$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f99d54a6-02d3-3b04-81b2-bd8d8f137747.roa File: f99d54a6-02d3-3b04-81b2-bd8d8f137747.roa (raw, json) Hash identifier: 0H2ByO5JkMHQEEf7aT2Fz3Yy4ObwgD6HscrE7L3Off8= Subject key identifier: 4D:5D:57:01:7C:28:4B:53:A9:C3:33:DB:DC:AC:CD:AF:B6:D4:44:8A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B885B92378CA3D97F0E47EA80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f99d54a6-02d3-3b04-81b2-bd8d8f137747.roa Signing time: Wed 15 Oct 2025 18:42:08 +0000 ROA not before: Wed 15 Oct 2025 18:42:08 +0000 ROA not after: Tue 13 Jan 2026 19:42:08 +0000 asID: 19905 IP address blocks: 173.20.88.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:88:5b:92:37:8c:a3:d9:7f:0e:47:ea:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 15 18:42:08 2025 GMT Not After : Jan 13 19:42:08 2026 GMT Subject: CN=77de2b4c-ecd8-4e54-bf6b-06753b661ca6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c6:a2:fb:59:b2:a2:02:6b:c9:d9:f2:4e:8d: 3c:40:65:71:42:46:c2:53:eb:8c:2d:0a:bc:52:02: 27:d1:17:e3:e2:67:3a:19:4d:fd:99:43:3e:46:7b: 11:11:c6:0f:3e:87:16:8b:cb:60:32:af:99:63:a9: 61:93:65:63:4e:3c:17:62:78:06:cc:df:c6:b7:1f: a5:72:8a:95:b8:14:ad:d7:06:8c:7a:56:13:c3:b6: ce:2c:ed:c8:09:2e:df:0e:53:a4:b5:60:15:57:1c: 67:e0:32:b2:15:5c:c1:e1:34:a9:91:41:97:e5:6c: a5:c0:c4:fc:fc:ed:68:ff:70:d9:c8:db:b5:c1:ce: 24:81:4b:19:c2:97:9f:73:34:c7:01:bf:b0:b4:74: 38:58:51:bf:ce:a8:a7:54:ef:f8:b7:e0:9b:93:34: c2:fb:a3:91:2b:8b:ac:52:32:3d:d9:a7:9a:53:aa: a7:6f:f8:07:f4:95:79:28:9a:ae:58:a6:48:fe:1a: 5c:6f:3b:f4:da:cb:24:f7:15:11:97:7f:25:56:83: fa:03:d8:b7:3a:aa:68:d7:45:3d:a1:58:99:32:8d: 70:14:4f:7c:99:8c:aa:69:d3:25:5a:a1:d2:dc:24: e5:c6:c5:d4:41:47:8c:1c:02:a7:83:2e:57:06:c8: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5D:57:01:7C:28:4B:53:A9:C3:33:DB:DC:AC:CD:AF:B6:D4:44:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f99d54a6-02d3-3b04-81b2-bd8d8f137747.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.20.88.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:71:c8:e9:37:d8:e0:01:c7:3c:7a:bf:bf:6b:cd:7d:89:70: b1:c9:a3:28:7f:69:aa:0a:a7:98:76:03:99:27:9d:89:8a:6f: 6d:7d:dd:cf:76:ca:46:bc:b8:40:f3:3a:1a:58:0f:33:c1:d6: 69:81:9f:e9:e3:18:de:5b:42:55:90:18:57:34:94:b7:4a:b6: 96:d4:74:cb:1a:c9:14:a7:ad:b1:b7:0f:f4:55:d5:ea:5b:c9: 36:fb:d2:22:ad:19:65:40:8c:d6:26:80:b3:75:86:ab:b0:1e: 1b:7d:03:25:08:43:2d:7b:45:25:27:18:d2:49:59:47:e8:da: 5a:07:c0:4d:91:c9:1a:f4:50:32:58:bf:b3:e8:f4:96:c3:76: bf:b1:88:44:1f:08:ee:69:05:43:c4:da:1b:49:26:2c:fe:2f: 41:e3:0b:00:5f:2f:9c:8f:41:e5:df:91:d5:6c:21:9b:e2:3c: 30:c0:fb:46:8e:00:d6:bf:07:c9:7c:b7:de:cd:4e:c6:e9:b9: aa:b8:fd:d1:35:b3:0e:66:8d:f7:1f:0a:b4:79:8c:1e:c9:5e: 4b:5f:fd:a1:a1:50:fe:dd:dc:44:87:7e:68:27:dc:2a:7b:fa: ad:64:40:e6:24:a4:00:43:c4:4c:25:3c:a5:80:6a:61:76:83: c7:84:80:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuIW5I3jKPZfw5H6oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxNTE4NDIwOFoXDTI2MDExMzE5NDIwOFowLzEtMCsGA1UEAxMk NzdkZTJiNGMtZWNkOC00ZTU0LWJmNmItMDY3NTNiNjYxY2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMai+1myogJrydnyTo08QGVxQkbCU+uMLQq8 UgIn0Rfj4mc6GU39mUM+RnsREcYPPocWi8tgMq+ZY6lhk2VjTjwXYngGzN/Gtx+l coqVuBSt1waMelYTw7bOLO3ICS7fDlOktWAVVxxn4DKyFVzB4TSpkUGX5WylwMT8 /O1o/3DZyNu1wc4kgUsZwpefczTHAb+wtHQ4WFG/zqinVO/4t+CbkzTC+6ORK4us UjI92aeaU6qnb/gH9JV5KJquWKZI/hpcbzv02ssk9xURl38lVoP6A9i3Oqpo10U9 oViZMo1wFE98mYyqadMlWqHS3CTlxsXUQUeMHAKngy5XBsgGXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1dVwF8KEtTqcMz29ysza+21ESKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjk5ZDU0YTYtMDJkMy0z YjA0LTgxYjItYmQ4ZDhmMTM3NzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRRYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBxyOk32OABxzx6v79rzX2JcLHJoyh/aaoKp5h2A5knnYmKb2193c92 yka8uEDzOhpYDzPB1mmBn+njGN5bQlWQGFc0lLdKtpbUdMsayRSnrbG3D/RV1epb yTb70iKtGWVAjNYmgLN1hquwHht9AyUIQy17RSUnGNJJWUfo2loHwE2RyRr0UDJY v7Po9JbDdr+xiEQfCO5pBUPE2htJJiz+L0HjCwBfL5yPQeXfkdVsIZviPDDA+0aO ANa/B8l8t97NTsbpuaq4/dE1sw5mjfcfCrR5jB7JXktf/aGhUP7d3ESHfmgn3Cp7 +q1kQOYkpABDxEwlPKWAamF2g8eEgKk= -----END CERTIFICATE-----Generated at Sun Oct 19 21:10:40 2025 by rpki-client