$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa File: 96e6c965-0587-3b22-ae88-904374045cbc.roa (raw, json) Hash identifier: 8H7N7/FK1FyLqgl8674F95agVAYZ9NpnQMEatsfbxLg= Subject key identifier: 36:0B:93:7F:F4:B5:D4:A1:A5:2D:D2:D5:35:BA:53:1A:14:A1:64:C2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62022542E2005DD0B8377580 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.21.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:25:42:e2:00:5d:d0:b8:37:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=ee81ef26-ca91-4483-9602-0be2a69a4f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3f:c9:60:b8:ab:92:67:7a:2f:44:89:72:d3: 98:07:0d:b8:96:5c:35:5e:92:23:e0:32:08:cb:fa: 38:5c:2f:82:46:b4:fc:b4:89:43:0d:6a:44:c3:cd: 81:ed:eb:f5:e6:cd:65:56:ba:70:43:e6:57:00:81: ff:9d:27:28:f2:9c:b5:64:07:f1:45:08:36:46:5c: 24:ba:dc:14:12:d1:3f:2a:a3:59:a6:b7:ff:fa:2e: 66:5c:a6:ae:a7:70:72:c7:24:d6:bf:c5:ee:b3:5f: f2:32:d0:a8:06:56:98:8b:d5:c2:2d:03:de:6a:46: bc:6b:13:a0:19:b6:5f:43:2d:b5:b5:ef:2e:e8:cf: 52:15:0c:d6:d1:45:e6:d9:18:6d:e5:3e:82:40:cd: 2a:21:15:cf:08:2f:c4:66:80:9e:e6:96:e7:b6:c4: a0:7b:81:8c:0c:35:60:3e:1d:ed:f8:c7:09:56:5e: 75:95:81:46:6d:56:6c:6e:79:71:40:82:aa:c2:5f: a6:4e:59:1e:ec:67:6c:d4:91:60:68:23:ab:3a:0b: 9e:48:df:8a:c4:27:4a:eb:2e:2a:d6:a4:a3:3b:45: 87:8d:30:6b:49:1c:9b:d8:a2:fd:f7:b3:30:25:c4: 24:66:ad:9d:52:dd:0e:21:31:82:96:38:5d:a7:c7: da:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0B:93:7F:F4:B5:D4:A1:A5:2D:D2:D5:35:BA:53:1A:14:A1:64:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/96e6c965-0587-3b22-ae88-904374045cbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d8:fe:80:ac:29:67:c6:bc:3f:d5:ce:0e:b4:e5:ad:ed:ae: 97:12:e0:9d:ed:61:fb:65:6b:78:6b:ef:12:b5:95:06:a6:61: 72:3d:98:83:5c:06:4c:a6:37:f7:a1:96:ef:77:25:93:40:2a: ee:fa:92:5a:29:e3:1f:d7:e4:1c:3e:dc:37:5b:45:87:a3:58: 06:66:ab:31:68:c8:ae:9e:d3:18:26:e6:e2:30:54:ec:10:8f: 79:19:6c:19:f5:da:b5:16:68:f4:2c:0d:f1:98:06:89:2a:9d: 38:20:1f:16:3f:86:2b:c9:d4:b8:e6:00:81:1d:3a:cb:99:f0: b1:cd:b5:79:7b:85:8a:2c:f8:c1:ec:28:9d:2a:58:b4:bc:1d: c0:7d:3a:14:f7:bf:55:6f:a3:bf:96:e7:9a:83:65:ab:cb:5b: 6d:3b:03:39:b7:da:27:26:24:f0:e3:c9:0a:ca:36:81:9d:b1: 49:be:69:b7:af:74:99:5d:c3:a9:95:99:a8:03:26:b8:25:1f: 1b:60:63:94:ee:87:5d:c3:91:ec:66:ad:d7:0f:9a:77:a3:17: cb:1f:42:44:7f:cb:1a:f4:69:f6:2d:db:c1:fa:35:8c:5f:1b: a1:97:f0:9a:1d:a9:50:62:da:3b:98:a0:81:ed:68:e5:66:09: a2:6c:ab:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiVC4gBd0Lg3dYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZWU4MWVmMjYtY2E5MS00NDgzLTk2MDItMGJlMmE2OWE0ZjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgj/JYLirkmd6L0SJctOYBw24llw1XpIj4DII y/o4XC+CRrT8tIlDDWpEw82B7ev15s1lVrpwQ+ZXAIH/nSco8py1ZAfxRQg2Rlwk utwUEtE/KqNZprf/+i5mXKaup3ByxyTWv8Xus1/yMtCoBlaYi9XCLQPeaka8axOg GbZfQy21te8u6M9SFQzW0UXm2Rht5T6CQM0qIRXPCC/EZoCe5pbntsSge4GMDDVg Ph3t+McJVl51lYFGbVZsbnlxQIKqwl+mTlke7Gds1JFgaCOrOgueSN+KxCdK6y4q 1qSjO0WHjTBrSRyb2KL997MwJcQkZq2dUt0OITGCljhdp8faRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDYLk3/0tdShpS3S1TW6UxoUoWTCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTZlNmM5NjUtMDU4Ny0z YjIyLWFlODgtOTA0Mzc0MDQ1Y2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErRWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArY/oCsKWfGvD/Vzg605a3trpcS4J3tYftla3hr7xK1lQamYXI9mINc BkymN/ehlu93JZNAKu76klop4x/X5Bw+3DdbRYejWAZmqzFoyK6e0xgm5uIwVOwQ j3kZbBn12rUWaPQsDfGYBokqnTggHxY/hivJ1LjmAIEdOsuZ8LHNtXl7hYos+MHs KJ0qWLS8HcB9OhT3v1Vvo7+W55qDZavLW207Azm32icmJPDjyQrKNoGdsUm+abev dJldw6mVmagDJrglHxtgY5Tuh13DkexmrdcPmnejF8sfQkR/yxr0afYt28H6NYxf G6GX8JodqVBi2juYoIHtaOVmCaJsqzM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:13 2025 by rpki-client