$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa File: 3d429698-2bfc-3eae-8d85-55492090ea2a.roa (raw, json) Hash identifier: qkzLOgRQISIehh7UfkplBojkAMho0G6uDPiSbs0BPXs= Subject key identifier: 39:74:E6:A3:1B:A4:40:C7:F8:77:98:E0:1D:29:EB:9C:64:AB:4F:01 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B127165EC702C556EF32648A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa Signing time: Wed 03 Sep 2025 13:00:41 +0000 ROA not before: Wed 03 Sep 2025 13:00:41 +0000 ROA not after: Tue 02 Dec 2025 14:00:41 +0000 asID: 30036 IP address blocks: 173.21.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:12:71:65:ec:70:2c:55:6e:f3:26:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 3 13:00:41 2025 GMT Not After : Dec 2 14:00:41 2025 GMT Subject: CN=5ba6ffd8-255f-4ab4-94ff-894bad686f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:de:38:07:71:ec:21:e3:9b:c5:a3:27:cf: cb:78:d7:b6:0f:a5:49:3d:75:50:00:b6:18:8e:8f: 47:d1:a9:85:c7:23:f1:3c:8b:39:88:14:77:2b:06: 42:ff:cc:02:b6:40:ea:7d:f1:e2:f7:df:8f:ea:27: 29:92:c4:2f:9a:0e:9a:a8:db:90:d1:f8:de:e1:7a: b5:77:ba:b1:0f:c4:5e:97:be:71:29:17:05:29:c7: 03:75:8c:d5:43:71:a2:7d:dc:8b:48:36:8d:99:14: ad:e2:b2:8f:61:66:34:5e:ac:bf:17:5d:db:a7:39: 29:10:63:10:96:ae:56:1f:2f:6f:c0:1d:4e:17:c5: d1:15:0a:b3:66:fa:7f:4f:29:51:c8:c7:a9:b0:90: 9e:92:cb:67:1a:59:ca:4b:b8:72:5d:89:a2:ab:8d: a2:fe:7c:f3:85:4c:c4:16:1b:1d:3a:ef:7e:49:c6: fd:08:f9:b3:42:97:3c:43:a2:29:24:7b:1c:4c:22: fe:4d:ee:06:83:32:0e:be:01:95:7a:ce:1d:ae:f3: 7d:48:6e:0e:60:33:78:61:9f:42:15:49:7a:c4:0e: d1:13:2c:2f:09:3a:73:cc:c1:b4:4a:ec:cc:f3:b3: 29:24:03:e1:e3:64:71:6a:48:19:d9:a3:5c:15:55: d0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:74:E6:A3:1B:A4:40:C7:F8:77:98:E0:1D:29:EB:9C:64:AB:4F:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3d429698-2bfc-3eae-8d85-55492090ea2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.8.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:80:6c:2b:02:da:c2:1b:20:61:0b:46:5f:e3:1f:95:b7:eb: 2d:db:01:7c:07:b8:9a:f3:c9:1e:ea:22:1b:4c:07:e6:39:da: e7:ba:71:93:f2:1e:13:67:b9:30:3d:f2:7a:74:6a:fe:08:70: 15:5a:42:dc:2f:3b:7b:25:c9:81:fb:56:b7:fb:39:73:c3:d9: ad:4c:a5:74:2e:83:91:5d:84:67:4c:51:a8:66:ca:46:3f:ca: 95:77:32:ee:f1:7e:d5:0b:6c:9f:ec:85:bb:f6:22:45:8e:3e: 4a:78:ed:5b:0e:b1:1c:28:40:48:16:3a:84:a5:15:7a:6a:cf: 24:2d:cc:33:a7:b9:b0:86:e3:1f:f2:65:d9:93:54:31:3b:a2: 70:8a:77:de:39:a0:c2:3c:6a:76:71:35:66:10:4f:e0:95:69: b3:6f:3e:60:cd:39:04:3b:17:75:4d:c4:f2:d3:7a:91:79:95: 5a:4e:f9:e5:65:11:21:98:38:08:67:c9:9b:70:bb:e0:49:46: 1f:89:bb:af:6f:ba:f0:78:4f:8f:82:17:21:89:ea:b9:6c:83: ac:d6:e9:e8:97:a8:b0:0c:be:50:d2:69:dc:01:5a:94:72:c2: 29:80:fc:31:11:32:98:2f:bc:36:c6:5c:61:f2:6d:cd:c9:f3: 5a:b8:76:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsScWXscCxVbvMmSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkwMzEzMDA0MVoXDTI1MTIwMjE0MDA0MVowLzEtMCsGA1UEAxMk NWJhNmZmZDgtMjU1Zi00YWI0LTk0ZmYtODk0YmFkNjg2ZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNjeOAdx7CHjm8WjJ8/LeNe2D6VJPXVQALYY jo9H0amFxyPxPIs5iBR3KwZC/8wCtkDqffHi99+P6icpksQvmg6aqNuQ0fje4Xq1 d7qxD8Rel75xKRcFKccDdYzVQ3GifdyLSDaNmRSt4rKPYWY0Xqy/F13bpzkpEGMQ lq5WHy9vwB1OF8XRFQqzZvp/TylRyMepsJCekstnGlnKS7hyXYmiq42i/nzzhUzE FhsdOu9+Scb9CPmzQpc8Q6IpJHscTCL+Te4GgzIOvgGVes4drvN9SG4OYDN4YZ9C FUl6xA7REywvCTpzzMG0SuzM87MpJAPh42RxakgZ2aNcFVXQBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDl05qMbpEDH+HeY4B0p65xkq08BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2Q0Mjk2OTgtMmJmYy0z ZWFlLThkODUtNTU0OTIwOTBlYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRUIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeAbCsC2sIbIGELRl/jH5W36y3bAXwHuJrzyR7qIhtMB+Y52ue6cZPy HhNnuTA98np0av4IcBVaQtwvO3slyYH7Vrf7OXPD2a1MpXQug5FdhGdMUahmykY/ ypV3Mu7xftULbJ/shbv2IkWOPkp47VsOsRwoQEgWOoSlFXpqzyQtzDOnubCG4x/y ZdmTVDE7onCKd945oMI8anZxNWYQT+CVabNvPmDNOQQ7F3VNxPLTepF5lVpO+eVl ESGYOAhnyZtwu+BJRh+Ju69vuvB4T4+CFyGJ6rlsg6zW6eiXqLAMvlDSadwBWpRy wimA/DERMpgvvDbGXGHybc3J81q4dlQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:56 2025 by rpki-client