$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa File: ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa (raw, json) Hash identifier: jI2BBymeuQtEBjku484lRw8xHpxKA08Ou5hM7ufi7DI= Subject key identifier: 73:E3:9D:B0:BD:30:89:FF:9D:B0:10:1C:E4:BE:AC:9D:82:44:75:A7 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A84125547EF216B1C1A34FC40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.20.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:55:47:ef:21:6b:1c:1a:34:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4f46b89b-2d68-4e95-a672-2dec4af3cd4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:7d:45:77:f3:f7:6f:ba:f1:11:c0:b3:44: 78:6d:5c:16:7d:0d:21:3b:2e:a0:98:18:13:07:c8: 1c:05:f1:7d:5c:92:22:5c:1f:27:db:a4:ab:8a:47: a3:6a:91:37:31:06:ac:b4:86:30:6d:d4:eb:54:95: a9:e4:1f:a8:fc:a1:0d:f0:28:bd:75:d5:58:2c:65: 4b:94:b0:78:c3:5c:7a:59:74:02:83:64:d8:4e:0d: cb:d8:0a:41:96:a7:3a:ae:b4:46:76:4e:e2:84:44: 6d:b6:cd:43:c9:50:30:ee:f3:cd:73:1d:eb:48:1b: b3:81:c4:a7:d9:a4:80:d5:35:11:e6:a5:83:69:02: 29:b8:98:4f:8f:59:20:c8:2a:82:61:51:fd:b6:57: f8:79:15:1a:8d:ab:0d:32:08:3b:c2:d5:e6:55:d3: 05:94:48:da:8c:18:7b:96:0d:0d:54:14:70:95:51: 45:3b:39:b2:4a:f4:c2:f1:4f:78:d3:7f:3e:83:97: 95:ce:89:38:82:9a:03:f6:4d:d6:4e:86:0d:9e:4b: 7b:44:e8:2d:d3:15:5f:40:2b:49:d6:4e:44:ea:e2: ab:79:08:d7:8f:89:f9:db:bd:1c:09:c4:b1:92:d8: fd:8a:25:54:b5:86:c4:69:1d:4c:05:48:ca:85:60: a2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:E3:9D:B0:BD:30:89:FF:9D:B0:10:1C:E4:BE:AC:9D:82:44:75:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ee96f213-6be9-3e81-8b57-5fdadbf28a05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:96:4c:dd:e1:60:17:ad:6a:52:a3:95:10:2c:96:f8:2f:ee: 02:8a:f1:f8:90:22:9f:96:07:9f:70:b2:96:e4:96:7e:1e:c5: c4:3f:15:2b:62:b6:13:68:78:1d:53:5d:91:2f:63:8e:22:f7: 93:25:ee:dc:1e:67:28:fb:bd:ff:3a:c9:7f:4d:ce:37:e0:68: ce:cf:c7:f9:95:26:ec:e1:f4:b4:d1:65:9c:d9:00:85:56:f3: cc:89:9c:71:57:26:c6:ce:0f:9b:cc:32:f0:8d:72:7f:3a:eb: 8f:ac:70:9a:14:1e:89:ad:b5:85:14:85:65:60:84:44:6c:40: 58:2f:73:90:33:6f:7b:49:08:e3:a0:2b:21:ec:06:d9:4a:7d: 5a:fb:c6:86:2c:a4:40:77:ea:eb:1d:47:57:2a:e7:e5:c6:1e: 33:87:9b:0b:34:a1:b7:50:20:9e:2b:97:f9:5b:6c:63:3d:0b: c0:e5:f1:88:65:68:91:73:d0:e2:da:44:01:5c:0a:0d:75:4f: 33:9c:e1:70:b4:56:ff:48:9f:63:63:e0:69:18:64:dc:32:e8: a2:bd:d1:73:9a:52:48:d3:50:fa:7c:e0:21:a5:7f:e8:16:c1: b9:6c:90:1e:de:d8:7f:13:68:27:24:15:71:d0:4e:c9:a1:4b: 8b:5a:4b:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElVH7yFrHBo0/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGY0NmI4OWItMmQ2OC00ZTk1LWE2NzItMmRlYzRhZjNjZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmop9RXfz92+68RHAs0R4bVwWfQ0hOy6gmBgT B8gcBfF9XJIiXB8n26SrikejapE3MQastIYwbdTrVJWp5B+o/KEN8Ci9ddVYLGVL lLB4w1x6WXQCg2TYTg3L2ApBlqc6rrRGdk7ihERtts1DyVAw7vPNcx3rSBuzgcSn 2aSA1TUR5qWDaQIpuJhPj1kgyCqCYVH9tlf4eRUajasNMgg7wtXmVdMFlEjajBh7 lg0NVBRwlVFFOzmySvTC8U94038+g5eVzok4gpoD9k3WToYNnkt7ROgt0xVfQCtJ 1k5E6uKreQjXj4n5270cCcSxktj9iiVUtYbEaR1MBUjKhWCi6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHPjnbC9MIn/nbAQHOS+rJ2CRHWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWU5NmYyMTMtNmJlOS0z ZTgxLThiNTctNWZkYWRiZjI4YTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKWTN3hYBetalKjlRAslvgv7gKK8fiQIp+WB59wspbkln4excQ/FSti thNoeB1TXZEvY44i95Ml7tweZyj7vf86yX9NzjfgaM7Px/mVJuzh9LTRZZzZAIVW 88yJnHFXJsbOD5vMMvCNcn8664+scJoUHomttYUUhWVghERsQFgvc5Azb3tJCOOg KyHsBtlKfVr7xoYspEB36usdR1cq5+XGHjOHmws0obdQIJ4rl/lbbGM9C8Dl8Yhl aJFz0OLaRAFcCg11TzOc4XC0Vv9In2Nj4GkYZNwy6KK90XOaUkjTUPp84CGlf+gW wblskB7e2H8TaCckFXHQTsmhS4taS3M= -----END CERTIFICATE-----Generated at Tue Aug 5 22:58:45 2025 by rpki-client