$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa File: 2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa (raw, json) Hash identifier: GeDLu4LuPkf5XR7kCkTG6+tynYWzvSJp8+GNclILmEg= Subject key identifier: 36:27:71:DB:F8:04:0B:38:67:24:D7:A3:6F:E1:CB:CD:28:26:87:95 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B620214C728470E78B5BE36C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.21.216.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:14:c7:28:47:0e:78:b5:be:36:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=bbba8c8c-e175-4756-903f-662abbb9179c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c9:74:99:f8:a8:fd:88:67:22:82:ee:1b:10: 50:6d:40:6a:eb:a4:71:d0:f5:ce:e0:d1:b6:fd:b4: b6:e1:92:05:2d:19:2d:d4:69:38:2e:26:4f:05:51: 51:34:f1:15:c8:54:bd:27:49:e2:fc:5e:90:b1:bc: 1a:dd:1f:f6:26:6c:9a:84:a1:fa:9b:c5:2f:3a:57: 0c:05:c5:e6:51:81:a4:bb:0a:4f:d0:f5:d6:57:8b: 65:85:e3:06:bd:54:98:96:fb:5e:31:67:07:54:7a: 4a:a7:57:10:16:20:9c:2f:de:c4:f6:5f:8a:ed:a0: 92:64:3c:5f:c6:bd:ff:2c:bd:28:a1:c4:0e:92:13: 55:69:64:6a:c4:17:e2:2e:5a:48:2c:f5:45:c5:2f: 97:e9:e8:29:7b:b2:a8:21:67:be:87:34:31:2c:cd: b7:72:2e:8e:db:55:97:ae:d4:08:82:64:75:57:09: 64:c3:2f:90:c4:b0:5e:e7:99:06:8a:31:f5:db:73: 6e:70:04:b5:de:90:e5:fe:d3:a3:df:bf:c9:ea:dc: ee:b0:58:4b:fe:9e:fc:bd:14:df:42:ea:82:d3:8e: a9:35:c6:88:83:93:1b:64:1b:3c:b0:e5:74:c3:6a: 45:c0:7b:ec:38:b2:ed:6f:72:b9:77:7e:3a:2f:72: dc:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:27:71:DB:F8:04:0B:38:67:24:D7:A3:6F:E1:CB:CD:28:26:87:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2fe488cb-6386-3cea-ba4f-fe1c4ac66196.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.216.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:91:94:dd:1d:70:78:86:4b:ac:80:ae:d4:ae:f8:06:c2:ff: 67:2a:82:65:30:d3:de:ee:e8:50:91:7e:5d:97:bf:be:2d:39: 3a:15:fb:01:74:d1:70:60:67:69:7d:4a:31:95:24:91:93:ec: 48:d5:5d:99:3a:3b:56:3e:4f:79:3d:d0:d5:de:0f:df:d5:45: 94:29:06:a4:28:80:89:00:62:63:fc:83:13:69:27:86:67:7f: bd:36:b6:e5:06:d8:20:e9:cf:ed:27:1e:1d:cc:3b:59:23:5c: 8a:a1:b8:3f:a9:6e:db:a0:50:8f:76:1e:e2:90:08:08:37:d1: 0d:25:8d:b1:fa:31:55:07:41:dc:9c:93:1a:ac:f7:09:e6:a1: b0:8b:24:9f:83:c2:99:3a:46:97:a8:1f:e2:90:0f:50:ab:38: bc:87:fb:44:24:52:ec:48:f8:87:14:3a:c7:f8:a4:5c:fc:ca: 3e:e9:fe:5f:48:42:8c:28:af:cf:fa:5b:f5:fe:c1:ee:fa:3a: 03:62:ab:fc:c0:11:d5:70:66:f5:74:b7:4c:70:bc:9b:59:5c: d4:ed:b3:42:ca:ed:c9:35:71:d4:32:69:33:f6:e8:27:1b:9a: 89:9e:25:af:ed:ab:e8:4f:f0:2a:3d:e8:bd:0c:e6:99:b6:bc: ab:a8:f5:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhTHKEcOeLW+NsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmJiYThjOGMtZTE3NS00NzU2LTkwM2YtNjYyYWJiYjkxNzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8l0mfio/YhnIoLuGxBQbUBq66Rx0PXO4NG2 /bS24ZIFLRkt1Gk4LiZPBVFRNPEVyFS9J0ni/F6Qsbwa3R/2JmyahKH6m8UvOlcM BcXmUYGkuwpP0PXWV4tlheMGvVSYlvteMWcHVHpKp1cQFiCcL97E9l+K7aCSZDxf xr3/LL0oocQOkhNVaWRqxBfiLlpILPVFxS+X6egpe7KoIWe+hzQxLM23ci6O21WX rtQIgmR1Vwlkwy+QxLBe55kGijH123NucAS13pDl/tOj37/J6tzusFhL/p78vRTf QuqC046pNcaIg5MbZBs8sOV0w2pFwHvsOLLtb3K5d346L3LcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYncdv4BAs4ZyTXo2/hy80oJoeVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmZlNDg4Y2ItNjM4Ni0z Y2VhLWJhNGYtZmUxYzRhYzY2MTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCRlN0dcHiGS6yArtSu+AbC/2cqgmUw097u6FCRfl2Xv74tOToV+wF0 0XBgZ2l9SjGVJJGT7EjVXZk6O1Y+T3k90NXeD9/VRZQpBqQogIkAYmP8gxNpJ4Zn f702tuUG2CDpz+0nHh3MO1kjXIqhuD+pbtugUI92HuKQCAg30Q0ljbH6MVUHQdyc kxqs9wnmobCLJJ+Dwpk6RpeoH+KQD1CrOLyH+0QkUuxI+IcUOsf4pFz8yj7p/l9I Qowor8/6W/X+we76OgNiq/zAEdVwZvV0t0xwvJtZXNTts0LK7ck1cdQyaTP26Ccb momeJa/tq+hP8Co96L0M5pm2vKuo9Wg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:40 2025 by rpki-client