$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa File: bb27664d-fc5f-35c9-9f09-952ca477db81.roa (raw, json) Hash identifier: UcX/yw+FlpMeupUFSp1guoDoQVtKrNPRYWH7ZBaFzXM= Subject key identifier: 18:22:08:1B:22:2B:18:44:6D:BF:D1:C1:E4:1C:B7:1C:83:10:FE:4C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201E17F12D7BBCD7F20E960 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.21.144.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:e1:7f:12:d7:bb:cd:7f:20:e9:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=9f8dfea3-3465-42da-8708-236d04f26ec8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:63:0d:80:95:13:b7:db:4e:cd:f2:91:81:fe: 95:26:d1:d0:52:9e:19:91:7f:30:e3:f0:04:83:6e: 9c:01:77:a7:9d:ee:2f:e4:02:f4:1f:3b:05:ae:fc: 28:cc:97:73:cc:b1:47:f5:99:60:21:93:df:2d:04: ef:65:29:8e:d7:2f:fb:3a:5b:8b:05:1d:71:66:b3: af:8a:a6:62:ee:73:15:c8:d5:05:e2:49:96:59:34: c6:e3:e2:82:af:80:4f:4e:ee:8f:41:c0:dd:35:e8: da:d1:3d:b6:2e:eb:06:ac:1b:3b:49:5f:d0:7f:a5: 08:38:34:43:dd:d7:b0:a7:44:55:9c:06:29:ac:85: 57:b2:ec:ce:47:d1:b0:35:34:7d:0d:b3:ae:ec:28: f6:a8:8e:17:5f:1e:e8:76:4e:ab:8e:61:0d:21:cc: e4:4c:7c:9e:cf:6e:91:75:b6:ac:0a:49:8e:2a:74: 60:ae:ed:77:4d:95:9d:b4:d8:e9:45:88:e1:7d:4e: f6:03:52:36:12:26:e9:48:48:48:ab:de:19:d5:a9: 21:dd:ae:ed:ae:c1:f9:e0:09:c4:a4:08:e6:c7:5e: 88:e2:b1:10:fc:2f:65:24:39:7d:da:90:7c:e1:da: 7c:be:25:1e:af:ba:43:87:c1:db:0e:80:c1:dc:7c: 2d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:22:08:1B:22:2B:18:44:6D:BF:D1:C1:E4:1C:B7:1C:83:10:FE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/bb27664d-fc5f-35c9-9f09-952ca477db81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.144.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:70:c4:cf:cf:a1:b4:e6:92:7f:fb:26:ba:aa:d5:89:fd:4e: e8:eb:97:cd:c3:44:ef:93:33:1e:e4:7b:25:75:71:37:e4:45: 66:03:05:75:df:5a:01:b7:58:42:d2:41:a4:2c:c7:72:cb:45: 4b:8d:fb:ca:d8:58:7e:49:01:71:61:be:11:af:d3:53:12:c6: 75:cb:e6:58:d7:05:a8:70:66:10:74:4a:dd:37:0a:0e:63:bd: 9e:42:2b:3f:2c:c8:3b:9a:b7:11:e1:66:76:63:86:b0:2c:c0: 89:ee:8f:df:b2:4a:45:c9:8b:a7:a0:63:a5:80:e7:85:42:45: c2:af:a1:c1:dc:7d:fe:21:01:a7:8b:d3:c3:4d:8d:eb:d8:4b: 71:01:a4:1b:32:b8:6d:e3:ba:fd:d3:74:f8:13:2e:0a:96:3c: e1:d0:9b:90:95:d4:a1:80:a0:bc:cc:17:a7:04:fa:79:5b:2f: d0:d1:82:39:c8:7c:9f:03:3c:c4:41:7d:c7:81:7a:f2:14:af: 60:61:e4:db:4f:8a:94:6a:2a:79:0e:21:4d:f6:4b:a1:8c:98: 3b:0c:a5:95:a2:c3:90:3f:94:44:04:95:82:04:5e:35:a8:9b: 20:cd:48:68:cd:0d:b9:69:bc:3d:af:64:b2:ec:96:e4:16:f7: 9c:43:b1:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAeF/Ete7zX8g6WAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk OWY4ZGZlYTMtMzQ2NS00MmRhLTg3MDgtMjM2ZDA0ZjI2ZWM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mMNgJUTt9tOzfKRgf6VJtHQUp4ZkX8w4/AE g26cAXenne4v5AL0HzsFrvwozJdzzLFH9ZlgIZPfLQTvZSmO1y/7OluLBR1xZrOv iqZi7nMVyNUF4kmWWTTG4+KCr4BPTu6PQcDdNeja0T22LusGrBs7SV/Qf6UIODRD 3dewp0RVnAYprIVXsuzOR9GwNTR9DbOu7Cj2qI4XXx7odk6rjmENIczkTHyez26R dbasCkmOKnRgru13TZWdtNjpRYjhfU72A1I2EibpSEhIq94Z1akh3a7trsH54AnE pAjmx16I4rEQ/C9lJDl92pB84dp8viUer7pDh8HbDoDB3Hwt+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgiCBsiKxhEbb/RweQctxyDEP5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmIyNzY2NGQtZmM1Zi0z NWM5LTlmMDktOTUyY2E0NzdkYjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9wxM/PobTmkn/7Jrqq1Yn9Tujrl83DRO+TMx7keyV1cTfkRWYDBXXf WgG3WELSQaQsx3LLRUuN+8rYWH5JAXFhvhGv01MSxnXL5ljXBahwZhB0St03Cg5j vZ5CKz8syDuatxHhZnZjhrAswInuj9+ySkXJi6egY6WA54VCRcKvocHcff4hAaeL 08NNjevYS3EBpBsyuG3juv3TdPgTLgqWPOHQm5CV1KGAoLzMF6cE+nlbL9DRgjnI fJ8DPMRBfceBevIUr2Bh5NtPipRqKnkOIU32S6GMmDsMpZWiw5A/lEQElYIEXjWo myDNSGjNDblpvD2vZLLsluQW95xDsZs= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:41 2025 by rpki-client