$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa File: 70b0e265-b1b3-3960-957a-0b222bb6a80d.roa (raw, json) Hash identifier: 4XplYlivjzMjDGImD5NxvOpMQ9jTFfRYw3Y+1EFYZzM= Subject key identifier: 66:65:3F:4C:47:65:77:74:2F:C4:21:B3:2A:DF:DD:D6:34:D9:F2:FA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D728DE83A91BC3D88FDB00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:28:de:83:a9:1b:c3:d8:8f:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=0402c8cc-f9d1-4e46-be33-58ef7f377c54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:b9:c1:46:45:35:37:ea:80:57:59:43:e3: 44:a2:1a:4e:6d:31:23:7d:f5:9e:3a:c5:84:98:6d: 91:98:55:b9:29:ba:8b:dc:02:be:88:83:b5:b0:9f: 17:d5:82:50:eb:8f:bd:89:95:20:35:bb:c8:88:3e: f1:75:c4:ee:ce:db:07:87:13:47:6f:ff:8d:e9:ea: 73:0e:18:dc:87:82:17:b5:60:e7:aa:65:7f:d8:e2: 4c:e3:39:a7:7c:3d:ff:0b:92:a6:b4:5d:8a:68:7e: 05:c2:93:a0:ca:de:bb:4f:61:b9:12:25:60:db:95: 0f:ff:d2:e7:95:51:49:e0:38:17:0b:ce:e0:fa:00: 80:5b:fd:4c:7a:cd:f9:1f:98:b1:f5:ce:31:a6:f6: 9d:60:4d:96:81:2d:12:19:8b:5e:05:ec:44:d8:20: 10:4f:d9:54:c7:87:67:99:d2:ae:05:60:ab:c8:21: 5f:f9:9e:f4:2e:d4:a0:57:71:8d:78:9d:62:27:d7: 0a:87:3d:5c:54:f7:bc:e1:e4:6d:b4:66:c7:d0:f5: f8:8a:64:07:29:22:c3:28:9d:88:d7:c4:3d:2a:ce: 60:a4:68:85:29:7a:f0:4d:a2:46:09:89:d7:b7:40: b0:f3:c8:f6:31:aa:24:b4:66:5a:6c:04:a7:1c:c4: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:65:3F:4C:47:65:77:74:2F:C4:21:B3:2A:DF:DD:D6:34:D9:F2:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/70b0e265-b1b3-3960-957a-0b222bb6a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d6:16:70:93:db:ce:4e:ae:3b:91:c9:58:b2:bb:f7:fb:69: 9a:11:78:3a:16:71:b4:bd:e3:30:d7:ab:26:cb:62:9e:a3:7c: 8a:10:93:de:1b:a3:1b:d1:1f:ef:4f:e6:b5:60:01:a2:45:02: c0:24:7e:b1:16:95:c1:e7:c4:77:96:d2:2f:5c:4f:d0:1d:aa: 37:02:91:46:cc:b3:fe:38:9e:b7:c0:38:86:a3:38:91:f0:5c: 50:e1:cc:fc:d5:1e:2f:cc:ca:01:f7:0e:19:fb:82:2e:c9:e1: cd:d8:65:06:31:9d:70:26:92:17:22:7e:0a:f9:35:88:ba:05: 55:64:c3:b2:60:b2:44:d3:84:61:90:b6:e4:2e:83:fd:63:04: 30:56:fe:b3:59:32:ef:22:c3:b9:89:b2:f9:c1:65:77:23:07: da:a1:aa:94:64:42:6a:7a:73:fe:9a:b6:fe:86:28:2a:7d:72: 5d:33:cb:c5:8f:7b:5c:ba:bb:11:69:80:c3:28:e1:02:63:4b: 99:86:dc:7f:6c:5f:b1:2a:94:83:ea:f0:7e:99:d7:b5:12:7a: 13:16:00:12:14:7d:b4:6b:6c:0d:99:1b:27:91:15:d0:ec:96: f4:82:86:8a:f0:85:a1:f2:1a:5a:13:d5:fe:51:70:6d:4d:61: 9c:5d:a6:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1yjeg6kbw9iP2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MDQwMmM4Y2MtZjlkMS00ZTQ2LWJlMzMtNThlZjdmMzc3YzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdm5wUZFNTfqgFdZQ+NEohpObTEjffWeOsWE mG2RmFW5KbqL3AK+iIO1sJ8X1YJQ64+9iZUgNbvIiD7xdcTuztsHhxNHb/+N6epz Dhjch4IXtWDnqmV/2OJM4zmnfD3/C5KmtF2KaH4FwpOgyt67T2G5EiVg25UP/9Ln lVFJ4DgXC87g+gCAW/1Mes35H5ix9c4xpvadYE2WgS0SGYteBexE2CAQT9lUx4dn mdKuBWCryCFf+Z70LtSgV3GNeJ1iJ9cKhz1cVPe84eRttGbH0PX4imQHKSLDKJ2I 18Q9Ks5gpGiFKXrwTaJGCYnXt0Cw88j2MaoktGZabASnHMRvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGZlP0xHZXd0L8Qhsyrf3dY02fL6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNzBiMGUyNjUtYjFiMy0z OTYwLTk1N2EtMGIyMjJiYjZhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAELWFnCT285OrjuRyViyu/f7aZoReDoWcbS94zDXqybLYp6jfIoQk94b oxvRH+9P5rVgAaJFAsAkfrEWlcHnxHeW0i9cT9AdqjcCkUbMs/44nrfAOIajOJHw XFDhzPzVHi/MygH3Dhn7gi7J4c3YZQYxnXAmkhcifgr5NYi6BVVkw7JgskTThGGQ tuQug/1jBDBW/rNZMu8iw7mJsvnBZXcjB9qhqpRkQmp6c/6atv6GKCp9cl0zy8WP e1y6uxFpgMMo4QJjS5mG3H9sX7EqlIPq8H6Z17USehMWABIUfbRrbA2ZGyeRFdDs lvSChorwhaHyGloT1f5RcG1NYZxdpr4= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:18 2025 by rpki-client