$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47a76487-f826-3576-b4ff-25f212d7210b.roa File: 47a76487-f826-3576-b4ff-25f212d7210b.roa (raw, json) Hash identifier: K9boSVsYvuoBnzeBDIQoYtQ6urNH+sKX1Yus8smbgEc= Subject key identifier: 84:A2:AB:86:BA:50:D5:3E:4B:C3:7A:C1:31:51:FB:64:D5:0F:93:F5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE5EF8E66D9F85EF866E58 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47a76487-f826-3576-b4ff-25f212d7210b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:5e:f8:e6:6d:9f:85:ef:86:6e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=21ef598e-31c8-479c-b1f5-d3ea07ee0d49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:49:50:68:77:e3:fe:92:3c:21:8b:9a:48:59: 20:40:e8:88:65:a1:2d:ed:6b:0e:36:16:67:b6:5b: 95:a7:5d:b6:d9:f3:97:12:e4:3c:b0:49:da:39:b6: 01:e3:90:45:23:92:93:a4:b6:5a:79:10:1c:af:04: aa:21:21:55:ff:00:f9:f3:68:61:5e:4c:d7:8f:5a: 7b:1c:b9:a7:8f:25:5e:d3:e6:51:28:7e:35:fc:91: 53:d2:3d:90:56:97:36:33:27:39:04:43:d1:9e:9e: 8c:47:67:6f:04:ed:10:bf:b9:3d:86:d3:74:53:73: 1b:92:af:41:ad:3d:4e:26:5d:ac:1d:90:60:9a:24: 1f:2e:37:76:db:f1:12:81:80:d0:7d:af:a1:05:28: fa:27:05:d4:11:ec:c3:91:b0:91:28:b3:89:9d:13: bf:94:7e:4e:69:85:34:aa:53:e1:82:47:17:55:c8: 81:c1:24:20:a4:c9:0c:a4:08:ef:03:fb:a9:1a:d1: 3d:29:b9:4e:d9:51:a0:71:e7:71:1b:69:3a:1b:4d: f1:18:67:49:47:4b:d7:f0:0b:04:3a:56:c4:61:79: e6:b9:64:e4:04:3b:c0:e9:a3:f4:1e:c6:94:5a:39: 3d:e7:41:9a:3d:4f:ae:37:56:4b:73:c3:b5:9d:1c: 4c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A2:AB:86:BA:50:D5:3E:4B:C3:7A:C1:31:51:FB:64:D5:0F:93:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/47a76487-f826-3576-b4ff-25f212d7210b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d8:73:05:30:71:89:fe:3c:22:38:76:bd:78:3a:f6:83:d2: 20:da:e8:1e:8f:75:c6:5e:b4:52:bf:0f:4c:64:af:c9:ed:bb: e0:ce:23:14:53:13:87:b4:52:51:bb:62:12:6b:bc:a5:a0:a7: 06:03:30:aa:b8:8c:a2:54:a2:75:d1:b1:72:08:09:63:54:e0: 41:de:1d:cb:cb:04:d2:00:af:93:08:92:d6:0f:12:a4:d6:0f: fe:82:3f:c7:e2:09:8b:52:99:42:51:d3:b3:24:a9:69:8f:7e: da:30:dd:db:88:66:df:d7:6b:fa:8e:de:13:2d:52:99:e8:e1: 28:eb:34:02:9f:cc:c8:0e:00:8c:53:18:4f:28:c7:c0:4f:95: 28:cc:44:a9:22:b6:d3:79:9a:5f:87:33:8a:52:9f:18:ed:2a: 0e:b5:a0:72:af:38:b2:a7:8c:ba:36:41:c1:e8:be:d0:e1:16: eb:b4:a9:15:8a:98:09:d4:c2:75:92:22:39:bd:9b:e5:cb:bb: 36:0e:70:d0:d3:2c:39:d4:04:83:73:90:ae:62:db:f9:9b:f0: c6:d1:0a:1c:c1:54:da:22:43:3b:47:17:b9:73:8b:93:28:e7: c4:a6:d3:89:e1:8d:28:b7:fc:a9:ec:aa:a2:2d:be:47:21:38: 5c:fa:00:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzl745m2fhe+GblgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjFlZjU5OGUtMzFjOC00NzljLWIxZjUtZDNlYTA3ZWUwZDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUlQaHfj/pI8IYuaSFkgQOiIZaEt7WsONhZn tluVp1222fOXEuQ8sEnaObYB45BFI5KTpLZaeRAcrwSqISFV/wD582hhXkzXj1p7 HLmnjyVe0+ZRKH41/JFT0j2QVpc2Myc5BEPRnp6MR2dvBO0Qv7k9htN0U3Mbkq9B rT1OJl2sHZBgmiQfLjd22/ESgYDQfa+hBSj6JwXUEezDkbCRKLOJnRO/lH5OaYU0 qlPhgkcXVciBwSQgpMkMpAjvA/upGtE9KblO2VGgcedxG2k6G03xGGdJR0vX8AsE OlbEYXnmuWTkBDvA6aP0HsaUWjk950GaPU+uN1ZLc8O1nRxMlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISiq4a6UNU+S8N6wTFR+2TVD5P1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDdhNzY0ODctZjgyNi0z NTc2LWI0ZmYtMjVmMjEyZDcyMTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvYcwUwcYn+PCI4dr14OvaD0iDa6B6PdcZetFK/D0xkr8ntu+DOIxRT E4e0UlG7YhJrvKWgpwYDMKq4jKJUonXRsXIICWNU4EHeHcvLBNIAr5MIktYPEqTW D/6CP8fiCYtSmUJR07MkqWmPftow3duIZt/Xa/qO3hMtUpno4SjrNAKfzMgOAIxT GE8ox8BPlSjMRKkittN5ml+HM4pSnxjtKg61oHKvOLKnjLo2QcHovtDhFuu0qRWK mAnUwnWSIjm9m+XLuzYOcNDTLDnUBINzkK5i2/mb8MbRChzBVNoiQztHF7lzi5Mo 58Sm04nhjSi3/KnsqqItvkchOFz6AE8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:09 2025 by rpki-client