$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa File: ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa (raw, json) Hash identifier: x42P4aJVnlRIonT9rZE4l5UEitpB3bIBrbRTtsVox5w= Subject key identifier: 8F:49:8B:44:2A:6D:FA:BE:ED:37:8B:37:F5:49:4D:79:D4:87:79:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CCB2AFE76F72E019F09A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:b2:af:e7:6f:72:e0:19:f0:9a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d6b0cacc-34db-4138-94f5-9510b16bc4c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:5e:e8:fa:b1:36:22:a8:2a:32:1b:03:70:c4: fa:f0:00:91:cf:68:56:f6:5e:f3:7a:64:05:9e:02: 79:25:a9:b8:38:50:75:26:00:0e:1b:9c:11:4d:a1: 3e:86:1a:0d:72:c3:53:51:d7:91:74:25:02:8d:ec: 89:0f:7a:c7:4a:f5:df:d9:ab:c5:25:83:c2:a4:e9: c7:b3:0d:13:bc:04:80:2c:8d:9f:49:39:4b:10:b9: f6:5e:97:c0:7b:ba:2f:1b:6b:6b:59:eb:7e:8f:ce: db:bb:87:5a:3f:5f:b3:f7:f1:fb:81:e8:65:c7:f7: 7d:4c:bc:a6:bf:35:8a:1b:bc:d9:f1:92:b6:ca:f2: f0:e3:68:70:0b:9d:53:0d:70:e4:8a:07:74:c8:17: 14:cb:2c:4e:00:3e:43:97:63:d9:66:01:76:bc:db: b3:5e:c9:f6:46:5b:fb:3f:05:ce:54:44:fa:61:9e: c0:64:3b:98:69:1f:6c:d4:09:5c:f0:da:75:e8:c1: 78:59:c5:42:6e:1d:d4:48:9f:38:75:66:50:8a:5d: 82:06:ff:87:d8:55:be:74:4b:b7:df:de:f6:1b:1d: 8f:e0:f9:9e:54:f6:02:c5:3c:c7:c7:af:0c:9d:9e: 34:eb:6b:13:54:13:d3:d3:11:7f:59:9c:6d:df:f6: 60:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:49:8B:44:2A:6D:FA:BE:ED:37:8B:37:F5:49:4D:79:D4:87:79:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ad8b0293-a3c0-3067-a9e4-6d35d28c121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:7b:78:67:2a:d9:0e:ab:a8:a3:97:c4:4e:92:f0:57:7b:bc: 23:31:e9:a1:5d:d6:b6:5d:cb:f9:f9:d0:6f:0d:5d:de:1e:6a: 3c:32:e1:70:1b:bb:ee:20:7b:52:d9:80:29:13:65:1a:14:33: 97:88:d3:5f:e6:9a:ed:2c:43:0a:74:76:5e:2c:5c:40:db:d2: 6e:de:62:cd:1a:9f:c3:f5:70:b1:9e:55:1c:65:5e:c1:10:02: 3d:c3:67:cc:dd:f1:18:58:a5:1e:8f:4e:32:01:4c:74:dd:ee: 83:56:e1:01:92:d3:a8:b2:2e:b5:09:f5:23:e7:76:cd:ce:18: e4:b7:2e:30:24:fb:dc:e5:47:9a:c9:63:e9:6a:ff:87:e3:95: 6c:30:1a:28:91:23:03:d1:a1:1d:76:13:7c:c9:e5:de:bc:8c: a9:7a:47:4f:21:c4:12:db:10:13:7e:63:b7:53:24:57:a3:f3: ef:c8:0e:07:b4:a8:1d:75:ec:57:87:e0:83:28:3d:43:1f:0c: 49:56:aa:eb:65:d8:60:61:58:1e:45:aa:b0:6e:7e:0f:dc:dc: c8:f1:dc:63:56:34:a6:37:39:d7:fe:19:ae:20:b5:37:14:6c: c5:49:6d:ab:c4:cc:d3:c4:d2:1e:77:4e:c7:f1:17:69:c7:c5: b0:d3:87:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzLKv529y4BnwmgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDZiMGNhY2MtMzRkYi00MTM4LTk0ZjUtOTUxMGIxNmJjNGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgV7o+rE2IqgqMhsDcMT68ACRz2hW9l7zemQF ngJ5Jam4OFB1JgAOG5wRTaE+hhoNcsNTUdeRdCUCjeyJD3rHSvXf2avFJYPCpOnH sw0TvASALI2fSTlLELn2XpfAe7ovG2trWet+j87bu4daP1+z9/H7gehlx/d9TLym vzWKG7zZ8ZK2yvLw42hwC51TDXDkigd0yBcUyyxOAD5Dl2PZZgF2vNuzXsn2Rlv7 PwXOVET6YZ7AZDuYaR9s1Alc8Np16MF4WcVCbh3USJ84dWZQil2CBv+H2FW+dEu3 3972Gx2P4PmeVPYCxTzHx68MnZ4062sTVBPT0xF/WZxt3/ZgawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI9Ji0Qqbfq+7TeLN/VJTXnUh3k2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWQ4YjAyOTMtYTNjMC0z MDY3LWE5ZTQtNmQzNWQyOGMxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRWeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFN7eGcq2Q6rqKOXxE6S8Fd7vCMx6aFd1rZdy/n50G8NXd4eajwy4XAb u+4ge1LZgCkTZRoUM5eI01/mmu0sQwp0dl4sXEDb0m7eYs0an8P1cLGeVRxlXsEQ Aj3DZ8zd8RhYpR6PTjIBTHTd7oNW4QGS06iyLrUJ9SPnds3OGOS3LjAk+9zlR5rJ Y+lq/4fjlWwwGiiRIwPRoR12E3zJ5d68jKl6R08hxBLbEBN+Y7dTJFej8+/IDge0 qB117FeH4IMoPUMfDElWqutl2GBhWB5FqrBufg/c3Mjx3GNWNKY3Odf+Ga4gtTcU bMVJbavEzNPE0h53TsfxF2nHxbDThz0= -----END CERTIFICATE-----Generated at Sat Oct 11 02:45:59 2025 by rpki-client