$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa File: a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa (raw, json) Hash identifier: o1UMWTuPmO1+0fD1AG/D5Pgse5lCIKs7WTuGqu4f3vc= Subject key identifier: 35:BD:68:DE:93:61:9E:83:B9:8B:14:A6:7F:D7:22:31:0A:2F:1A:B3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B5C6C728EBE9D066A4B79B5A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.21.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:72:8e:be:9d:06:6a:4b:79:b5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=59afbefa-0877-4107-a81e-b56651a292cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:44:36:81:66:9f:5f:5e:d1:40:12:e1:e8:6f: d1:af:53:d4:79:60:be:06:9d:92:3d:88:9e:5f:e1: e3:8f:b7:2d:b7:5b:2d:31:21:56:c9:39:2f:29:b0: 49:7a:2a:dd:88:db:2b:17:bb:df:0c:c1:98:c8:86: 66:db:11:5d:dc:0d:43:8b:d5:89:59:38:b1:11:5d: 6b:fb:b8:63:e5:57:a2:79:a1:d0:82:72:fa:41:2e: 6a:6b:f3:a1:56:e5:87:0a:d3:d3:de:06:46:2e:ea: f2:19:17:c2:7e:38:51:00:b0:3c:6d:51:27:35:8b: 35:16:84:0d:c0:e0:09:db:8b:3e:8f:37:51:a4:10: 8d:eb:db:c9:e3:47:e4:87:e7:72:06:eb:3a:cd:68: 2b:13:99:50:c8:9b:0f:5b:43:f5:e4:42:ed:4f:3f: b3:aa:80:2d:c8:14:22:b7:ab:e4:59:69:f6:5d:04: 78:dd:e2:ae:98:a6:de:b2:78:02:46:16:bf:98:e9: db:c6:36:32:44:20:bb:f3:c4:f5:d5:c4:6b:2f:b4: 1b:7b:a3:db:f3:b7:5a:63:4e:bf:bb:ae:7b:c7:f5: 3c:8e:a8:b6:f5:b2:5b:00:17:71:25:6a:b8:50:44: 40:ce:14:ed:93:a2:17:5d:58:6a:0b:38:a2:97:35: f7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:BD:68:DE:93:61:9E:83:B9:8B:14:A6:7F:D7:22:31:0A:2F:1A:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a40ec85a-d6be-3510-b81c-ecbe3ede203d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:bc:16:c3:b5:06:d3:ed:28:83:c4:21:25:44:b1:70:b0:12: df:a6:7d:d0:11:20:a0:4a:6b:37:cf:5f:cb:26:f6:69:4e:8e: eb:eb:44:f8:6d:ab:b4:f3:8c:ee:a6:dd:d4:27:a9:e2:2e:89: 38:81:ac:b4:f9:1b:0e:5f:bf:e2:67:53:f8:33:1c:b4:83:3e: 9f:b9:c0:3a:9b:a3:a8:3d:1d:f2:05:6f:1f:f2:1e:74:3a:2d: 34:8c:11:fe:a4:3b:e4:87:0a:13:cb:a8:a7:1e:8d:35:0c:dc: fe:f2:fd:7d:e9:84:e2:70:33:c8:bc:cd:52:77:0d:4c:83:0a: c5:00:b7:63:6b:55:ca:3b:e1:a4:f5:47:04:6f:97:8f:93:1d: 74:eb:cd:31:b1:07:af:4f:46:e9:a5:80:b4:3a:9f:08:4d:9d: 9a:c7:b1:57:4b:db:df:c0:2e:88:16:ab:d3:af:f0:6a:7a:17: ed:e6:39:83:b4:cc:33:df:f0:f0:d6:fe:2d:67:fd:7f:e5:77: 4e:db:1f:65:f4:5c:aa:2f:5c:64:7d:4a:0f:ad:56:9c:0f:fa: 34:88:ae:4e:29:cc:9f:5b:94:2b:af:06:58:98:2b:5a:f8:b2: d8:aa:44:df:cc:62:fe:85:84:5d:a4:ef:7f:a9:ed:d8:ec:fb: 90:92:38:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbHKOvp0Gakt5taAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk NTlhZmJlZmEtMDg3Ny00MTA3LWE4MWUtYjU2NjUxYTI5MmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUQ2gWafX17RQBLh6G/Rr1PUeWC+Bp2SPYie X+Hjj7ctt1stMSFWyTkvKbBJeirdiNsrF7vfDMGYyIZm2xFd3A1Di9WJWTixEV1r +7hj5VeieaHQgnL6QS5qa/OhVuWHCtPT3gZGLuryGRfCfjhRALA8bVEnNYs1FoQN wOAJ24s+jzdRpBCN69vJ40fkh+dyBus6zWgrE5lQyJsPW0P15ELtTz+zqoAtyBQi t6vkWWn2XQR43eKumKbesngCRha/mOnbxjYyRCC788T11cRrL7Qbe6Pb87daY06/ u657x/U8jqi29bJbABdxJWq4UERAzhTtk6IXXVhqCziilzX3AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDW9aN6TYZ6DuYsUpn/XIjEKLxqzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTQwZWM4NWEtZDZiZS0z NTEwLWI4MWMtZWNiZTNlZGUyMDNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi8FsO1BtPtKIPEISVEsXCwEt+mfdARIKBKazfPX8sm9mlOjuvrRPht q7TzjO6m3dQnqeIuiTiBrLT5Gw5fv+JnU/gzHLSDPp+5wDqbo6g9HfIFbx/yHnQ6 LTSMEf6kO+SHChPLqKcejTUM3P7y/X3phOJwM8i8zVJ3DUyDCsUAt2NrVco74aT1 RwRvl4+THXTrzTGxB69PRumlgLQ6nwhNnZrHsVdL29/ALogWq9Ov8Gp6F+3mOYO0 zDPf8PDW/i1n/X/ld07bH2X0XKovXGR9Sg+tVpwP+jSIrk4pzJ9blCuvBliYK1r4 stiqRN/MYv6FhF2k73+p7djs+5CSOIQ= -----END CERTIFICATE-----Generated at Sat Oct 11 02:43:12 2025 by rpki-client