$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df906787-cedd-38a4-8780-782b0c370a2a.roa File: df906787-cedd-38a4-8780-782b0c370a2a.roa (raw, json) Hash identifier: fj5lc6kgA2ajudnET4gBBB16enkSnnZVgU5G0ERHfmo= Subject key identifier: 73:F0:26:10:5B:AA:06:8C:0E:C4:7C:2A:47:54:FD:ED:D8:73:17:18 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841244E3035AD2E88C44DD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df906787-cedd-38a4-8780-782b0c370a2a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:44:e3:03:5a:d2:e8:8c:44:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=dffb0f5a-7993-4378-8f2a-2cd99cbbead1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7a:b2:89:62:dc:06:ca:ef:d4:1b:1f:82:db: f2:24:36:ee:5e:db:15:93:c3:04:d5:83:86:2a:b9: eb:7c:8d:db:24:37:d9:ba:ad:d3:0e:5b:d0:b9:d9: cd:ee:c9:ed:a7:08:87:61:85:c3:30:6a:70:d8:88: 1b:6b:8f:8e:44:0f:17:0b:e6:16:85:45:79:c9:ec: b3:30:85:c0:a2:7f:98:26:e3:92:ac:28:88:46:7d: c6:b5:72:b9:61:a8:30:95:00:68:96:dc:3d:f7:b3: 27:db:55:b5:cc:27:35:fc:09:9a:27:42:4f:9c:6d: af:68:78:0e:ba:f6:09:ae:d4:d8:68:0c:25:0c:bc: 97:ee:ea:61:f7:21:b0:a1:7c:2b:5f:81:79:1e:7c: dd:8c:d5:32:c0:7b:e0:6e:65:a2:7e:ae:b1:68:1d: 6f:86:ce:26:8e:f3:7a:a6:eb:fe:13:e0:c8:e7:55: 9c:36:78:08:2e:60:8b:09:d5:a6:b9:7c:39:45:2b: b2:61:85:9b:ee:4b:df:b8:f7:b5:91:9c:9e:79:d4: 8e:84:b2:74:1a:bd:65:43:47:2b:d5:1a:a7:91:17: e4:ea:6b:c5:c4:1c:cd:8e:08:88:c9:91:94:2a:9c: ab:75:a3:0c:a7:18:c9:b3:ec:96:20:f0:f6:cd:9c: a5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F0:26:10:5B:AA:06:8C:0E:C4:7C:2A:47:54:FD:ED:D8:73:17:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/df906787-cedd-38a4-8780-782b0c370a2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:f6:6a:b4:45:6b:bf:d0:f9:d5:1b:02:33:e6:af:02:f3:7c: c0:09:cf:d6:98:d0:3a:90:2a:6f:c5:0c:29:38:b0:e9:53:cd: 46:01:d5:b1:e9:62:66:fd:5f:95:74:24:bb:94:3c:ab:b9:68: 5d:0f:13:79:8b:c3:e4:fa:ff:bf:c3:78:3b:eb:b2:a2:f4:c7: 26:10:23:fd:3f:88:74:be:f5:c5:d0:2e:16:de:60:b8:a2:25: d4:b9:ed:f3:48:6d:3c:93:df:c8:ca:a1:2c:58:25:5e:f8:2a: a8:bd:b4:4d:01:f5:33:ee:80:87:3c:0e:b8:09:2e:2c:fd:93: af:81:b4:56:86:ff:4d:be:59:67:b4:1e:20:3d:39:5d:de:48: 3c:6e:c1:72:5c:29:3b:7c:27:50:c1:1a:54:75:11:da:10:5f: 35:6b:9d:07:57:76:7a:23:0c:59:67:99:51:e1:1c:d3:d4:8d: db:3e:3f:eb:c9:95:88:7e:de:91:c2:23:06:58:33:77:94:60: a1:df:fb:2e:c3:7a:ee:4c:11:00:89:61:73:3f:f4:09:5b:b9: bf:45:d9:9a:0a:69:c1:54:80:79:90:5c:f3:1f:77:aa:be:4f: 2d:e4:1e:ea:9e:3b:29:24:aa:8e:57:0e:57:65:52:32:af:38: 77:9d:f9:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkTjA1rS6IxE3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGZmYjBmNWEtNzk5My00Mzc4LThmMmEtMmNkOTljYmJlYWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3qyiWLcBsrv1BsfgtvyJDbuXtsVk8ME1YOG KrnrfI3bJDfZuq3TDlvQudnN7sntpwiHYYXDMGpw2Igba4+ORA8XC+YWhUV5yeyz MIXAon+YJuOSrCiIRn3GtXK5YagwlQBoltw997Mn21W1zCc1/AmaJ0JPnG2vaHgO uvYJrtTYaAwlDLyX7uph9yGwoXwrX4F5HnzdjNUywHvgbmWifq6xaB1vhs4mjvN6 puv+E+DI51WcNngILmCLCdWmuXw5RSuyYYWb7kvfuPe1kZyeedSOhLJ0Gr1lQ0cr 1RqnkRfk6mvFxBzNjgiIyZGUKpyrdaMMpxjJs+yWIPD2zZylOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPwJhBbqgaMDsR8KkdU/e3YcxcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGY5MDY3ODctY2VkZC0z OGE0LTg3ODAtNzgyYjBjMzcwYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAET2arRFa7/Q+dUbAjPmrwLzfMAJz9aY0DqQKm/FDCk4sOlTzUYB1bHp Ymb9X5V0JLuUPKu5aF0PE3mLw+T6/7/DeDvrsqL0xyYQI/0/iHS+9cXQLhbeYLii JdS57fNIbTyT38jKoSxYJV74Kqi9tE0B9TPugIc8DrgJLiz9k6+BtFaG/02+WWe0 HiA9OV3eSDxuwXJcKTt8J1DBGlR1EdoQXzVrnQdXdnojDFlnmVHhHNPUjds+P+vJ lYh+3pHCIwZYM3eUYKHf+y7Deu5MEQCJYXM/9Albub9F2ZoKacFUgHmQXPMfd6q+ Ty3kHuqeOykkqo5XDldlUjKvOHed+YY= -----END CERTIFICATE-----Generated at Wed Aug 6 16:26:35 2025 by rpki-client