$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b846d9e-a302-3570-8a42-867757ff8321.roa File: 1b846d9e-a302-3570-8a42-867757ff8321.roa (raw, json) Hash identifier: QG1nfPv9WNDgHbFLXfp5zKMe7GNLiLbyFwcYE+bdcB4= Subject key identifier: BB:05:D8:72:11:35:4E:EB:C1:F2:F9:95:71:EE:DA:6F:B7:85:B6:1A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CBBD47EE3CB817E834AC0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b846d9e-a302-3570-8a42-867757ff8321.roa Signing time: Mon 22 Sep 2025 11:56:56 +0000 ROA not before: Mon 22 Sep 2025 11:56:56 +0000 ROA not after: Sun 21 Dec 2025 12:56:56 +0000 asID: 19905 IP address blocks: 173.21.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:bb:d4:7e:e3:cb:81:7e:83:4a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:56 2025 GMT Not After : Dec 21 12:56:56 2025 GMT Subject: CN=20c4ea40-ea43-4a61-8d0b-579bc3b26d43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:14:9a:73:73:a0:99:f2:5a:0e:51:ca:c7:09: 99:d4:53:13:1d:40:f2:c2:72:3d:16:70:07:d5:1a: 40:86:3a:3f:f5:6a:c3:ca:90:2d:9a:29:da:b0:9c: b2:6c:aa:cc:70:66:f1:f1:cb:cd:08:36:d9:9c:dd: bd:65:bd:72:8e:15:a1:ca:b8:d9:33:d0:41:30:fc: dd:c5:78:bf:04:53:4e:a7:ba:a8:c1:9f:13:ac:eb: 13:48:09:ec:2b:66:7e:b2:bb:a4:b9:c2:9d:54:73: 90:46:4d:52:6f:81:9d:63:d2:b8:10:9a:70:c3:b9: c3:17:42:50:f0:09:b7:88:dd:76:03:37:31:b1:2e: 58:67:d9:e2:fa:19:31:63:48:3a:90:e5:5c:64:bf: cd:f1:64:46:f1:2a:93:a2:2f:9d:5a:a0:a5:91:89: f5:b5:20:18:8e:5a:c2:8c:cb:63:c4:f9:3b:d2:fc: 98:fb:3c:1a:54:33:62:b7:ac:1f:31:72:e8:ae:ca: 45:90:fd:b0:e8:6e:da:09:9e:26:d1:7e:ee:b3:f8: b9:80:5e:91:fb:c2:8b:67:ba:74:0b:79:a2:f4:80: af:b4:9b:60:b3:78:23:fd:38:79:ef:26:45:aa:b4: 59:fc:bc:fc:16:6f:c5:a1:1f:45:fe:3a:25:26:39: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:05:D8:72:11:35:4E:EB:C1:F2:F9:95:71:EE:DA:6F:B7:85:B6:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b846d9e-a302-3570-8a42-867757ff8321.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:8a:c8:8a:df:f4:66:a8:e8:3f:22:40:27:fd:6f:57:fd:6e: e7:15:f5:52:31:a5:a6:7c:35:5b:8d:ff:9a:6b:1d:41:54:10: e2:0a:cf:bc:9e:04:b6:14:f1:45:b9:5d:0b:f4:c7:2b:8b:a8: a0:92:0e:48:40:e6:22:e2:41:de:da:82:84:54:25:ee:d3:2a: 07:97:97:39:7a:06:ec:e4:f2:35:b9:5b:38:84:96:a4:78:f4: f0:f6:bb:1e:16:a2:f2:6c:84:64:63:48:d2:f5:1f:31:df:15: db:a4:9f:ed:85:68:70:b8:ec:5c:d5:b1:b3:d3:f1:92:11:13: 35:c1:d2:f5:6c:36:3e:0e:c6:51:69:13:f6:31:55:4a:86:da: a1:8a:bd:9d:1d:63:13:fd:d2:72:97:ab:3d:ab:45:10:d2:c7: 5b:f8:49:4e:3a:f6:31:d2:fa:dc:10:66:04:86:1d:99:40:73: 17:7f:c1:ba:69:d8:9a:32:fd:02:fa:84:cb:fd:c0:da:8f:7e: 86:ea:d4:47:c6:73:e6:a1:37:b0:df:88:6d:64:04:5d:4a:41: 8d:70:14:1f:b5:1e:9a:72:1b:f5:8a:e6:68:ae:bc:a5:a9:32: a4:fd:3c:b0:fb:74:7a:75:9a:9c:85:d7:8a:d6:40:08:31:d9: c2:f9:92:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXLvUfuPLgX6DSsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTY1NloXDTI1MTIyMTEyNTY1NlowLzEtMCsGA1UEAxMk MjBjNGVhNDAtZWE0My00YTYxLThkMGItNTc5YmMzYjI2ZDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRSac3OgmfJaDlHKxwmZ1FMTHUDywnI9FnAH 1RpAhjo/9WrDypAtminasJyybKrMcGbx8cvNCDbZnN29Zb1yjhWhyrjZM9BBMPzd xXi/BFNOp7qowZ8TrOsTSAnsK2Z+srukucKdVHOQRk1Sb4GdY9K4EJpww7nDF0JQ 8Am3iN12AzcxsS5YZ9ni+hkxY0g6kOVcZL/N8WRG8SqToi+dWqClkYn1tSAYjlrC jMtjxPk70vyY+zwaVDNit6wfMXLorspFkP2w6G7aCZ4m0X7us/i5gF6R+8KLZ7p0 C3mi9ICvtJtgs3gj/Th57yZFqrRZ/Lz8Fm/FoR9F/jolJjnt5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsF2HIRNU7rwfL5lXHu2m+3hbYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWI4NDZkOWUtYTMwMi0z NTcwLThhNDItODY3NzU3ZmY4MzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaKyIrf9Gao6D8iQCf9b1f9bucV9VIxpaZ8NVuN/5prHUFUEOIKz7ye BLYU8UW5XQv0xyuLqKCSDkhA5iLiQd7agoRUJe7TKgeXlzl6Buzk8jW5WziElqR4 9PD2ux4WovJshGRjSNL1HzHfFdukn+2FaHC47FzVsbPT8ZIREzXB0vVsNj4OxlFp E/YxVUqG2qGKvZ0dYxP90nKXqz2rRRDSx1v4SU469jHS+twQZgSGHZlAcxd/wbpp 2Joy/QL6hMv9wNqPfobq1EfGc+ahN7DfiG1kBF1KQY1wFB+1HppyG/WK5miuvKWp MqT9PLD7dHp1mpyF14rWQAgx2cL5koM= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:06 2025 by rpki-client