$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa File: 9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa (raw, json) Hash identifier: AmJIG689w/6QtYMSvvXrPo2ertcrq2A3A1D8pQDBkXk= Subject key identifier: 8C:39:57:67:3A:87:C1:58:B5:F5:6F:32:E1:1B:B9:5B:F8:47:95:40 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73B01A26B8DF720D5D400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3b:01:a2:6b:8d:f7:20:d5:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=c032833e-4b20-4404-ac0f-3e155a595957 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:86:eb:0b:7c:50:6b:94:f9:31:81:b7:55: b9:6c:a2:16:cf:0c:6a:19:21:34:73:23:9c:e0:3e: 36:82:1c:4a:78:9a:53:e4:c5:c1:83:18:13:18:de: c0:1f:62:da:62:aa:b4:08:83:2a:1f:9d:fc:a7:10: 94:7d:0b:8d:ad:4e:12:6b:43:97:1c:b9:76:78:4a: 2b:15:19:a6:f0:b2:a0:68:6c:dc:16:3b:33:39:96: a9:95:73:71:41:ca:ac:30:26:47:17:85:e9:16:7c: 5c:51:dd:7c:5b:48:a3:23:5e:6b:6a:04:2d:eb:0d: 25:81:0c:b3:fe:18:fe:1f:59:9e:db:c1:ff:0f:8a: 39:7b:c8:03:d8:a6:9a:25:c7:60:63:15:e9:65:c2: 0b:9f:ae:af:ec:8f:7b:41:bc:19:94:f8:5b:0a:87: ca:0a:80:2d:46:d7:8e:88:b2:e5:f6:7d:2b:26:39: c6:42:ba:f1:b2:93:bd:be:b2:85:cb:9c:42:99:00: 82:d0:3e:b5:65:3a:4d:a4:25:63:87:05:a5:6f:94: f0:da:29:68:a0:28:3c:88:ae:0c:f7:d9:fc:90:75: 60:3e:c5:b9:5e:0a:f4:b3:f4:6c:10:f9:09:55:a3: 10:d5:ef:b1:22:00:8f:51:1e:44:cb:1d:7f:f4:db: 0f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:39:57:67:3A:87:C1:58:B5:F5:6F:32:E1:1B:B9:5B:F8:47:95:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/9bd67b36-8b8a-3732-bd9f-2efe8e2ab627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:f8:c0:84:0e:36:c1:ec:09:ee:1a:eb:3e:37:57:44:de:72: cb:32:e6:4f:dc:f7:aa:3c:10:5a:01:98:dd:d6:cf:8d:b7:a7: 4c:59:16:5a:08:61:f0:d9:03:42:33:9a:a5:af:2b:21:24:22: d0:8f:8d:46:da:0e:bf:c7:8f:8c:a9:4b:37:bd:07:66:e6:40: 8f:7d:17:8e:9f:9a:2c:d0:39:6a:ad:60:6e:e1:88:da:39:be: 98:e8:ef:bc:41:ed:3a:e7:15:00:e0:43:49:81:db:e1:3c:ca: ea:ff:9b:96:e3:0d:73:68:0b:df:37:93:5d:a7:01:f0:51:c7: d7:d3:1d:9d:68:b4:ad:f8:8b:51:01:4d:04:e7:19:f0:90:d5: 02:58:b4:17:5a:9e:f0:e2:ca:f6:2d:d4:cf:40:38:e5:c6:a1: d8:9f:e2:70:6e:93:ba:ae:6c:3a:af:c3:d0:cd:c8:40:2f:a5: 25:9f:c6:72:eb:ad:9e:25:bb:cb:96:e4:fa:3a:ee:87:2a:8e: 82:15:96:31:2d:ae:be:96:bf:33:53:ef:85:42:a7:0c:38:48: 1e:8a:07:57:78:af:ce:5f:98:ed:af:99:52:30:31:17:05:74: 90:bd:a7:36:f6:ec:36:53:15:b8:dd:02:4e:01:c6:74:c2:df: b3:b2:2f:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zsBomuN9yDV1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YzAzMjgzM2UtNGIyMC00NDA0LWFjMGYtM2UxNTVhNTk1OTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCKG6wt8UGuU+TGBt1W5bKIWzwxqGSE0cyOc 4D42ghxKeJpT5MXBgxgTGN7AH2LaYqq0CIMqH538pxCUfQuNrU4Sa0OXHLl2eEor FRmm8LKgaGzcFjszOZaplXNxQcqsMCZHF4XpFnxcUd18W0ijI15ragQt6w0lgQyz /hj+H1me28H/D4o5e8gD2KaaJcdgYxXpZcILn66v7I97QbwZlPhbCofKCoAtRteO iLLl9n0rJjnGQrrxspO9vrKFy5xCmQCC0D61ZTpNpCVjhwWlb5Tw2ilooCg8iK4M 99n8kHVgPsW5Xgr0s/RsEPkJVaMQ1e+xIgCPUR5Eyx1/9NsPQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIw5V2c6h8FYtfVvMuEbuVv4R5VAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOWJkNjdiMzYtOGI4YS0z NzMyLWJkOWYtMmVmZThlMmFiNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFT4wIQONsHsCe4a6z43V0Tecssy5k/c96o8EFoBmN3Wz423p0xZFloI YfDZA0IzmqWvKyEkItCPjUbaDr/Hj4ypSze9B2bmQI99F46fmizQOWqtYG7hiNo5 vpjo77xB7TrnFQDgQ0mB2+E8yur/m5bjDXNoC983k12nAfBRx9fTHZ1otK34i1EB TQTnGfCQ1QJYtBdanvDiyvYt1M9AOOXGodif4nBuk7qubDqvw9DNyEAvpSWfxnLr rZ4lu8uW5Po67ocqjoIVljEtrr6WvzNT74VCpww4SB6KB1d4r85fmO2vmVIwMRcF dJC9pzb27DZTFbjdAk4BxnTC37OyL/o= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:37 2025 by rpki-client