$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa File: c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa (raw, json) Hash identifier: w4Ca1g5CPiKEAMIbpZuZ3J35WuXZ14Sy/JqnXXiVLiI= Subject key identifier: 2B:17:B8:8C:0E:31:AE:BF:63:0D:20:D3:8F:36:F0:BA:F5:3C:AD:C0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797E933B2CA257B98C32200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:e9:33:b2:ca:25:7b:98:c3:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=2ed4cf8d-2c64-4bb8-ab10-ce13c3bc6565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b7:c2:4f:29:5a:93:f7:55:f6:f3:12:3d:9d: 6a:d0:9f:8f:54:62:ff:a6:f9:8c:47:1a:6d:78:f8: 46:59:79:e3:4e:ea:2a:bc:b2:d7:17:0f:42:74:88: c7:24:0c:b7:48:56:a4:04:87:6d:ae:43:3c:14:e3: e4:66:de:0a:ca:cf:1f:0f:ef:b6:64:29:41:9f:10: 21:e8:05:c3:9a:a4:dd:d8:5b:c1:64:b3:49:9f:20: af:d4:13:23:e8:cc:c1:4b:80:50:e6:99:fb:1c:54: df:a4:c8:a9:69:12:2f:b3:0c:da:66:28:d8:c5:3d: 67:37:fd:86:1b:83:38:af:4b:78:af:57:97:d4:bc: f5:1a:7f:df:0e:1a:b5:0e:73:86:10:ef:e6:37:b7: 56:9b:29:24:d3:35:fb:cb:2d:33:f6:75:3b:ae:6d: 41:7e:52:b2:11:c3:4a:34:03:93:ec:53:74:93:ea: 03:bf:e5:2a:88:32:eb:96:bc:af:4b:22:85:60:0d: 28:f2:58:b6:6a:2e:7b:3f:ab:80:60:da:d7:b0:3e: e7:c3:0c:ec:3c:f6:c0:7d:ae:40:fa:37:90:a5:8d: 15:56:85:6a:cb:0c:47:fa:88:6c:27:7f:ac:8c:44: f8:6a:c9:7c:4e:9a:0a:a1:f4:4e:e9:8f:9b:cc:07: 5c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:B8:8C:0E:31:AE:BF:63:0D:20:D3:8F:36:F0:BA:F5:3C:AD:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/c33f3a2e-6b1a-36cc-a879-7ebe08568bc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:d9:f4:89:58:7c:22:5d:e0:d4:83:10:20:56:94:d2:aa:cc: 9f:99:73:e8:62:31:15:d3:fb:28:2e:44:a0:ab:bf:3b:e0:2b: e7:94:67:b6:9b:11:f1:e6:b0:68:03:d0:cb:21:44:93:c1:c5: 98:d9:de:0b:49:df:a8:a8:29:37:2f:21:4a:11:89:ef:e1:c1: 20:40:18:ac:e1:66:ca:4b:77:66:28:b1:87:2e:d3:0a:f0:f5: 02:87:be:ef:eb:2f:28:15:a2:4c:c1:b7:2b:b5:3d:23:5f:bd: 32:72:ee:ac:31:50:d3:29:a3:cb:c9:ba:1c:1d:8f:4f:31:01: 99:91:06:bd:18:56:1d:90:3e:2f:c2:26:cc:ef:6e:47:18:2d: ab:bf:e6:6d:cd:30:7a:a2:89:45:5d:c7:56:a4:36:b1:02:1a: de:9e:c9:7c:4f:b1:13:03:7f:31:93:c2:57:59:17:36:d1:1c: 97:8b:21:0e:a9:33:bb:93:b7:20:69:44:03:6d:37:c3:99:1b: 47:68:62:fe:b7:2d:ee:9a:94:28:ae:0b:4c:67:31:cc:26:6a: b5:c3:20:59:c0:82:45:61:51:00:0f:c1:dd:9a:02:cd:8e:3a: 72:e8:b7:71:47:97:43:dd:f4:61:d6:8b:ef:44:50:68:41:a1: 1a:86:9e:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+kzssole5jDIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MmVkNGNmOGQtMmM2NC00YmI4LWFiMTAtY2UxM2MzYmM2NTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbfCTylak/dV9vMSPZ1q0J+PVGL/pvmMRxpt ePhGWXnjTuoqvLLXFw9CdIjHJAy3SFakBIdtrkM8FOPkZt4Kys8fD++2ZClBnxAh 6AXDmqTd2FvBZLNJnyCv1BMj6MzBS4BQ5pn7HFTfpMipaRIvswzaZijYxT1nN/2G G4M4r0t4r1eX1Lz1Gn/fDhq1DnOGEO/mN7dWmykk0zX7yy0z9nU7rm1BflKyEcNK NAOT7FN0k+oDv+UqiDLrlryvSyKFYA0o8li2ai57P6uAYNrXsD7nwwzsPPbAfa5A +jeQpY0VVoVqywxH+ohsJ3+sjET4asl8TpoKofRO6Y+bzAdcvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCsXuIwOMa6/Yw0g04828Lr1PK3AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYzMzZjNhMmUtNmIxYS0z NmNjLWE4NzktN2ViZTA4NTY4YmMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHZ9IlYfCJd4NSDECBWlNKqzJ+Zc+hiMRXT+yguRKCrvzvgK+eUZ7ab EfHmsGgD0MshRJPBxZjZ3gtJ36ioKTcvIUoRie/hwSBAGKzhZspLd2YosYcu0wrw 9QKHvu/rLygVokzBtyu1PSNfvTJy7qwxUNMpo8vJuhwdj08xAZmRBr0YVh2QPi/C JszvbkcYLau/5m3NMHqiiUVdx1akNrECGt6eyXxPsRMDfzGTwldZFzbRHJeLIQ6p M7uTtyBpRANtN8OZG0doYv63Le6alCiuC0xnMcwmarXDIFnAgkVhUQAPwd2aAs2O OnLot3FHl0Pd9GHWi+9EUGhBoRqGnvc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:17 2025 by rpki-client