$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa File: 225e5d2e-2893-357d-93ab-5e77ee163db5.roa (raw, json) Hash identifier: eCanKJKWaMet2VWkb7Ux4GDklHThd+83Zxvpcq1KCBg= Subject key identifier: AA:9C:76:76:22:B2:4E:22:12:77:4E:68:5A:36:6D:CC:FB:5B:78:CD Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A58CAFAF82E8DC9D6E8691240 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 19905 IP address blocks: 173.20.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:fa:f8:2e:8d:c9:d6:e8:69:12:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=f4f3fdcf-7da6-4059-9745-95e04342ecea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6c:04:4c:02:62:5c:fc:6c:97:59:8f:ed:39: a7:b8:7e:5b:aa:2b:12:2e:79:1d:c4:77:93:e3:0e: d6:c5:d6:a0:4e:c4:b9:5f:1f:75:57:5d:a0:a5:7c: 92:7d:71:62:8d:d2:d7:1f:04:ef:9c:4c:ca:af:33: e9:29:1b:4b:a8:38:8a:f8:8a:28:5d:c1:6a:04:60: 11:b7:80:13:5c:1f:3b:cf:c6:c0:be:a4:25:e2:b4: a4:40:05:6e:05:4b:86:07:3f:a8:6f:91:36:52:02: 4e:b2:15:ed:13:a3:82:00:02:91:39:c7:97:f4:ae: 52:ca:7a:c8:5f:15:f6:79:2a:ff:3a:7d:78:b4:e8: 37:75:9f:0f:f4:4e:b6:7a:b3:80:8c:ce:e7:ca:8d: 60:ae:4e:92:ae:63:a2:3c:10:eb:5f:e7:89:79:fd: 28:49:e1:f4:48:5c:ac:aa:25:b9:c1:09:c4:de:ce: 47:17:bb:28:3b:51:02:72:68:02:fa:a9:ff:90:5d: 2c:89:ae:c0:39:72:75:4a:76:51:79:23:24:3e:f4: 2c:6d:58:1e:14:24:50:9f:4d:60:2a:79:d5:ee:6d: 9d:df:dc:f6:c7:2a:be:ed:39:e3:41:57:6c:25:a9: 5a:84:ec:f7:22:48:61:bc:1a:b9:77:4d:27:5f:e3: 2e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9C:76:76:22:B2:4E:22:12:77:4E:68:5A:36:6D:CC:FB:5B:78:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/225e5d2e-2893-357d-93ab-5e77ee163db5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:9d:28:4a:5f:96:42:a1:87:d9:ce:85:b0:f0:b1:93:dd:c3: 76:19:68:da:33:f8:54:09:e3:3c:f1:d9:8b:7f:11:f9:71:b0: 49:0e:df:ac:fd:b5:95:42:b4:7d:bb:68:46:6a:d8:0b:90:30: 6e:6a:ee:1a:d7:bd:d4:d5:7a:fd:ce:50:96:c0:1c:2d:b6:07: da:77:05:e9:c4:15:fd:3e:e0:ca:e6:47:f7:50:9b:f5:60:b2: 1d:ae:6e:8f:e1:c7:55:9f:9a:26:7f:ab:c9:cc:ee:2c:bc:a4: a2:13:e6:9d:23:bd:10:f5:68:ef:e6:7b:df:f4:a1:27:c4:e6: 71:8a:a0:ed:8a:ac:65:e0:48:cd:0a:10:30:76:93:9d:2e:60: c1:a3:50:b1:9d:94:7f:c0:b9:c0:18:2e:ce:b2:fb:5d:55:29: 33:bd:81:ed:8d:30:76:f6:61:04:88:14:4d:16:5a:58:18:82: 65:39:49:e4:65:a4:54:5a:45:bb:30:6a:b1:89:e9:1e:22:15: 7d:25:f3:e2:c8:dc:67:f8:8e:59:c8:15:9e:3c:b1:60:05:82: 38:fc:1e:2a:66:cc:06:37:26:fd:c5:c8:90:2c:cc:f5:8e:9b: 62:e1:a4:08:57:35:db:ea:32:d9:08:70:47:bf:c3:76:77:3d: 87:8f:28:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyvr4Lo3J1uhpEkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZjRmM2ZkY2YtN2RhNi00MDU5LTk3NDUtOTVlMDQzNDJlY2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2wETAJiXPxsl1mP7TmnuH5bqisSLnkdxHeT 4w7WxdagTsS5Xx91V12gpXySfXFijdLXHwTvnEzKrzPpKRtLqDiK+IooXcFqBGAR t4ATXB87z8bAvqQl4rSkQAVuBUuGBz+ob5E2UgJOshXtE6OCAAKROceX9K5SynrI XxX2eSr/On14tOg3dZ8P9E62erOAjM7nyo1grk6SrmOiPBDrX+eJef0oSeH0SFys qiW5wQnE3s5HF7soO1ECcmgC+qn/kF0sia7AOXJ1SnZReSMkPvQsbVgeFCRQn01g KnnV7m2d39z2xyq+7TnjQVdsJalahOz3IkhhvBq5d00nX+MuYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqcdnYisk4iEndOaFo2bcz7W3jNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjI1ZTVkMmUtMjg5My0z NTdkLTkzYWItNWU3N2VlMTYzZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASdKEpflkKhh9nOhbDwsZPdw3YZaNoz+FQJ4zzx2Yt/EflxsEkO36z9 tZVCtH27aEZq2AuQMG5q7hrXvdTVev3OUJbAHC22B9p3BenEFf0+4MrmR/dQm/Vg sh2ubo/hx1WfmiZ/q8nM7iy8pKIT5p0jvRD1aO/me9/0oSfE5nGKoO2KrGXgSM0K EDB2k50uYMGjULGdlH/AucAYLs6y+11VKTO9ge2NMHb2YQSIFE0WWlgYgmU5SeRl pFRaRbswarGJ6R4iFX0l8+LI3Gf4jlnIFZ48sWAFgjj8HipmzAY3Jv3FyJAszPWO m2LhpAhXNdvqMtkIcEe/w3Z3PYePKPU= -----END CERTIFICATE-----Generated at Sun Jun 29 17:58:09 2025 by rpki-client