$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa File: f2592244-3972-351d-a9b2-bcae5ff67549.roa (raw, json) Hash identifier: XfeekAMIarlrlNkEdnqb3nG7RYJq13BdNk4KmM3DNO4= Subject key identifier: 2A:44:88:31:16:6C:30:49:D6:4D:6E:34:36:AF:47:7C:B6:A2:A9:67 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B64CE4AD8CE5BBDDBBF9AC500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 30036 IP address blocks: 173.21.100.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:4a:d8:ce:5b:bd:db:bf:9a:c5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d44ac561-9dc8-448b-9edc-ac2ff88eec97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:74:7d:13:d3:09:0e:4c:05:b4:c2:94:e2:9c: b5:96:6d:e2:cf:7e:83:21:29:ae:71:e5:24:26:60: ae:1f:05:52:57:85:28:9a:0f:22:59:5f:3e:b3:e5: 90:af:38:9e:ff:04:a6:48:ef:24:4f:15:ab:f3:0d: 39:04:bd:9f:33:04:63:0d:fa:39:51:49:ed:e5:25: 44:ad:11:82:ae:94:85:f4:dd:ba:d4:ae:15:eb:8e: 9a:b1:07:03:f1:c1:a2:43:7a:00:fc:ee:9e:7c:ab: a4:17:10:13:22:5e:05:f7:37:23:ec:12:fd:36:22: 3a:1c:2e:1a:21:1c:5f:de:3f:47:cf:58:6d:7c:ac: 2d:49:8b:c0:e5:1e:ca:b6:ba:26:84:96:b9:c1:02: a9:2b:58:90:d3:95:eb:98:c0:d8:26:64:e9:c3:a7: f4:0b:74:26:ae:7a:7e:67:15:02:0b:72:12:a2:b8: 79:49:c4:2d:51:cb:93:77:8b:b9:fa:b2:2e:c7:bb: 97:4d:1d:70:0e:57:3e:ba:3c:51:95:b4:40:41:be: 8b:ba:b0:0f:d4:42:3f:95:ee:21:a5:1f:98:91:37: 89:95:5b:c7:f5:7b:35:c6:6d:93:5a:f8:35:f6:58: 17:3b:5b:f0:d5:72:40:59:94:8a:a4:48:6b:04:e6: 68:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:44:88:31:16:6C:30:49:D6:4D:6E:34:36:AF:47:7C:B6:A2:A9:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f2592244-3972-351d-a9b2-bcae5ff67549.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:f7:1d:a1:3f:cb:36:a1:7d:e8:cf:e3:f5:e5:66:10:39:c6: a6:63:aa:07:93:c2:b4:1b:a9:e9:67:c5:42:a2:56:b7:19:37: 24:1f:91:58:be:31:68:5a:04:c4:76:07:09:a6:9c:4b:50:4c: 68:18:77:83:ec:43:60:4c:f4:b8:05:87:d8:bb:46:f1:52:72: ee:0a:c3:f3:69:35:f6:e9:36:a7:ff:2e:b1:62:6a:d2:75:2a: 4a:a5:ff:78:bc:5d:b9:df:2d:e0:dc:9b:55:5a:13:66:9f:30: c3:1e:07:91:4c:14:15:8a:62:2d:d8:a7:51:7d:65:2f:4e:37: 01:08:c2:fd:55:39:b5:f4:62:d9:22:e8:91:ed:86:40:72:99: 13:31:d0:27:3c:f3:ae:78:ab:e7:ce:b0:e9:7a:db:19:49:4c: 9d:c8:88:79:b7:28:d5:42:8e:e1:17:d4:8e:fc:6e:de:f4:94: 92:51:7f:d4:c0:9b:fc:e1:0e:b8:0a:b0:e1:53:8b:32:69:42: a4:23:d5:22:00:85:90:18:12:48:59:f5:27:3e:45:e4:31:e4: 4a:64:73:26:04:99:5e:12:50:0a:30:c7:d5:84:06:fb:e2:22: df:54:f3:96:d5:38:19:21:18:54:b3:71:a1:7c:c6:d2:7b:0d: e2:68:4a:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzkrYzlu927+axQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDQ0YWM1NjEtOWRjOC00NDhiLTllZGMtYWMyZmY4OGVlYzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnR9E9MJDkwFtMKU4py1lm3iz36DISmuceUk JmCuHwVSV4Uomg8iWV8+s+WQrzie/wSmSO8kTxWr8w05BL2fMwRjDfo5UUnt5SVE rRGCrpSF9N261K4V646asQcD8cGiQ3oA/O6efKukFxATIl4F9zcj7BL9NiI6HC4a IRxf3j9Hz1htfKwtSYvA5R7KtromhJa5wQKpK1iQ05XrmMDYJmTpw6f0C3Qmrnp+ ZxUCC3ISorh5ScQtUcuTd4u5+rIux7uXTR1wDlc+ujxRlbRAQb6LurAP1EI/le4h pR+YkTeJlVvH9Xs1xm2TWvg19lgXO1vw1XJAWZSKpEhrBOZolwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpEiDEWbDBJ1k1uNDavR3y2oqlnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjI1OTIyNDQtMzk3Mi0z NTFkLWE5YjItYmNhZTVmZjY3NTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRVkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGH3HaE/yzahfejP4/XlZhA5xqZjqgeTwrQbqelnxUKiVrcZNyQfkVi+ MWhaBMR2BwmmnEtQTGgYd4PsQ2BM9LgFh9i7RvFScu4Kw/NpNfbpNqf/LrFiatJ1 Kkql/3i8XbnfLeDcm1VaE2afMMMeB5FMFBWKYi3Yp1F9ZS9ONwEIwv1VObX0Ytki 6JHthkBymRMx0Cc88654q+fOsOl62xlJTJ3IiHm3KNVCjuEX1I78bt70lJJRf9TA m/zhDrgKsOFTizJpQqQj1SIAhZAYEkhZ9Sc+ReQx5EpkcyYEmV4SUAowx9WEBvvi It9U85bVOBkhGFSzcaF8xtJ7DeJoSnA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:56:17 2025 by rpki-client