$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa File: 401b248b-fbb5-32a6-9309-2b3aa7822986.roa (raw, json) Hash identifier: G8uDw3J/i0lb5fnpqY2I4KpjHAbDPPHxf1E9DN7aKFk= Subject key identifier: E8:92:3E:81:40:94:C3:4D:FB:C8:5E:FA:C2:AF:18:E1:EF:16:0A:60 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE47309615D4217F5D7C40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.192.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:47:30:96:15:d4:21:7f:5d:7c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7145b307-c923-4d1a-bbb9-8fba79713a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c0:f3:7a:7c:f7:7f:37:a8:d6:4a:ce:e8:b2: c0:fc:31:9c:0f:aa:b1:4e:07:d5:c3:0b:ba:d9:86: da:fa:c4:92:21:6d:33:04:e8:48:5b:a9:21:8d:b9: 10:a4:b5:27:8c:19:0a:09:7b:7f:6f:4d:81:2c:e8: cd:cc:cb:11:7d:07:be:89:26:3e:8a:ca:ca:08:8b: e5:fc:d6:72:0b:b5:b5:09:57:d5:6f:11:5f:22:05: a9:ac:28:fb:89:1d:8b:60:26:2b:91:b3:43:41:7c: 3e:21:b5:a1:45:cd:70:18:2c:11:c0:e3:0b:a0:f8: 16:ec:0e:fd:09:05:92:a3:85:b2:e2:a7:cb:53:16: 18:1b:f8:de:cf:33:75:35:ca:b6:0a:30:7a:89:ae: d6:dc:f3:99:64:56:7b:8d:eb:9a:40:75:20:e0:ce: 9b:03:39:ea:9a:66:ff:91:01:40:58:cf:be:e7:ac: 30:fc:07:7a:4c:87:cd:06:00:fe:ce:f3:f5:2b:22: 5b:d7:9e:2d:62:aa:00:14:09:0e:c8:49:db:e9:7e: ac:e7:69:1d:69:01:89:7b:a8:6b:8f:e5:10:a0:6e: 90:67:3c:5a:b4:c9:30:d2:41:a9:61:98:95:63:fa: 20:b9:cd:aa:bf:21:82:28:00:38:2d:3d:84:50:90: 1f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:92:3E:81:40:94:C3:4D:FB:C8:5E:FA:C2:AF:18:E1:EF:16:0A:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/401b248b-fbb5-32a6-9309-2b3aa7822986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.192.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:33:95:d7:b1:10:9e:48:79:93:b3:e0:82:4c:7e:eb:65:2a: a7:9c:85:2b:97:e4:b4:cd:2b:87:d0:68:0a:86:5e:e3:2f:a5: f0:be:1f:e5:88:bf:58:08:c8:13:a3:97:8e:d0:81:c9:c2:8e: 2a:26:7b:f2:a4:12:de:81:43:c1:78:12:30:b8:aa:37:2c:83: fc:5f:84:03:cd:bf:42:70:ff:7a:42:fd:61:51:c4:30:39:57: 7b:3e:ff:81:50:9f:9b:80:94:7a:a3:21:3b:ea:59:0e:c2:c2: b9:18:76:69:83:2d:b8:08:d3:7b:a9:bd:c1:eb:e3:fa:cd:8b: 7d:8c:bb:e7:ef:dc:ac:5f:7e:ec:6c:96:b4:eb:0c:31:39:2f: 39:06:6f:c0:d3:67:28:29:fb:9a:bf:3a:f0:a2:32:1f:ae:0f: 77:31:98:23:3b:2f:2f:11:02:3d:ad:d0:9d:2a:3b:98:5f:cd: 37:f1:6e:6c:ac:25:72:98:d0:e9:ea:28:1d:86:02:e7:6b:bc: ed:ac:b5:01:c1:18:a3:bf:3c:66:7f:b0:1f:5a:44:03:9f:a2: 7a:6f:9f:77:2b:a5:15:d5:ae:6a:9d:6f:da:a1:e1:2d:a5:f7: 8f:00:a2:16:c4:9e:85:e8:d9:b8:9e:a4:76:5a:88:9a:b6:e5: 05:34:d5:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkcwlhXUIX9dfEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzE0NWIzMDctYzkyMy00ZDFhLWJiYjktOGZiYTc5NzEzYTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcDzenz3fzeo1krO6LLA/DGcD6qxTgfVwwu6 2Yba+sSSIW0zBOhIW6khjbkQpLUnjBkKCXt/b02BLOjNzMsRfQe+iSY+isrKCIvl /NZyC7W1CVfVbxFfIgWprCj7iR2LYCYrkbNDQXw+IbWhRc1wGCwRwOMLoPgW7A79 CQWSo4Wy4qfLUxYYG/jezzN1Ncq2CjB6ia7W3POZZFZ7jeuaQHUg4M6bAznqmmb/ kQFAWM++56ww/Ad6TIfNBgD+zvP1KyJb154tYqoAFAkOyEnb6X6s52kdaQGJe6hr j+UQoG6QZzxatMkw0kGpYZiVY/oguc2qvyGCKAA4LT2EUJAf2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiSPoFAlMNN+8he+sKvGOHvFgpgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDAxYjI0OGItZmJiNS0z MmE2LTkzMDktMmIzYWE3ODIyOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAszldexEJ5IeZOz4IJMfutlKqechSuX5LTNK4fQaAqGXuMvpfC+H+WI v1gIyBOjl47QgcnCjiome/KkEt6BQ8F4EjC4qjcsg/xfhAPNv0Jw/3pC/WFRxDA5 V3s+/4FQn5uAlHqjITvqWQ7CwrkYdmmDLbgI03upvcHr4/rNi32Mu+fv3Kxffuxs lrTrDDE5LzkGb8DTZygp+5q/OvCiMh+uD3cxmCM7Ly8RAj2t0J0qO5hfzTfxbmys JXKY0OnqKB2GAudrvO2stQHBGKO/PGZ/sB9aRAOfonpvn3crpRXVrmqdb9qh4S2l 948AohbEnoXo2biepHZaiJq25QU01aw= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:21 2025 by rpki-client