$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa File: f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa (raw, json) Hash identifier: sxElqUAqG4Xjsa22rjzHZPqpmhSdAv0TCcBnwGAZyT0= Subject key identifier: D1:35:72:11:05:65:46:25:D1:78:BB:DF:EF:E2:FA:9A:FF:CA:AC:15 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B004C2F7B29F215F7EC3DB680 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa Signing time: Thu 28 Aug 2025 01:00:33 +0000 ROA not before: Thu 28 Aug 2025 01:00:33 +0000 ROA not after: Wed 26 Nov 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:00:4c:2f:7b:29:f2:15:f7:ec:3d:b6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 28 01:00:33 2025 GMT Not After : Nov 26 02:00:33 2025 GMT Subject: CN=3e7b103b-7771-4a39-8121-f1d6fa2606d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:34:67:31:8f:ca:b6:21:26:a6:b6:96:e1:d7: 2b:14:91:0e:fe:f0:d8:14:42:7d:53:e4:dc:5e:a9: 27:c8:0a:4e:24:17:2d:a8:fd:eb:02:4e:32:cf:ad: c9:07:d1:5a:17:7f:1a:57:76:32:09:82:9b:90:8c: c8:a6:9c:9e:46:f1:9c:cd:0c:41:45:47:e8:84:16: bf:82:2c:f2:f7:a8:c3:e1:75:53:15:3c:7e:3e:12: 50:7e:66:63:71:c5:6b:14:d8:b6:be:92:f4:5a:df: 93:1d:34:11:a6:54:4f:60:6f:6d:9b:b2:e9:44:b2: 19:e9:b7:c2:22:bc:23:75:42:f3:99:5f:a5:57:42: 8e:ab:3f:77:10:15:af:c6:ee:d8:2c:fc:d2:d6:aa: d8:4a:c8:58:42:fb:15:2b:92:ab:33:5d:ea:fb:30: 12:ba:ff:c3:57:b5:2b:14:ae:07:29:c9:f7:74:63: bd:f4:b6:c2:1b:74:58:4a:7c:19:8d:5b:bb:c0:5b: 12:2e:73:09:00:7b:69:c2:c2:62:ac:36:5e:36:f2: 7b:b8:d2:bb:87:ab:cf:32:01:ba:41:8e:5b:8c:0a: 37:b7:c8:2b:09:0e:91:2d:fc:78:9e:b8:4f:47:a7: 94:3e:1d:f4:41:3c:18:d6:27:02:4c:1f:ce:bd:ed: 1c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:35:72:11:05:65:46:25:D1:78:BB:DF:EF:E2:FA:9A:FF:CA:AC:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f419b953-1a76-3f36-8d64-2b6ba49c95a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dd:78:b4:7e:eb:2b:5a:23:3a:5d:56:09:c8:c8:69:13:49: e9:8f:04:55:b0:83:37:a2:ce:0e:90:b0:0c:a8:ca:79:ba:bf: 63:54:b9:a7:b3:51:42:0a:cb:17:60:e8:cb:66:a0:ab:c0:92: 67:01:17:6a:d8:bb:b5:9d:fc:d4:74:a7:06:d4:18:d0:f1:bf: ef:44:25:39:39:cf:5c:c1:b1:81:47:78:b5:a8:a9:e8:2d:4a: 66:dd:b8:1d:03:68:c3:f1:ad:9a:2b:eb:cf:cb:25:d8:ad:3b: 04:9b:6d:23:ae:eb:c0:ba:c6:30:57:a1:6f:a7:7f:99:5c:3c: a8:98:54:3a:53:6d:20:0f:84:d4:10:a6:de:37:08:64:15:57: 81:61:0a:d5:8f:b4:8b:a4:89:03:d0:ca:64:3e:86:fe:57:31: ea:9e:07:f3:c7:b5:56:e4:af:4d:af:4a:3d:1c:28:1a:33:12: fa:74:44:5c:dd:7a:bd:8f:e6:d4:a5:26:fe:58:41:20:65:21: c8:b8:ea:8b:1d:48:c2:35:33:d0:32:e9:3c:5a:6c:13:af:34: 7d:ff:42:f3:78:1e:37:80:fa:a8:7f:e5:16:41:43:70:99:bc: bc:2a:e9:7d:52:b5:8e:6f:62:3e:36:80:66:23:02:5d:87:49: 62:eb:e2:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsATC97KfIV9+w9toAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyODAxMDAzM1oXDTI1MTEyNjAyMDAzM1owLzEtMCsGA1UEAxMk M2U3YjEwM2ItNzc3MS00YTM5LTgxMjEtZjFkNmZhMjYwNmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9jRnMY/KtiEmpraW4dcrFJEO/vDYFEJ9U+Tc XqknyApOJBctqP3rAk4yz63JB9FaF38aV3YyCYKbkIzIppyeRvGczQxBRUfohBa/ gizy96jD4XVTFTx+PhJQfmZjccVrFNi2vpL0Wt+THTQRplRPYG9tm7LpRLIZ6bfC IrwjdULzmV+lV0KOqz93EBWvxu7YLPzS1qrYSshYQvsVK5KrM13q+zASuv/DV7Ur FK4HKcn3dGO99LbCG3RYSnwZjVu7wFsSLnMJAHtpwsJirDZeNvJ7uNK7h6vPMgG6 QY5bjAo3t8grCQ6RLfx4nrhPR6eUPh30QTwY1icCTB/Ove0cbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE1chEFZUYl0Xi73+/i+pr/yqwVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjQxOWI5NTMtMWE3Ni0z ZjM2LThkNjQtMmI2YmE0OWM5NWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEHdeLR+6ytaIzpdVgnIyGkTSemPBFWwgzeizg6QsAyoynm6v2NUuaez UUIKyxdg6MtmoKvAkmcBF2rYu7Wd/NR0pwbUGNDxv+9EJTk5z1zBsYFHeLWoqegt SmbduB0DaMPxrZor68/LJditOwSbbSOu68C6xjBXoW+nf5lcPKiYVDpTbSAPhNQQ pt43CGQVV4FhCtWPtIukiQPQymQ+hv5XMeqeB/PHtVbkr02vSj0cKBozEvp0RFzd er2P5tSlJv5YQSBlIci46osdSMI1M9Ay6TxabBOvNH3/QvN4HjeA+qh/5RZBQ3CZ vLwq6X1StY5vYj42gGYjAl2HSWLr4jY= -----END CERTIFICATE-----Generated at Sat Oct 11 02:50:08 2025 by rpki-client