$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa File: eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa (raw, json) Hash identifier: 3fRZlmqdu2VeOmYtv/fO+Hzj7kMYFXOUZMJFBmM+AYk= Subject key identifier: 63:78:4E:4C:C8:52:21:8B:67:D2:13:FD:DA:DC:6C:51:2F:5A:3B:F3 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE535B859FB113ECB2ED80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:53:5b:85:9f:b1:13:ec:b2:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3a94568d-5173-4235-a6d6-fb37ce04c2de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5f:c5:c9:d5:ad:9b:b5:00:b0:1d:23:78:5d: ff:95:8d:b4:d3:fe:a9:d7:21:b8:5a:16:ce:3d:bb: 82:27:3f:7a:f6:04:3e:71:ea:a1:8e:d6:8d:8f:66: 4f:55:c5:0a:57:24:c7:c2:54:51:0e:41:32:ea:35: 14:a9:84:20:56:ea:1c:88:4a:28:4d:fb:d4:c7:8a: fe:03:bc:53:cf:a9:45:a1:a3:16:c6:eb:fe:5c:d3: 60:82:e4:9c:21:90:1b:c5:81:97:3a:de:33:6f:2d: 14:0a:2d:7d:b4:a6:3a:7e:4a:23:37:1d:77:dd:66: ca:3e:ff:ba:26:b1:9d:7f:d7:58:7b:87:c2:67:9d: 25:8b:f4:70:30:d2:fe:ea:6f:84:62:9d:e1:91:ca: 87:75:04:b8:cf:e2:3e:07:8b:45:81:e5:0f:7e:bc: 7e:cc:30:77:0a:6f:52:c5:44:62:1f:f5:81:89:7f: 51:63:4a:03:5c:82:53:c9:09:d4:26:94:65:be:89: 02:14:73:ae:e5:3c:8e:de:b8:1f:32:3d:64:90:41: 82:f5:0e:af:05:93:11:98:e8:e1:40:e9:2b:a6:33: 1b:93:cb:4b:07:3a:45:b8:bc:3b:f8:2f:7d:22:9d: 0f:04:6f:ac:95:92:58:d1:58:af:09:8e:ca:0a:4c: 75:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:78:4E:4C:C8:52:21:8B:67:D2:13:FD:DA:DC:6C:51:2F:5A:3B:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/eb6d1108-6b24-309c-8be4-23ba0dd53e06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:20:07:14:d5:c1:cc:45:e0:8a:c3:ca:de:d4:c4:49:87:d9: fe:79:8b:0e:ae:8a:a4:c4:74:05:a2:00:3d:2e:02:37:51:58: db:3e:03:d7:c4:92:cc:c7:7b:16:76:df:89:9f:6c:c8:e6:c5: c1:d0:54:fc:e1:7d:c9:8c:d8:73:a8:56:0e:08:29:a1:5b:a3: fd:d2:3f:f4:e5:24:7e:6d:ec:19:4a:4e:f7:54:63:f5:25:82: 6c:39:87:e1:60:4c:16:35:46:aa:fb:e2:39:58:ec:2e:0c:7f: 7c:17:0a:91:da:55:89:f3:d9:c1:a4:e0:71:75:43:b6:e1:e0: db:e3:e2:6c:d9:11:dd:dd:0b:da:b0:1d:b7:c3:3a:57:67:3a: 37:fb:f0:86:14:58:dd:0d:87:56:c5:30:30:32:c6:f1:bd:54: 6e:77:1c:c3:c1:35:90:f3:46:6b:42:45:b5:d1:bd:9d:b1:04: 62:5a:19:25:63:f8:d3:49:69:07:4b:d2:97:8f:eb:09:f7:ac: e1:a6:bf:62:0b:6d:1c:b9:63:14:f0:cd:90:1b:e0:30:4a:0e: b9:27:e8:c6:71:68:69:24:be:c4:79:cc:f0:8a:6c:66:96:98: f2:cc:60:0a:5e:07:d7:59:23:fd:4f:1e:f7:33:00:01:14:e8: 3b:51:db:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzlNbhZ+xE+yy7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2E5NDU2OGQtNTE3My00MjM1LWE2ZDYtZmIzN2NlMDRjMmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl/FydWtm7UAsB0jeF3/lY200/6p1yG4WhbO PbuCJz969gQ+ceqhjtaNj2ZPVcUKVyTHwlRRDkEy6jUUqYQgVuociEooTfvUx4r+ A7xTz6lFoaMWxuv+XNNgguScIZAbxYGXOt4zby0UCi19tKY6fkojNx133WbKPv+6 JrGdf9dYe4fCZ50li/RwMNL+6m+EYp3hkcqHdQS4z+I+B4tFgeUPfrx+zDB3Cm9S xURiH/WBiX9RY0oDXIJTyQnUJpRlvokCFHOu5TyO3rgfMj1kkEGC9Q6vBZMRmOjh QOkrpjMbk8tLBzpFuLw7+C99Ip0PBG+slZJY0VivCY7KCkx1CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGN4TkzIUiGLZ9IT/drcbFEvWjvzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZWI2ZDExMDgtNmIyNC0z MDljLThiZTQtMjNiYTBkZDUzZTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwgBxTVwcxF4IrDyt7UxEmH2f55iw6uiqTEdAWiAD0uAjdRWNs+A9fE kszHexZ234mfbMjmxcHQVPzhfcmM2HOoVg4IKaFbo/3SP/TlJH5t7BlKTvdUY/Ul gmw5h+FgTBY1Rqr74jlY7C4Mf3wXCpHaVYnz2cGk4HF1Q7bh4Nvj4mzZEd3dC9qw HbfDOldnOjf78IYUWN0Nh1bFMDAyxvG9VG53HMPBNZDzRmtCRbXRvZ2xBGJaGSVj +NNJaQdL0peP6wn3rOGmv2ILbRy5YxTwzZAb4DBKDrkn6MZxaGkkvsR5zPCKbGaW mPLMYApeB9dZI/1PHvczAAEU6DtR25I= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:03 2025 by rpki-client