:dd:4e:ad:c0:42:99:39:b0:f5:c1:d0:15: 18:eb:cf:40:bf:31:29:2a:9e:4f:30:a4:ff:24:44:e1:fb:f4: 2d:6e:94:2e:e3:55:78:dd:3a:1d:6a:29:e2:38:b0:5b:2d:28: 3e:3a:c0:b9:b0:1a:ac:7f:c4:72:07:65:1a:67:10:36:ee:51: bf:4e:7b:17:88:85:a4:03:6a:37:6d:e6:45:37:1b:6c:d2:e7: 9c:ee:23:d4:5c:bb:ab:b0:96:f2:f2:7a:38:d0:89:0e:e7:f3: f3:09:ed:77:20:cd:87:0c:3a:c7:53:5c:1f:cc:76:17:12:e3: 02:4b:a1:f3:b2:b0:3a:b8:42:e2:bc:c8:16:ab:d6:00:33:01: ab:00:35:b5:79:a6:30:18:1c:ed:c4:4b:d4:90:0b:7f:38:80: 57:9c:57:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzmM+WQPPQJzjwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTQxZjJkZmEtMmY1Yy00Y2ViLWJkOWItODU1NTczNTg5ZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVs3ARE2ylh00JKK4lV5HUnjAfB3nAzRKOl5 1Br9j9l21fxuzyzLUehZHZtesXtFWTK8YH8LaOuyueqH8Y+MgdkuMrXnAZYkoxyN hSbMSUxeNXJyVBwKCE8unzvbfFZC2pNB9axBo0yMwOJmt6m/opcHpryU7vlbY0n/ GFbO0umsYUxrE1pn/wQqw082CJ6YWrxSVrQLCb9pSKnRCX+cBuQPhiziuPPMHAEU 14Bxihgp51sjA5pjL4RJqkZljQM0gOkniX9LLDCMAcKX/ybdSzGD3udXwlxUNbSO hHjPX0pkm2ZrZPp6igMyrK7R83iLjlQ5TtgToOGZtD3q4tuGOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPostxFQ7Ff5oqauVASPpu8GZeV9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDg5MjExODktOGEwNS0z MGVhLWIxMjktMDkyOTY4YmMyMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGRMe7iEwvG0pAhLVl5dImGJ2GGi4je4F3DLryXk715esSzuld4fB1cJ +wHGSEhAcMLVgdz12UaXqHru76kd/qU2+klnle+tBjl0FzhXZ4uDfBnU5hI2jyeu XwS78Mr7w91OrcBCmTmw9cHQFRjrz0C/MSkqnk8wpP8kROH79C1ulC7jVXjdOh1q KeI4sFstKD46wLmwGqx/xHIHZRpnEDbuUb9OexeIhaQDajdt5kU3G2zS55zuI9Rc u6uwlvLyejjQiQ7n8/MJ7XcgzYcMOsdTXB/MdhcS4wJLofOysDq4QuK8yBar1gAz AasANbV5pjAYHO3ES9SQC384gFecVxc= -----END CERTIFICATE-----Generated at Wed Nov 5 06:53:26 2025 by rpki-client