$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa File: 146c450d-5661-3ac3-b61e-59ddd5a6500e.roa (raw, json) Hash identifier: FHIClsehZYDWS1HrU+LR8/91obkcOq6V8Bcbcg1tXmE= Subject key identifier: 45:66:33:FE:0E:C9:CD:CB:B1:16:37:8F:89:18:2E:04:76:92:E6:0D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB76E364E7A1A5E7C8C00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b7:6e:36:4e:7a:1a:5e:7c:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=706196f3-e846-469c-be19-55666059f988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e0:af:e8:e2:58:ef:5a:07:4f:a1:95:1d:4e: 5f:39:83:6e:1c:0d:51:25:c3:00:55:fb:3a:2a:90: 80:be:f1:ae:ce:f7:63:c6:7f:9e:14:5f:3e:00:59: 7f:86:5c:cc:7d:41:81:30:55:8e:2d:0e:84:15:60: f9:12:b6:2b:96:88:1a:cc:c1:69:98:1f:6c:e9:1a: f4:77:ee:1d:23:c1:a8:f5:48:4c:c8:3c:2b:40:93: 16:48:9c:b3:ba:1e:f5:ed:80:a0:8d:7b:1a:4a:da: 01:1b:aa:59:9f:f6:6a:e5:64:b8:3a:9d:71:b5:de: 97:22:22:25:60:05:2e:af:46:27:2e:a0:75:4f:92: 3c:43:5b:32:f5:37:46:68:27:9c:24:84:5f:b0:a7: 18:a1:02:67:7b:92:73:20:48:a4:c5:f5:94:cc:57: 7c:d6:6a:8d:a9:08:e0:68:dd:cd:e4:b2:96:d0:0c: 32:e3:40:9c:97:2e:4d:17:ce:dd:ae:71:9c:46:2b: e2:70:c5:a3:e7:12:f6:53:ac:d1:9f:85:c0:c8:05: 96:0c:3d:1e:e2:d8:ba:f8:5e:29:fa:46:6d:5c:47: 64:51:b3:a3:4b:2b:cc:08:49:69:26:e7:3d:75:5e: 5c:c4:57:37:74:72:15:2b:8e:d4:ab:84:f5:04:26: 6f:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:66:33:FE:0E:C9:CD:CB:B1:16:37:8F:89:18:2E:04:76:92:E6:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/146c450d-5661-3ac3-b61e-59ddd5a6500e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:54:49:51:6c:02:16:bb:d2:d1:9c:6c:d7:bf:58:d7:df:17: 78:e5:7a:20:77:36:a8:29:c7:14:ba:ca:ad:59:b5:80:c1:d3: 8b:1c:f3:37:3f:53:21:f2:8a:0a:9e:9c:32:2f:24:e7:3a:a7: af:24:d9:b8:33:1e:27:e2:6c:08:8f:13:a2:16:b7:56:a3:c2: 6f:94:08:81:12:fd:50:2a:25:15:63:02:86:19:58:34:d6:4c: d0:5f:f1:be:cb:eb:5d:8a:ea:87:12:b5:0a:91:55:60:2f:64: 7d:4f:48:2c:dc:13:f6:e3:bf:1f:0c:a3:6d:87:1b:bb:8f:49: cd:32:a9:bc:25:ab:31:2d:f0:81:10:aa:52:2f:d1:06:e7:ce: 57:71:f7:3e:13:2a:48:ea:bc:d5:6b:e8:66:f8:7c:5e:87:a3: 5b:94:d5:f9:ba:eb:48:fd:04:d6:dd:b7:24:00:29:19:05:2a: 2f:91:bf:2b:29:e8:ce:6e:da:e2:7d:65:02:be:76:d0:f7:1f: cd:bc:4b:e0:5d:dc:dc:0a:98:91:66:cf:ea:8a:e3:76:ed:f2: d3:b5:b0:36:bc:19:58:b0:98:4f:de:7d:00:8a:49:c3:18:35: b9:4a:24:03:32:a7:9f:04:6b:b3:40:74:1e:cd:b7:f3:a7:80: dd:9a:01:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLduNk56Gl58jAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzA2MTk2ZjMtZTg0Ni00NjljLWJlMTktNTU2NjYwNTlmOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAluCv6OJY71oHT6GVHU5fOYNuHA1RJcMAVfs6 KpCAvvGuzvdjxn+eFF8+AFl/hlzMfUGBMFWOLQ6EFWD5ErYrlogazMFpmB9s6Rr0 d+4dI8Go9UhMyDwrQJMWSJyzuh717YCgjXsaStoBG6pZn/Zq5WS4Op1xtd6XIiIl YAUur0YnLqB1T5I8Q1sy9TdGaCecJIRfsKcYoQJne5JzIEikxfWUzFd81mqNqQjg aN3N5LKW0Awy40Ccly5NF87drnGcRivicMWj5xL2U6zRn4XAyAWWDD0e4ti6+F4p +kZtXEdkUbOjSyvMCElpJuc9dV5cxFc3dHIVK47Uq4T1BCZvEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVmM/4Oyc3LsRY3j4kYLgR2kuYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMTQ2YzQ1MGQtNTY2MS0z YWMzLWI2MWUtNTlkZGQ1YTY1MDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRX4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdUSVFsAha70tGcbNe/WNffF3jleiB3NqgpxxS6yq1ZtYDB04sc8zc/ UyHyigqenDIvJOc6p68k2bgzHifibAiPE6IWt1ajwm+UCIES/VAqJRVjAoYZWDTW TNBf8b7L612K6ocStQqRVWAvZH1PSCzcE/bjvx8Mo22HG7uPSc0yqbwlqzEt8IEQ qlIv0Qbnzldx9z4TKkjqvNVr6Gb4fF6Ho1uU1fm660j9BNbdtyQAKRkFKi+Rvysp 6M5u2uJ9ZQK+dtD3H828S+Bd3NwKmJFmz+qK43bt8tO1sDa8GViwmE/efQCKScMY NblKJAMyp58Ea7NAdB7Nt/OngN2aAVc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:30 2025 by rpki-client