$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54de2e37-d485-3c83-8047-53215f106a40.roa File: 54de2e37-d485-3c83-8047-53215f106a40.roa (raw, json) Hash identifier: H5AeSfIMVVkgEZt1uxG+pM9sR5SCM21RWXapDgxsb68= Subject key identifier: 4C:0F:3A:C9:F1:5D:E5:0E:BA:DF:63:DE:A2:8E:E3:12:93:B4:F3:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C740ACB56315D57ADD100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54de2e37-d485-3c83-8047-53215f106a40.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.21.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:74:0a:cb:56:31:5d:57:ad:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=50f85885-2122-46e5-b5ae-50059d370d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7f:61:c5:40:61:48:21:34:d2:55:e6:9b:12: b5:78:44:d3:40:f9:44:13:20:c9:47:c7:49:9b:31: 23:8e:ec:21:8b:9e:24:44:52:34:64:4a:b0:7f:30: 86:11:4a:4d:4c:8f:92:a6:ad:42:ea:8f:e9:54:77: c9:cf:e8:25:b9:18:a8:5a:e3:1a:16:25:43:73:6a: a8:02:b7:db:3a:bd:90:fe:9e:3e:fb:67:e7:56:b3: 6a:ea:8c:84:ae:f3:50:91:50:56:93:34:5c:60:fa: d8:fa:37:04:08:4c:61:ff:11:81:0b:bb:7b:2c:a5: 5d:71:d4:68:7a:70:b0:aa:3f:c4:f7:2c:a7:ee:fe: 09:d1:5c:2e:66:a2:08:28:a3:95:9e:d4:a8:43:62: db:80:fa:08:77:b2:7e:24:2a:6c:27:59:98:f3:5e: f2:5d:5a:57:5f:46:f5:08:e7:4d:a2:ed:4a:ad:8e: d6:73:0d:4f:cb:e4:2e:05:c8:fc:11:77:7f:f4:17: 59:ad:33:d1:92:d7:d7:cf:f8:eb:62:d9:8a:4d:af: c4:9b:9b:79:f2:5d:16:41:86:35:ec:a0:08:51:1d: b2:58:e8:ca:80:6d:c7:ad:52:c8:d4:91:33:42:20: f4:4d:2b:81:c2:84:17:d0:3e:90:4d:27:ca:b3:65: ba:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:0F:3A:C9:F1:5D:E5:0E:BA:DF:63:DE:A2:8E:E3:12:93:B4:F3:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/54de2e37-d485-3c83-8047-53215f106a40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:ba:67:fa:ca:1b:72:51:86:9e:66:2e:c1:9a:a2:c3:4c:e2: 38:0d:fe:8c:32:20:95:c4:90:4e:d9:51:26:96:52:d4:bb:48: b4:4a:21:dd:2a:b7:d0:97:47:97:06:ea:34:f5:f9:5c:82:7b: 8c:67:2a:41:0e:62:36:1b:8e:29:c7:f5:73:14:db:8d:9c:04: 5f:2c:81:c3:24:ab:fc:cc:3a:64:27:80:bd:38:f3:39:97:2b: 7c:21:8e:76:f9:bb:d0:48:7b:af:78:54:e7:3d:f4:3c:69:8e: 7c:aa:0b:8a:8c:9f:4b:96:c4:24:6a:59:76:bc:1b:05:0c:30: 37:d6:07:2c:95:88:ed:6a:3c:25:da:bf:a0:f5:77:22:91:86: 2b:82:9a:fa:8d:44:f5:32:99:44:30:85:ce:a2:77:a0:6a:7b: 07:5a:bf:c8:38:49:9d:d0:50:c1:0e:c0:d7:a0:7b:cf:25:04: b9:da:ab:e4:3d:08:4a:b2:95:b5:0a:17:f5:3c:1f:e2:1f:54: 14:e6:49:cc:c4:a1:b3:4b:9f:43:3a:ad:55:a8:ff:1c:33:5e: 31:02:e0:37:05:42:7c:4a:7a:1d:ef:7c:bf:16:c6:79:6f:97: e4:9a:1d:9a:ea:52:17:08:ea:88:eb:d0:d4:82:9a:60:89:a2: 66:13:96:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHQKy1YxXVet0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NTBmODU4ODUtMjEyMi00NmU1LWI1YWUtNTAwNTlkMzcwZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu39hxUBhSCE00lXmmxK1eETTQPlEEyDJR8dJ mzEjjuwhi54kRFI0ZEqwfzCGEUpNTI+Spq1C6o/pVHfJz+gluRioWuMaFiVDc2qo ArfbOr2Q/p4++2fnVrNq6oyErvNQkVBWkzRcYPrY+jcECExh/xGBC7t7LKVdcdRo enCwqj/E9yyn7v4J0VwuZqIIKKOVntSoQ2LbgPoId7J+JCpsJ1mY817yXVpXX0b1 COdNou1KrY7Wcw1Py+QuBcj8EXd/9BdZrTPRktfXz/jrYtmKTa/Em5t58l0WQYY1 7KAIUR2yWOjKgG3HrVLI1JEzQiD0TSuBwoQX0D6QTSfKs2W6cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEwPOsnxXeUOut9j3qKO4xKTtPNhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTRkZTJlMzctZDQ4NS0z YzgzLTgwNDctNTMyMTVmMTA2YTQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABa6Z/rKG3JRhp5mLsGaosNM4jgN/owyIJXEkE7ZUSaWUtS7SLRKId0q t9CXR5cG6jT1+VyCe4xnKkEOYjYbjinH9XMU242cBF8sgcMkq/zMOmQngL048zmX K3whjnb5u9BIe694VOc99DxpjnyqC4qMn0uWxCRqWXa8GwUMMDfWByyViO1qPCXa v6D1dyKRhiuCmvqNRPUymUQwhc6id6Bqewdav8g4SZ3QUMEOwNege88lBLnaq+Q9 CEqylbUKF/U8H+IfVBTmSczEobNLn0M6rVWo/xwzXjEC4DcFQnxKeh3vfL8Wxnlv l+SaHZrqUhcI6ojr0NSCmmCJomYTlmo= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:37 2025 by rpki-client