$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/821a21c3-8230-38f3-9829-86da65370fcd.roa File: 821a21c3-8230-38f3-9829-86da65370fcd.roa (raw, json) Hash identifier: MVkckU28h4dInDoOV+Ytr1rtPehIOUgCwhFlIL8ZiYM= Subject key identifier: 49:57:9D:E0:54:8B:76:7E:46:A6:F0:32:4D:3A:DF:A9:7D:31:AC:6A Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6CB48D573CD31B4045BE80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/821a21c3-8230-38f3-9829-86da65370fcd.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b4:8d:57:3c:d3:1b:40:45:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=19e92c6f-8f14-438e-8135-d32e238cc8d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:be:0f:a1:00:06:92:3c:13:ba:89:9b:4d:b0: 41:48:d0:56:fa:f7:2a:bd:27:35:4e:6b:99:9d:28: e8:81:cc:13:96:58:ea:ac:9d:ff:58:47:37:97:44: 49:5a:7c:74:25:80:0a:c1:b9:cc:ac:f8:c3:b9:c4: e8:e3:5b:8a:b6:85:fd:1b:b9:c3:a6:68:9e:8b:9a: f9:3d:66:88:61:f1:cc:19:17:0f:db:53:1e:5b:3a: 51:2e:29:14:e1:f7:7a:49:6f:b0:93:0a:40:a7:f7: 77:46:86:55:51:94:67:fb:cd:8b:70:42:69:cf:74: 72:a0:f1:29:29:61:22:4a:77:ff:c2:23:15:60:81: 4c:bf:a4:be:82:e7:79:65:c2:4c:d7:59:be:fe:72: 8f:c2:2e:35:a8:b2:ec:20:40:23:40:3b:92:93:09: a1:6e:e4:31:b4:b0:0f:a8:42:74:8d:93:c9:7d:21: cd:ae:c5:78:78:46:f1:11:d8:c9:ac:8a:5c:72:58: 9e:9b:d4:a0:0c:b1:46:9d:c8:bb:55:b1:d0:39:f0: f2:e2:18:c6:da:ee:23:01:30:1c:40:75:c3:47:ce: cd:02:a2:a9:3c:6d:c0:26:95:c1:eb:64:ff:75:20: f7:c1:7f:94:1f:b8:7f:15:89:ce:b0:0e:8e:94:cc: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:57:9D:E0:54:8B:76:7E:46:A6:F0:32:4D:3A:DF:A9:7D:31:AC:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/821a21c3-8230-38f3-9829-86da65370fcd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.22.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8d:8e:42:c1:9b:46:21:3f:a6:e2:31:ae:45:79:5b:f4:20: c3:87:0d:88:bd:35:74:14:37:aa:e8:49:3b:e4:40:7c:b9:2c: b1:b6:18:34:5f:24:fa:03:82:7f:82:09:d4:11:03:73:c6:5a: 00:89:79:44:4b:8e:e3:f6:f4:93:9e:a9:46:52:73:2a:73:9f: e5:c7:8e:33:70:96:46:f2:ea:8f:06:d5:9b:b7:da:ce:2c:22: a1:fc:bc:01:af:fa:57:e1:7e:4e:ea:70:67:01:92:20:f0:33: d4:80:37:f2:86:b2:a6:6e:e1:43:7e:6d:fe:e4:46:ae:3a:7b: 18:14:82:28:92:a9:24:f0:a4:cb:24:84:e6:2e:44:ca:0f:52: 5e:7e:a0:9d:8a:35:74:5c:69:94:43:03:06:99:98:d7:2d:40: 43:67:68:c8:06:55:7d:a2:77:aa:a3:21:07:8c:04:ff:23:e1: fd:51:01:03:a0:86:90:e4:e3:20:de:bd:9f:e6:17:b6:3e:cd: 78:d8:7f:0d:a4:90:c4:a8:be:53:44:e8:7a:12:4f:25:03:87: e8:16:35:09:63:a6:31:21:47:ec:c9:16:d4:4d:80:ed:7e:d7: f2:a3:44:d2:ad:50:43:aa:2c:29:1c:3e:cf:cc:f9:fd:5f:0b: d8:c6:b7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLSNVzzTG0BFvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MTllOTJjNmYtOGYxNC00MzhlLTgxMzUtZDMyZTIzOGNjOGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsb4PoQAGkjwTuombTbBBSNBW+vcqvSc1TmuZ nSjogcwTlljqrJ3/WEc3l0RJWnx0JYAKwbnMrPjDucTo41uKtoX9G7nDpmiei5r5 PWaIYfHMGRcP21MeWzpRLikU4fd6SW+wkwpAp/d3RoZVUZRn+82LcEJpz3RyoPEp KWEiSnf/wiMVYIFMv6S+gud5ZcJM11m+/nKPwi41qLLsIEAjQDuSkwmhbuQxtLAP qEJ0jZPJfSHNrsV4eEbxEdjJrIpccliem9SgDLFGnci7VbHQOfDy4hjG2u4jATAc QHXDR87NAqKpPG3AJpXB62T/dSD3wX+UH7h/FYnOsA6OlMy3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElXneBUi3Z+RqbwMk0636l9MaxqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODIxYTIxYzMtODIzMC0z OGYzLTk4MjktODZkYTY1MzcwZmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRZpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiNjkLBm0YhP6biMa5FeVv0IMOHDYi9NXQUN6roSTvkQHy5LLG2GDRf JPoDgn+CCdQRA3PGWgCJeURLjuP29JOeqUZScypzn+XHjjNwlkby6o8G1Zu32s4s IqH8vAGv+lfhfk7qcGcBkiDwM9SAN/KGsqZu4UN+bf7kRq46exgUgiiSqSTwpMsk hOYuRMoPUl5+oJ2KNXRcaZRDAwaZmNctQENnaMgGVX2id6qjIQeMBP8j4f1RAQOg hpDk4yDevZ/mF7Y+zXjYfw2kkMSovlNE6HoSTyUDh+gWNQljpjEhR+zJFtRNgO1+ 1/KjRNKtUEOqLCkcPs/M+f1fC9jGt8A= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:15 2025 by rpki-client