$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecf82d62-e824-3feb-9747-d65c72251c72.roa File: ecf82d62-e824-3feb-9747-d65c72251c72.roa (raw, json) Hash identifier: q8pMDdhtG/lyDjTjzGsOfDidtzGogTYIIYcjpMqpcFc= Subject key identifier: 81:28:BC:6F:11:39:CC:04:C5:BD:B7:17:63:40:F4:86:F4:3D:01:98 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A841254EF97E0D8DE9D2CFE00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecf82d62-e824-3feb-9747-d65c72251c72.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:54:ef:97:e0:d8:de:9d:2c:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=86d38885-9fdb-49f6-8493-bcc378a90ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8e:ae:aa:88:fe:a8:7f:28:d7:b8:33:d0:3d: 84:ec:a1:b9:0f:fe:51:2a:8b:df:62:2f:c3:66:17: 34:63:f6:80:20:dc:91:53:75:8f:63:ca:11:c5:39: a6:34:ab:b4:53:97:c6:8f:0a:51:e6:e6:02:00:62: f8:04:3d:3b:7e:31:02:a1:da:4d:65:74:d0:86:2c: 8a:c4:86:22:fb:ec:78:a8:f7:95:6f:9c:4e:4e:ee: 36:12:63:9b:e6:9b:8c:3d:fe:e5:de:73:47:8d:df: 8b:e3:a1:26:f4:b6:69:4e:f6:9d:47:97:02:9c:0a: 38:6c:55:75:8f:7f:45:d5:a0:b7:b9:c7:e6:50:64: ac:1d:2b:b4:74:7b:cd:68:5c:3d:c0:cd:ce:8b:bb: 5c:5e:93:5e:ea:10:b0:9f:e5:24:63:b1:35:c1:f1: 4c:ba:f8:39:b1:14:64:9a:f0:68:9a:7a:ea:4e:c9: c7:fe:82:c3:e4:55:cd:df:a4:f8:b8:e6:13:de:10: e2:d6:34:ac:2e:83:e1:f8:7a:b3:1c:3b:ba:ba:fd: ea:2a:4a:39:11:38:f0:a0:74:4a:d8:e0:dd:f6:67: 71:7e:ec:8a:8e:5d:f3:53:22:07:66:94:88:71:c1: 1e:68:43:70:2e:50:ec:b3:b5:08:90:5b:ed:36:64: 45:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:BC:6F:11:39:CC:04:C5:BD:B7:17:63:40:F4:86:F4:3D:01:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ecf82d62-e824-3feb-9747-d65c72251c72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:d4:df:7f:50:24:0c:d1:fa:e2:7e:c3:44:0a:9a:c8:89:e6: eb:64:48:3a:06:bc:73:45:1b:78:bc:b3:b3:20:0b:33:f1:56: ec:08:84:16:fe:00:3b:33:1f:2d:84:22:7b:d2:7f:64:b2:14: b9:3c:56:a0:f7:4a:64:10:ea:26:6a:bc:79:a9:ed:e9:6c:94: 0c:6e:b0:72:fe:1d:07:2a:fb:78:9e:72:52:24:df:f9:4f:6b: d6:7d:41:eb:6e:e2:cc:0e:9e:27:80:54:b3:1d:f6:14:cc:86: 15:be:5a:6f:21:2b:ee:de:59:ed:70:fd:ae:60:b0:c5:ed:30: 07:63:22:69:7b:7f:07:fa:05:67:e8:0f:97:49:29:90:5c:ca: 33:89:58:b7:45:18:7e:3a:2c:02:15:d5:4f:fe:e4:d8:37:ac: b9:12:04:20:8c:66:91:88:ed:7d:9c:b2:e3:43:db:5b:60:f8: 05:9b:c1:7d:f7:48:ab:85:0b:d6:95:2c:c7:17:98:45:81:da: a2:fe:71:99:fa:71:91:56:9c:48:99:5f:54:e0:11:c1:f1:b4: 99:82:72:e0:9d:12:64:48:2a:ef:10:9c:58:9e:4a:0d:00:68: 49:88:db:63:a1:d4:e9:a6:09:f8:7e:e2:73:03:64:a9:33:47: d3:f6:cb:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElTvl+DY3p0s/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODZkMzg4ODUtOWZkYi00OWY2LTg0OTMtYmNjMzc4YTkwZGVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso6uqoj+qH8o17gz0D2E7KG5D/5RKovfYi/D Zhc0Y/aAINyRU3WPY8oRxTmmNKu0U5fGjwpR5uYCAGL4BD07fjECodpNZXTQhiyK xIYi++x4qPeVb5xOTu42EmOb5puMPf7l3nNHjd+L46Em9LZpTvadR5cCnAo4bFV1 j39F1aC3ucfmUGSsHSu0dHvNaFw9wM3Oi7tcXpNe6hCwn+UkY7E1wfFMuvg5sRRk mvBomnrqTsnH/oLD5FXN36T4uOYT3hDi1jSsLoPh+HqzHDu6uv3qKko5ETjwoHRK 2ODd9mdxfuyKjl3zUyIHZpSIccEeaENwLlDss7UIkFvtNmRF+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEovG8ROcwExb23F2NA9Ib0PQGYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWNmODJkNjItZTgyNC0z ZmViLTk3NDctZDY1YzcyMjUxYzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHzU339QJAzR+uJ+w0QKmsiJ5utkSDoGvHNFG3i8s7MgCzPxVuwIhBb+ ADszHy2EInvSf2SyFLk8VqD3SmQQ6iZqvHmp7elslAxusHL+HQcq+3ieclIk3/lP a9Z9Qetu4swOnieAVLMd9hTMhhW+Wm8hK+7eWe1w/a5gsMXtMAdjIml7fwf6BWfo D5dJKZBcyjOJWLdFGH46LAIV1U/+5Ng3rLkSBCCMZpGI7X2csuND21tg+AWbwX33 SKuFC9aVLMcXmEWB2qL+cZn6cZFWnEiZX1TgEcHxtJmCcuCdEmRIKu8QnFieSg0A aEmI22Oh1OmmCfh+4nMDZKkzR9P2yzg= -----END CERTIFICATE-----Generated at Wed Aug 6 05:50:08 2025 by rpki-client