$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa File: ad35f282-4358-39cf-a530-e512a7b2efe6.roa (raw, json) Hash identifier: kr482UnQ63sKOpjWsAQSFLgJBTLPa1eC0ANnhqnZJxk= Subject key identifier: 4F:79:6E:BA:2A:65:3F:E3:E7:89:F7:87:5E:EE:33:4B:34:85:7A:17 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE3F9E8F7BF8825F1574A0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:3f:9e:8f:7b:f8:82:5f:15:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=959f7e8e-6f0e-4b05-a5c1-b8794153bcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e9:e4:37:02:85:2a:99:a9:ce:4c:d7:78:17: 1d:97:aa:3f:c5:dc:4e:88:aa:39:b2:6a:18:38:14: 9c:83:f1:40:e3:21:c5:7f:3e:9d:e3:fc:41:3d:a7: 45:70:5e:07:79:de:cf:cb:2e:42:f1:d3:50:e1:0d: 96:f8:2c:13:1c:aa:ad:c4:27:dc:c2:a7:d4:a5:e2: b9:24:3c:56:dd:cd:b4:07:ea:ed:c0:6d:41:f5:64: 96:48:1c:29:ab:90:b1:b0:6f:eb:d3:8a:09:67:07: 0e:70:54:b5:d4:4a:22:30:8d:d9:8b:07:b9:8a:c2: 17:7f:32:78:1c:d1:b5:73:b0:a3:af:9b:4c:e3:c8: b9:ae:7c:32:1c:62:76:9b:19:29:48:fe:1b:e1:08: 56:14:d5:4c:cb:7b:65:10:c3:3c:84:20:e1:7f:84: dc:30:2e:ae:8d:52:34:17:fa:81:24:13:6c:63:29: 82:48:f7:95:5e:dd:e4:63:64:3e:07:74:a3:90:71: b1:f7:68:cb:17:53:53:1d:68:2e:bc:13:cf:a3:7a: 9b:34:8d:31:76:15:bd:ff:e0:1e:48:71:55:99:0c: 95:76:50:f5:c6:6c:8d:9f:15:06:de:9f:5f:d7:78: 9e:e7:df:39:bf:ae:38:01:35:cd:f0:ec:12:a6:4f: bc:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:6E:BA:2A:65:3F:E3:E7:89:F7:87:5E:EE:33:4B:34:85:7A:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad35f282-4358-39cf-a530-e512a7b2efe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.0.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:34:e1:57:34:c4:d8:29:43:e0:24:63:f4:a6:81:bd:76:32: 99:2e:54:bf:14:dd:70:26:23:d4:c8:5f:8e:95:e4:cc:e4:cd: 1b:97:64:23:13:d3:7e:77:04:25:41:58:8b:e1:f6:75:f2:07: 7f:f3:84:06:b8:57:99:13:7e:cc:c5:f4:a0:be:2d:22:c3:ee: 5a:e0:9d:b1:54:1c:b1:c8:e2:c0:c9:35:24:8b:49:2d:78:c4: 19:43:d0:c1:9b:b8:53:91:b4:c1:12:d9:92:fd:45:a3:d8:99: 9b:29:a2:ea:cc:12:61:3e:b5:7f:de:5d:f4:61:ea:4d:63:54: 9a:7a:87:c1:dd:20:30:4f:f8:8c:10:1f:0e:0c:f6:75:5f:1a: 74:2a:34:2b:68:0a:c7:6d:31:7b:b1:80:6f:73:27:42:20:dc: b8:95:ab:c5:c7:ca:57:e9:94:ef:e5:eb:80:b3:fb:52:ef:b9: d9:8f:c2:8e:77:27:12:c0:c5:45:03:88:16:51:eb:e3:bd:e3: 3e:04:48:83:95:34:92:79:db:df:70:2a:ca:13:af:72:87:62: 7d:8e:1c:7d:a0:0e:64:48:5d:a9:e4:29:ee:8d:55:75:4d:8b: 92:e7:2d:e0:0c:05:68:1f:51:64:b2:f8:d4:f1:0d:98:55:90: 22:21:5c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzj+ej3v4gl8VdKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTU5ZjdlOGUtNmYwZS00YjA1LWE1YzEtYjg3OTQxNTNiY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgunkNwKFKpmpzkzXeBcdl6o/xdxOiKo5smoY OBScg/FA4yHFfz6d4/xBPadFcF4Hed7Pyy5C8dNQ4Q2W+CwTHKqtxCfcwqfUpeK5 JDxW3c20B+rtwG1B9WSWSBwpq5CxsG/r04oJZwcOcFS11EoiMI3Ziwe5isIXfzJ4 HNG1c7Cjr5tM48i5rnwyHGJ2mxkpSP4b4QhWFNVMy3tlEMM8hCDhf4TcMC6ujVI0 F/qBJBNsYymCSPeVXt3kY2Q+B3SjkHGx92jLF1NTHWguvBPPo3qbNI0xdhW9/+Ae SHFVmQyVdlD1xmyNnxUG3p9f13ie5985v644ATXN8OwSpk+87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE95broqZT/j54n3h17uM0s0hXoXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQzNWYyODItNDM1OC0z OWNmLWE1MzAtZTUxMmE3YjJlZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACM04Vc0xNgpQ+AkY/Smgb12MpkuVL8U3XAmI9TIX46V5MzkzRuXZCMT 0353BCVBWIvh9nXyB3/zhAa4V5kTfszF9KC+LSLD7lrgnbFUHLHI4sDJNSSLSS14 xBlD0MGbuFORtMES2ZL9RaPYmZspourMEmE+tX/eXfRh6k1jVJp6h8HdIDBP+IwQ Hw4M9nVfGnQqNCtoCsdtMXuxgG9zJ0Ig3LiVq8XHylfplO/l64Cz+1LvudmPwo53 JxLAxUUDiBZR6+O94z4ESIOVNJJ5299wKsoTr3KHYn2OHH2gDmRIXankKe6NVXVN i5LnLeAMBWgfUWSy+NTxDZhVkCIhXCc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:14 2025 by rpki-client