$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa File: 91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa (raw, json) Hash identifier: l/G8uX1WKL2I8UaqDOuoc9kbAZUV1tIEMHDvBRwIEzw= Subject key identifier: 6E:93:B1:64:82:8A:C1:13:DD:90:88:6E:55:B4:33:4B:F1:2B:07:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D728F31B99E4EFD8C7CBA0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.104.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:28:f3:1b:99:e4:ef:d8:c7:cb:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=e65c156c-f3c9-4171-a50e-0c4db2966927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:24:8e:0b:a2:47:d9:4f:4d:31:4f:8b:60: 7d:ca:72:8d:63:dd:3f:41:e5:63:a4:12:70:80:b8: 4b:5f:58:c0:14:f1:6e:04:88:58:1d:23:e0:69:11: 2b:3d:bd:8f:5a:e0:c8:00:3c:62:86:53:79:df:b7: 44:f5:cf:2a:5b:ce:3e:97:28:78:c6:30:b9:f2:e1: 93:f1:a6:0e:05:77:72:0d:44:eb:81:ea:fd:87:6e: 6b:bc:bc:8a:25:18:96:9a:86:85:6c:8e:ac:55:1f: 39:0f:5f:fe:f4:db:73:62:27:34:f5:d2:8d:6b:d2: 95:11:bd:fe:3b:1e:cb:ac:39:53:1a:c3:e3:bb:9b: 98:55:4f:a7:36:a3:15:d7:22:e2:52:f9:4c:01:80: 39:0a:56:0b:3a:6f:d6:02:1d:a2:de:94:8c:df:d6: 6d:9d:89:df:05:4e:bd:59:0b:88:6d:5d:f6:ce:d6: 17:f4:b5:41:75:48:61:03:d6:c3:34:b4:97:fb:cb: 0f:b8:d5:bf:47:ee:33:bf:2e:c1:19:03:df:5b:f0: 73:db:1f:51:5b:28:15:46:88:00:db:05:fa:c5:d9: db:b1:10:98:06:25:2b:77:e3:6a:dc:90:1e:85:13: 98:b3:aa:f8:64:74:76:1c:8b:26:7e:7e:5d:6e:d9: ca:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:93:B1:64:82:8A:C1:13:DD:90:88:6E:55:B4:33:4B:F1:2B:07:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/91663f8d-8a98-3988-94ce-35cb2e8e17b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8c:ed:2c:32:95:55:e6:35:30:b6:fc:ef:29:fc:ed:68:a6: d5:3a:58:0d:b9:3b:7a:ac:a1:db:2d:27:b9:e8:46:29:3c:3c: 29:c9:32:6b:50:24:73:d2:08:18:87:f4:c3:13:b9:d0:cf:5b: 50:de:a6:90:eb:aa:28:41:58:c6:52:69:99:a8:9d:3e:4d:91: 0d:57:5b:c2:3a:a9:2c:96:42:8b:16:05:81:08:ae:4c:d5:a2: 24:65:be:da:48:49:a9:9f:b1:cc:95:97:ce:2a:32:19:63:51: 81:94:3e:1e:87:7e:70:b7:93:c3:be:06:9d:5a:c1:d1:1c:a6: 20:26:4d:18:16:bb:86:e9:6f:38:cc:d2:3d:f2:eb:30:24:15: 7b:1c:94:d7:55:ad:ce:53:c6:d3:d8:b7:22:e1:50:62:69:d9: de:d8:d8:d4:64:0f:88:28:2a:fe:a9:5a:da:fe:43:64:e2:40: 1c:18:95:6f:5b:61:6d:76:42:99:25:7c:41:69:dd:f9:ae:44: fd:9b:d3:2f:2b:e6:9d:1c:f9:af:60:ce:7f:8a:8e:71:0c:66: 9b:d0:aa:56:cb:28:17:4d:93:c2:b2:54:e3:e1:ab:e8:d1:90: f2:06:21:34:5b:33:74:d2:f8:28:ce:d5:8f:e5:80:c3:48:e7: 2e:d2:ec:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1yjzG5nk79jHy6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk ZTY1YzE1NmMtZjNjOS00MTcxLWE1MGUtMGM0ZGIyOTY2OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS4kjguiR9lPTTFPi2B9ynKNY90/QeVjpBJw gLhLX1jAFPFuBIhYHSPgaRErPb2PWuDIADxihlN537dE9c8qW84+lyh4xjC58uGT 8aYOBXdyDUTrger9h25rvLyKJRiWmoaFbI6sVR85D1/+9NtzYic09dKNa9KVEb3+ Ox7LrDlTGsPju5uYVU+nNqMV1yLiUvlMAYA5ClYLOm/WAh2i3pSM39ZtnYnfBU69 WQuIbV32ztYX9LVBdUhhA9bDNLSX+8sPuNW/R+4zvy7BGQPfW/Bz2x9RWygVRogA 2wX6xdnbsRCYBiUrd+Nq3JAehROYs6r4ZHR2HIsmfn5dbtnKXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6TsWSCisET3ZCIblW0M0vxKwdhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTE2NjNmOGQtOGE5OC0z OTg4LTk0Y2UtMzVjYjJlOGUxN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuM7SwylVXmNTC2/O8p/O1optU6WA25O3qsodstJ7noRik8PCnJMmtQ JHPSCBiH9MMTudDPW1DeppDrqihBWMZSaZmonT5NkQ1XW8I6qSyWQosWBYEIrkzV oiRlvtpISamfscyVl84qMhljUYGUPh6HfnC3k8O+Bp1awdEcpiAmTRgWu4bpbzjM 0j3y6zAkFXsclNdVrc5TxtPYtyLhUGJp2d7Y2NRkD4goKv6pWtr+Q2TiQBwYlW9b YW12QpklfEFp3fmuRP2b0y8r5p0c+a9gzn+KjnEMZpvQqlbLKBdNk8KyVOPhq+jR kPIGITRbM3TS+CjO1Y/lgMNI5y7S7LI= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:11 2025 by rpki-client