$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4897a724-9ff1-33f2-8132-9c0dcb17d486.roa File: 4897a724-9ff1-33f2-8132-9c0dcb17d486.roa (raw, json) Hash identifier: Qz5/GJQ9RSgIenxael6p76XD4eu5Gn3Yk/U17Gkh920= Subject key identifier: 45:7F:F3:BF:3F:99:58:64:91:15:86:11:11:9C:AF:4B:07:0B:5E:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A58CAFB0B22FB64555DC23440 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4897a724-9ff1-33f2-8132-9c0dcb17d486.roa Signing time: Sun 29 Jun 2025 01:00:50 +0000 ROA not before: Sun 29 Jun 2025 01:00:50 +0000 ROA not after: Sat 27 Sep 2025 01:00:50 +0000 asID: 30036 IP address blocks: 173.20.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:58:ca:fb:0b:22:fb:64:55:5d:c2:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jun 29 01:00:50 2025 GMT Not After : Sep 27 01:00:50 2025 GMT Subject: CN=e5a46f6a-38da-4c4a-96e1-c8c0688b78c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:49:46:b7:a0:4e:c2:45:2c:5b:e7:38:23:07: 18:4c:d5:e4:f8:06:70:30:86:de:15:cd:23:f5:a9: d2:e3:72:b3:78:71:a5:59:3b:9d:ff:b7:fc:46:0f: 41:b5:cf:14:be:7f:a2:e3:6d:03:f0:24:97:3e:65: 78:63:64:48:f3:f3:87:75:11:e2:f6:f4:fb:93:36: 17:b7:20:e7:5c:1b:52:bb:b1:74:db:a8:80:fe:6e: 5b:27:92:a3:1c:22:e2:00:8b:69:d6:7f:ad:ea:2a: c8:4c:ba:eb:11:cd:9b:20:af:be:cf:60:44:6e:54: 7e:2c:49:e7:26:18:4b:14:01:ed:27:90:86:c1:a6: b4:f8:97:ee:89:f7:52:03:0d:fe:f7:59:88:40:a1: 68:16:3e:ab:0e:c9:d4:31:6f:64:6a:8e:88:9a:a9: 4e:cb:7a:02:6e:69:f9:92:79:e4:94:e6:25:5e:95: 93:f6:a1:0e:4a:f9:81:4a:63:e3:9a:b6:9a:33:89: dd:fd:93:cb:22:59:91:69:73:83:87:3f:e2:ba:01: 63:e5:9f:42:e5:08:3b:8a:e3:3f:ca:11:f6:44:10: d0:0f:ed:6f:29:49:f9:45:ab:28:6f:e1:0e:bf:5f: 0a:58:14:fb:02:c9:d0:8d:2e:4e:66:f6:d1:1d:50: 41:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:7F:F3:BF:3F:99:58:64:91:15:86:11:11:9C:AF:4B:07:0B:5E:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4897a724-9ff1-33f2-8132-9c0dcb17d486.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:68:73:c7:5b:0d:75:47:1f:c9:ca:4c:1d:57:60:47:27:f7: 38:14:fc:a5:fc:d2:bc:ca:a8:58:7e:a8:26:a6:32:1b:4d:25: 19:08:b0:ea:cc:a2:60:ef:4b:12:54:f0:86:75:05:63:ea:1b: 99:d6:d7:3a:8c:db:9c:2a:51:55:3c:bf:79:64:70:65:86:df: 84:9d:7e:ba:74:7e:d0:07:ca:15:31:f1:67:a3:bc:97:e1:6f: f7:23:64:ed:96:ff:52:2d:ad:81:ab:38:87:86:c0:50:8e:82: c8:d5:81:34:bf:87:c4:98:81:a6:03:86:3c:7b:cf:1b:59:15: 64:04:53:40:7f:fc:60:f6:70:3b:ee:6b:05:35:c0:b4:90:c0: 3d:44:a5:34:42:86:3b:56:2a:58:b8:db:b6:cb:01:44:ff:88: 9d:77:1e:5b:34:f1:8b:19:ee:96:45:e5:ec:07:28:e6:ce:2d: 33:7a:1b:96:b6:b9:c6:d7:7a:43:30:00:e8:7b:2e:a9:b0:75: 8c:7a:1a:ed:97:5e:b2:72:ae:5a:9c:5a:fa:10:70:32:db:28: e6:81:4f:b9:76:a2:4f:6b:5c:b5:9a:0f:30:b7:78:d9:4d:cf: 63:8d:92:44:d2:71:bd:20:09:21:18:84:57:06:1f:a2:2a:6a: 33:99:66:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpYyvsLIvtkVV3CNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDYyOTAxMDA1MFoXDTI1MDkyNzAxMDA1MFowLzEtMCsGA1UEAxMk ZTVhNDZmNmEtMzhkYS00YzRhLTk2ZTEtYzhjMDY4OGI3OGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0lGt6BOwkUsW+c4IwcYTNXk+AZwMIbeFc0j 9anS43KzeHGlWTud/7f8Rg9Btc8Uvn+i420D8CSXPmV4Y2RI8/OHdRHi9vT7kzYX tyDnXBtSu7F026iA/m5bJ5KjHCLiAItp1n+t6irITLrrEc2bIK++z2BEblR+LEnn JhhLFAHtJ5CGwaa0+JfuifdSAw3+91mIQKFoFj6rDsnUMW9kao6ImqlOy3oCbmn5 knnklOYlXpWT9qEOSvmBSmPjmraaM4nd/ZPLIlmRaXODhz/iugFj5Z9C5Qg7iuM/ yhH2RBDQD+1vKUn5Rasob+EOv18KWBT7AsnQjS5OZvbRHVBBbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEV/878/mVhkkRWGERGcr0sHC15XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDg5N2E3MjQtOWZmMS0z M2YyLTgxMzItOWMwZGNiMTdkNDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRQSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBoc8dbDXVHH8nKTB1XYEcn9zgU/KX80rzKqFh+qCamMhtNJRkIsOrM omDvSxJU8IZ1BWPqG5nW1zqM25wqUVU8v3lkcGWG34Sdfrp0ftAHyhUx8WejvJfh b/cjZO2W/1ItrYGrOIeGwFCOgsjVgTS/h8SYgaYDhjx7zxtZFWQEU0B//GD2cDvu awU1wLSQwD1EpTRChjtWKli427bLAUT/iJ13Hls08YsZ7pZF5ewHKObOLTN6G5a2 ucbXekMwAOh7LqmwdYx6Gu2XXrJyrlqcWvoQcDLbKOaBT7l2ok9rXLWaDzC3eNlN z2ONkkTScb0gCSEYhFcGH6IqajOZZuE= -----END CERTIFICATE-----Generated at Mon Jun 30 10:50:43 2025 by rpki-client