$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2176778a-89b5-359d-917f-97c4123b591d.roa File: 2176778a-89b5-359d-917f-97c4123b591d.roa (raw, json) Hash identifier: VbJ1sCrmNKmudqC8Ak+DM2zQ4+IVhhF7T6ONPgX8A8c= Subject key identifier: 7D:EA:1E:B9:55:AB:15:5B:48:34:1A:48:FE:52:85:5B:59:22:C8:16 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475C870B88F06C238CC27FA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2176778a-89b5-359d-917f-97c4123b591d.roa Signing time: Mon 22 Sep 2025 11:56:31 +0000 ROA not before: Mon 22 Sep 2025 11:56:31 +0000 ROA not after: Sun 21 Dec 2025 12:56:31 +0000 asID: 19905 IP address blocks: 173.21.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:87:0b:88:f0:6c:23:8c:c2:7f:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:31 2025 GMT Not After : Dec 21 12:56:31 2025 GMT Subject: CN=f2b9d15d-07e4-42f7-a20a-17bf88b6c93c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4e:a9:85:4c:e2:ab:7b:ca:98:fc:5d:62:31: 98:d0:c2:75:83:11:ea:35:65:31:f1:97:07:80:a5: 56:81:d4:fd:95:8d:62:89:a9:23:de:e7:5a:79:d8: 16:2e:06:c3:99:4d:b4:c4:ff:cc:de:a3:39:9f:82: 4d:43:87:41:a5:6d:a5:f0:3d:98:8a:9c:f4:d3:73: 3f:8f:d1:e5:06:6b:87:8c:37:98:0c:59:e0:0a:e3: 2f:69:dc:1c:0f:cb:05:09:06:7f:2a:04:84:e2:7d: 80:ad:ee:32:4c:34:25:cc:89:59:4d:46:0a:0b:d1: d0:ea:44:f5:6e:17:ac:ac:95:b9:69:f1:64:a6:4a: 8c:be:87:f6:ab:86:27:c8:5e:48:da:c8:10:5e:ae: af:1a:48:e0:44:c0:74:b0:80:d3:dc:e7:59:fc:01: be:ba:fc:25:99:5e:6c:72:23:d4:db:57:18:d5:cc: 77:19:af:2f:67:2e:c0:86:c0:f3:10:09:aa:41:a4: 89:6a:5b:36:1f:29:c8:bc:0f:f3:37:a0:14:28:4b: a6:dd:66:60:05:fb:cd:1e:de:ac:6f:45:84:36:c2: d2:ed:32:a8:1a:53:fa:ed:66:26:d3:a8:ce:7b:cd: 65:34:0a:97:03:69:30:81:f7:05:ce:e4:b0:10:56: d3:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:EA:1E:B9:55:AB:15:5B:48:34:1A:48:FE:52:85:5B:59:22:C8:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2176778a-89b5-359d-917f-97c4123b591d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a7:6e:4f:21:6d:19:5b:c3:44:3d:23:69:52:49:cf:12:f4: 16:31:aa:77:d7:70:48:fd:e7:02:56:c2:3a:ac:44:84:fd:25: b1:ec:c1:4f:05:06:1d:84:b6:99:2f:54:15:11:66:50:8c:45: 9d:d0:42:38:c5:0f:ae:e0:66:c9:ff:1a:78:f5:6c:79:9d:ea: 30:f8:63:72:f5:70:a7:92:1b:fa:1a:45:c3:14:8f:0c:72:b4: f3:47:df:43:ee:37:83:6d:ab:94:4f:0f:8a:6b:30:03:2f:5b: 44:bd:e2:cc:06:92:bc:d1:ce:2a:e5:d4:59:32:78:08:81:6c: 93:59:41:5b:21:f7:a7:90:a0:41:89:be:76:d1:a6:b8:cf:0b: 5e:bf:7b:ce:98:7f:50:df:f7:09:4e:3e:76:80:34:74:fc:d3: ad:9b:67:48:af:30:4e:b1:37:fe:40:b2:2f:5d:ed:14:32:58: 19:2f:6a:b6:3d:6d:fd:11:34:5c:73:e1:e9:65:1e:26:6e:39: 89:4d:80:ab:c1:2a:86:f4:d5:6d:d2:68:d7:4e:9f:71:7f:08: 31:00:46:06:06:ac:f6:01:e6:bd:de:7f:ec:3d:02:13:a6:0e: ee:b4:bb:87:9b:f2:9c:ad:02:96:69:12:0f:b8:f3:c2:a1:81: 9e:4c:e8:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXIcLiPBsI4zCf6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTYzMVoXDTI1MTIyMTEyNTYzMVowLzEtMCsGA1UEAxMk ZjJiOWQxNWQtMDdlNC00MmY3LWEyMGEtMTdiZjg4YjZjOTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA606phUziq3vKmPxdYjGY0MJ1gxHqNWUx8ZcH gKVWgdT9lY1iiakj3udaedgWLgbDmU20xP/M3qM5n4JNQ4dBpW2l8D2Yipz003M/ j9HlBmuHjDeYDFngCuMvadwcD8sFCQZ/KgSE4n2Are4yTDQlzIlZTUYKC9HQ6kT1 bhesrJW5afFkpkqMvof2q4YnyF5I2sgQXq6vGkjgRMB0sIDT3OdZ/AG+uvwlmV5s ciPU21cY1cx3Ga8vZy7AhsDzEAmqQaSJals2HynIvA/zN6AUKEum3WZgBfvNHt6s b0WENsLS7TKoGlP67WYm06jOe81lNAqXA2kwgfcFzuSwEFbTnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3qHrlVqxVbSDQaSP5ShVtZIsgWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjE3Njc3OGEtODliNS0z NTlkLTkxN2YtOTdjNDEyM2I1OTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqnbk8hbRlbw0Q9I2lSSc8S9BYxqnfXcEj95wJWwjqsRIT9JbHswU8F Bh2EtpkvVBURZlCMRZ3QQjjFD67gZsn/Gnj1bHmd6jD4Y3L1cKeSG/oaRcMUjwxy tPNH30PuN4Ntq5RPD4prMAMvW0S94swGkrzRzirl1FkyeAiBbJNZQVsh96eQoEGJ vnbRprjPC16/e86Yf1Df9wlOPnaANHT8062bZ0ivME6xN/5Asi9d7RQyWBkvarY9 bf0RNFxz4ellHiZuOYlNgKvBKob01W3SaNdOn3F/CDEARgYGrPYB5r3ef+w9AhOm Du60u4eb8pytApZpEg+488KhgZ5M6KI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:31 2025 by rpki-client