$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea35395f-795c-30cb-810e-375e02bc11e5.roa File: ea35395f-795c-30cb-810e-375e02bc11e5.roa (raw, json) Hash identifier: dYh4DACUNIqyt1gUdQeDKYhyJmeDiBicKlFkAy4ybVs= Subject key identifier: 28:CF:91:0E:80:E2:D9:C3:A3:41:E2:A0:F2:D7:85:61:B5:67:AC:BA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6631E9EC3314FA3084938C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea35395f-795c-30cb-810e-375e02bc11e5.roa Signing time: Fri 03 Oct 2025 13:00:40 +0000 ROA not before: Fri 03 Oct 2025 13:00:40 +0000 ROA not after: Thu 01 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.21.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:66:31:e9:ec:33:14:fa:30:84:93:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 13:00:40 2025 GMT Not After : Jan 1 14:00:40 2026 GMT Subject: CN=e6428ea5-8e75-4980-b687-3b19fc50230b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:6e:91:d4:63:69:7c:6f:b4:f0:4d:24:a1: eb:0d:78:c0:9b:c4:83:e9:3f:ce:46:ec:87:44:2f: 1b:86:3d:60:b1:73:02:3e:a9:ee:d5:b8:24:c0:46: 20:c2:fb:67:28:d0:02:a8:db:a5:80:ab:f0:80:28: 9b:33:be:83:51:a4:96:ce:24:0b:fb:3a:14:86:33: 0d:f1:f5:6f:82:bd:13:f3:42:f4:33:f8:f8:90:eb: ce:9e:e0:a7:04:20:83:7f:bd:04:13:29:52:3a:4a: c5:32:af:b3:b8:42:eb:7c:f1:b5:4a:68:95:9c:77: 18:12:5b:2d:01:b0:73:96:2d:6b:a8:a3:35:46:02: ac:4c:7a:37:46:5d:e9:dc:17:c0:43:fc:f4:fd:ae: ab:b1:62:cf:0c:42:01:20:53:83:34:4e:f4:67:30: 16:1b:cd:06:17:d1:2b:d4:23:3b:73:d2:de:a6:89: ab:73:00:52:dc:24:88:ed:bc:80:d8:54:3e:21:34: c3:93:c1:05:77:3f:4e:e1:c4:ff:ed:cd:fa:ef:cb: 63:c7:52:6b:14:48:53:2c:e1:90:da:ec:ed:8f:19: cb:f3:fa:46:b4:5b:e7:6b:fe:39:6b:3c:96:89:82: 1b:7b:42:55:ae:cd:26:60:42:7a:d1:fa:4b:13:b5: 87:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:91:0E:80:E2:D9:C3:A3:41:E2:A0:F2:D7:85:61:B5:67:AC:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ea35395f-795c-30cb-810e-375e02bc11e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fb:2e:ee:48:24:71:88:ad:b1:8b:8d:4b:83:2f:2b:84:ce: cb:4c:79:ae:50:c8:ae:3b:41:44:98:e4:54:24:34:f6:2c:8b: e8:ad:95:b4:62:9d:a0:5b:ed:83:ca:4c:40:ef:28:bf:91:c6: 3b:5e:34:e1:7e:f1:72:88:16:ca:3f:c3:0e:d2:14:65:1c:7d: 3b:25:52:24:f3:35:49:f4:00:6e:b9:c1:f6:5d:47:8c:79:84: b5:53:7f:06:26:65:6e:80:e5:57:a2:76:fb:aa:5f:e1:fd:e6: 5c:82:27:87:2f:06:53:2c:89:a5:70:14:13:a1:fd:d6:64:b5: 01:bb:08:e5:be:45:0f:a1:33:9c:53:50:14:d9:08:d6:c1:92: 18:38:fd:b1:ca:e8:d3:dd:3e:75:52:83:30:52:71:de:8a:62: d8:63:3a:92:2b:d3:f6:58:31:40:50:e7:92:bb:de:78:95:1b: 4d:f2:44:c1:cd:7d:6d:c3:80:36:fe:5f:d0:b4:73:7e:81:9e: d0:88:61:c5:82:12:84:04:98:57:9a:b5:e1:a1:c1:b3:7c:1a: aa:71:c8:40:b4:4e:90:f9:7f:80:e3:c3:b5:c6:31:8b:30:e6: b1:4e:da:83:e3:d2:7a:e2:72:70:06:3b:78:75:ba:af:a0:34: 61:a7:af:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtmMensMxT6MISTjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzEzMDA0MFoXDTI2MDEwMTE0MDA0MFowLzEtMCsGA1UEAxMk ZTY0MjhlYTUtOGU3NS00OTgwLWI2ODctM2IxOWZjNTAyMzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAFukdRjaXxvtPBNJKHrDXjAm8SD6T/ORuyH RC8bhj1gsXMCPqnu1bgkwEYgwvtnKNACqNulgKvwgCibM76DUaSWziQL+zoUhjMN 8fVvgr0T80L0M/j4kOvOnuCnBCCDf70EEylSOkrFMq+zuELrfPG1SmiVnHcYElst AbBzli1rqKM1RgKsTHo3Rl3p3BfAQ/z0/a6rsWLPDEIBIFODNE70ZzAWG80GF9Er 1CM7c9LepomrcwBS3CSI7byA2FQ+ITTDk8EFdz9O4cT/7c3678tjx1JrFEhTLOGQ 2uztjxnL8/pGtFvna/45azyWiYIbe0JVrs0mYEJ60fpLE7WHNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCjPkQ6A4tnDo0HioPLXhWG1Z6y6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWEzNTM5NWYtNzk1Yy0z MGNiLTgxMGUtMzc1ZTAyYmMxMWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj7Lu5IJHGIrbGLjUuDLyuEzstMea5QyK47QUSY5FQkNPYsi+itlbRi naBb7YPKTEDvKL+RxjteNOF+8XKIFso/ww7SFGUcfTslUiTzNUn0AG65wfZdR4x5 hLVTfwYmZW6A5VeidvuqX+H95lyCJ4cvBlMsiaVwFBOh/dZktQG7COW+RQ+hM5xT UBTZCNbBkhg4/bHK6NPdPnVSgzBScd6KYthjOpIr0/ZYMUBQ55K73niVG03yRMHN fW3DgDb+X9C0c36BntCIYcWCEoQEmFeateGhwbN8GqpxyEC0TpD5f4Djw7XGMYsw 5rFO2oPj0nricnAGO3h1uq+gNGGnrxM= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:20 2025 by rpki-client