$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e8d2b1-7da6-3513-9c7e-35f1e7b1b5af.roa File: 23e8d2b1-7da6-3513-9c7e-35f1e7b1b5af.roa (raw, json) Hash identifier: MiQIwzhfo7Y3NxubCbAPnegnbUE6SxtuuBvstW62rjg= Subject key identifier: B3:4E:13:94:24:74:D6:7F:D3:B2:61:A4:FE:83:1D:DC:BB:E6:5C:8D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EC5118B850811FB15210 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e8d2b1-7da6-3513-9c7e-35f1e7b1b5af.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ec:51:18:b8:50:81:1f:b1:52:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=8c41411c-bf7d-445e-b3cb-5d1fdc613e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:91:5f:6b:e1:60:67:23:2c:4e:da:75:5a:8c: 79:45:5b:f7:7e:5f:d3:17:b6:07:ae:03:aa:0b:a9: 0c:32:03:dc:db:ea:4a:5c:ed:0e:cf:b4:7d:15:c8: 89:53:68:bd:ec:24:02:83:b0:7a:82:f0:2a:33:d3: fb:4f:ff:01:8a:13:6d:b2:d9:4a:e8:78:3b:45:9e: f2:c8:96:5c:e2:4b:41:00:01:81:7f:ba:4d:14:4d: 6b:fd:04:66:45:4d:7d:8a:33:02:91:3c:5a:74:19: 77:a6:8e:dc:c7:f6:f3:04:63:b2:bd:0c:98:d2:75: 90:62:48:c0:d0:c1:1c:56:ba:e6:88:f2:ac:62:c2: b1:2b:27:46:1c:39:77:af:79:b2:5c:b0:ab:55:ae: 42:71:f0:29:8e:fc:da:35:1e:5c:75:ea:fd:9b:83: db:bd:b4:5e:42:28:1d:9b:c5:56:71:2a:a0:72:d0: 3b:f7:bc:6a:bc:9d:70:0f:b6:8c:f1:25:c1:42:8f: 5c:f9:a0:51:6a:6d:45:41:11:a4:a8:35:81:07:6f: 8b:8b:e6:2a:12:7a:c0:4a:aa:ac:cf:08:9f:39:84: 7f:3e:d4:7f:4b:f2:d1:fc:ae:82:e7:60:21:bd:27: 37:40:10:db:54:8a:e6:c4:5d:4f:7b:c0:fc:f9:72: ae:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:4E:13:94:24:74:D6:7F:D3:B2:61:A4:FE:83:1D:DC:BB:E6:5C:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/23e8d2b1-7da6-3513-9c7e-35f1e7b1b5af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:02:af:70:e3:7e:23:8e:b5:06:69:75:37:37:49:1f:56:4f: 63:4c:f2:c8:3e:3a:67:e5:b9:bc:ef:6d:ad:b8:e4:f0:d9:68: c7:e9:73:cd:c2:b8:d9:6e:7d:00:24:04:7a:f3:b7:39:16:4e: 99:00:58:82:c5:9a:08:1c:ee:6f:4d:bf:01:84:cb:1b:b4:62: 98:b5:05:97:82:c6:4d:1a:14:a5:8b:4e:82:b4:7c:42:1b:ac: 56:d6:a3:03:2e:90:45:3e:85:37:79:c4:76:80:14:5b:0d:2f: 46:18:3d:ad:f0:b1:d1:3d:b8:03:c5:44:d9:42:20:a2:9b:13: f6:25:af:d9:70:90:72:e5:52:ab:26:0f:77:f4:34:aa:68:2f: c6:31:51:30:ad:23:b7:00:e5:e2:f0:cb:ba:da:47:04:92:4d: 6d:2b:b8:95:0d:bd:29:92:f2:c8:77:f8:d4:44:2a:84:df:7c: 26:35:fa:9c:3c:78:15:b3:01:89:8f:a0:35:02:80:f7:32:d5: a9:6a:32:79:81:17:cc:2b:f1:5c:0a:50:b8:85:0a:7d:ba:9a: c4:5f:9a:4f:e9:13:0c:46:2f:4b:28:e5:ec:cc:5b:e0:db:07: 83:7e:c7:f7:c8:5c:35:b5:93:70:3d:f1:bd:db:a7:0d:06:9f: ea:f0:14:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+xRGLhQgR+xUhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk OGM0MTQxMWMtYmY3ZC00NDVlLWIzY2ItNWQxZmRjNjEzZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZFfa+FgZyMsTtp1Wox5RVv3fl/TF7YHrgOq C6kMMgPc2+pKXO0Oz7R9FciJU2i97CQCg7B6gvAqM9P7T/8BihNtstlK6Hg7RZ7y yJZc4ktBAAGBf7pNFE1r/QRmRU19ijMCkTxadBl3po7cx/bzBGOyvQyY0nWQYkjA 0MEcVrrmiPKsYsKxKydGHDl3r3myXLCrVa5CcfApjvzaNR5cder9m4PbvbReQigd m8VWcSqgctA797xqvJ1wD7aM8SXBQo9c+aBRam1FQRGkqDWBB2+Li+YqEnrASqqs zwifOYR/PtR/S/LR/K6C52AhvSc3QBDbVIrmxF1Pe8D8+XKurQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLNOE5QkdNZ/07JhpP6DHdy75lyNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjNlOGQyYjEtN2RhNi0z NTEzLTljN2UtMzVmMWU3YjFiNWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYCr3DjfiOOtQZpdTc3SR9WT2NM8sg+Omflubzvba245PDZaMfpc83C uNlufQAkBHrztzkWTpkAWILFmggc7m9NvwGEyxu0Ypi1BZeCxk0aFKWLToK0fEIb rFbWowMukEU+hTd5xHaAFFsNL0YYPa3wsdE9uAPFRNlCIKKbE/Ylr9lwkHLlUqsm D3f0NKpoL8YxUTCtI7cA5eLwy7raRwSSTW0ruJUNvSmS8sh3+NREKoTffCY1+pw8 eBWzAYmPoDUCgPcy1alqMnmBF8wr8VwKULiFCn26msRfmk/pEwxGL0so5ezMW+Db B4N+x/fIXDW1k3A98b3bpw0Gn+rwFDM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:42:41 2025 by rpki-client