$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa File: 5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa (raw, json) Hash identifier: i+4G2RadBiD7v+Me4h22XSctfRqppeuoLsY2glTmxn8= Subject key identifier: 71:9C:DF:4C:A4:02:4D:06:01:F6:04:B5:39:AC:AE:F9:F4:57:64:0E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62021CA028EFCEDFD3B43070 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.21.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:1c:a0:28:ef:ce:df:d3:b4:30:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9c490e16-126f-46e4-8a00-4bbd0b534b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0c:bb:23:8f:1d:7c:bf:e2:e3:e9:d8:ed:57: 75:f2:48:2f:f3:ea:cd:4f:d6:85:bc:b1:34:25:c5: 63:93:a0:bf:60:84:0c:1f:e8:82:c6:eb:66:82:f8: 89:a9:d4:c1:20:97:a3:85:3d:93:bd:5f:c5:03:2a: 0a:0f:cf:74:e4:66:d7:97:e7:55:a4:9f:47:3a:9f: 64:70:3d:9b:99:d7:e6:c1:9d:14:b2:08:1c:9c:03: 8e:9c:8a:5f:32:94:ff:4e:5b:08:c3:db:2e:6f:9e: 58:67:9a:18:83:d4:92:5a:50:55:79:91:c0:53:3c: b9:15:fb:6a:c1:f0:cb:56:53:bb:ab:42:03:f3:7c: 2f:9b:d4:6b:20:4b:ee:30:68:e5:f0:3b:2d:97:38: ed:b8:d9:e4:e4:fd:f0:e8:5b:77:7a:ef:2c:c5:57: 35:68:a4:a0:95:5e:01:fb:15:c6:a0:c5:f6:e5:44: 3e:bb:45:89:a7:0e:82:63:a0:74:35:1d:da:02:db: 4c:85:04:aa:3c:3e:3a:06:5c:3b:93:63:ee:ac:7a: 54:67:7f:de:36:4b:f9:ce:d9:35:28:af:d4:33:58: 8a:e7:70:66:75:5e:f6:64:a4:44:5f:92:24:4f:91: 29:13:09:20:90:b8:fa:1d:28:89:53:38:51:66:75: 93:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9C:DF:4C:A4:02:4D:06:01:F6:04:B5:39:AC:AE:F9:F4:57:64:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5211dc3d-8d4f-308c-ba25-a69d472dbce1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:d2:71:6a:b8:bc:02:b8:34:a3:aa:36:f4:86:e3:4c:ba:24: 0b:0b:62:b6:db:6c:8f:22:2f:73:77:7c:71:e0:50:ea:be:6f: c2:85:cf:50:95:f9:47:e2:6c:ea:3e:03:55:f6:77:d0:b8:ca: 51:dd:1e:76:85:41:00:8e:c0:8e:df:e2:73:1f:4d:3d:5d:de: 96:81:08:04:f3:13:a7:c0:34:d8:c0:98:8d:be:b0:26:01:f9: 7e:b4:a0:b8:81:48:44:7a:2f:af:1a:74:6e:56:98:5d:e6:1e: 6e:16:cf:99:b0:69:f9:c9:ad:70:d0:02:d9:2b:2b:d6:a7:d5: e9:60:d3:76:56:af:77:58:6f:3a:2c:f0:6a:26:47:0f:aa:ff: 97:96:7e:50:4a:c1:f7:55:63:a2:2e:18:3e:d7:af:f3:c3:fc: 5d:96:a1:e7:11:eb:af:23:58:b2:30:95:92:e1:39:13:a5:c5: 24:51:d4:d8:6e:db:72:18:35:6d:05:92:38:06:a3:0a:f1:42: 9a:8d:e7:7c:ab:9c:3b:3a:82:37:0b:8a:7a:ca:e4:b6:c8:ba: 89:14:34:0f:9b:e1:84:60:80:a7:3b:07:9e:95:52:ad:61:c9: a3:a4:c3:92:7d:c9:61:0a:ac:f7:4b:94:51:0e:9e:26:67:ca: 27:91:5c:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAhygKO/O39O0MHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWM0OTBlMTYtMTI2Zi00NmU0LThhMDAtNGJiZDBiNTM0YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQy7I48dfL/i4+nY7Vd18kgv8+rNT9aFvLE0 JcVjk6C/YIQMH+iCxutmgviJqdTBIJejhT2TvV/FAyoKD8905GbXl+dVpJ9HOp9k cD2bmdfmwZ0UsggcnAOOnIpfMpT/TlsIw9sub55YZ5oYg9SSWlBVeZHAUzy5Fftq wfDLVlO7q0ID83wvm9RrIEvuMGjl8DstlzjtuNnk5P3w6Ft3eu8sxVc1aKSglV4B +xXGoMX25UQ+u0WJpw6CY6B0NR3aAttMhQSqPD46Blw7k2PurHpUZ3/eNkv5ztk1 KK/UM1iK53BmdV72ZKREX5IkT5EpEwkgkLj6HSiJUzhRZnWTZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHGc30ykAk0GAfYEtTmsrvn0V2QOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTIxMWRjM2QtOGQ0Zi0z MDhjLWJhMjUtYTY5ZDQ3MmRiY2UxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAILScWq4vAK4NKOqNvSG40y6JAsLYrbbbI8iL3N3fHHgUOq+b8KFz1CV +UfibOo+A1X2d9C4ylHdHnaFQQCOwI7f4nMfTT1d3paBCATzE6fANNjAmI2+sCYB +X60oLiBSER6L68adG5WmF3mHm4Wz5mwafnJrXDQAtkrK9an1elg03ZWr3dYbzos 8GomRw+q/5eWflBKwfdVY6IuGD7Xr/PD/F2WoecR668jWLIwlZLhOROlxSRR1Nhu 23IYNW0FkjgGowrxQpqN53yrnDs6gjcLinrK5LbIuokUNA+b4YRggKc7B56VUq1h yaOkw5J9yWEKrPdLlFEOniZnyieRXG4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:26 2025 by rpki-client