$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa File: 3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa (raw, json) Hash identifier: 1EKOO3g6rurmIPLeMfwanoKNxzeZWpFiuNuTRVN7wqA= Subject key identifier: 28:3B:FC:C0:EF:15:6F:7E:11:07:03:16:33:74:DD:2A:03:97:93:A5 Certificate issuer: /CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Certificate serial: 010D0C9F4328584B047C12AFBA6276E16D319000 Authority key identifier: AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa Signing time: Fri 29 Aug 2025 13:00:41 +0000 ROA not before: Fri 29 Aug 2025 13:00:41 +0000 ROA not after: Thu 27 Nov 2025 14:00:41 +0000 asID: 16509 IP address blocks: 173.213.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:04:7c:12:af:ba:62:76:e1:6d:31:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c6921896-3c0f-4cb4-9c99-e2d60d1d2e41 Validity Not Before: Aug 29 13:00:41 2025 GMT Not After : Nov 27 14:00:41 2025 GMT Subject: CN=cb1deb4e-8c34-4f00-9f13-26fd24b43316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6c:ae:41:76:37:b1:83:09:23:3c:d1:d7:c4: b7:96:77:dd:ed:d4:05:c6:a3:bf:b1:c1:f8:4d:ea: 37:9c:37:ac:94:4f:39:db:70:56:1f:41:16:29:70: 86:cb:41:c9:5e:60:88:a9:fa:0f:56:20:cd:28:9d: 7e:82:33:6f:b8:03:e6:98:c4:06:b6:b5:b9:06:30: 9d:3e:40:41:12:dc:c2:a9:6f:f3:de:7f:b0:5b:ff: 8a:2c:b9:9a:06:54:df:21:2a:67:4c:52:86:e2:65: 2e:4e:f3:3e:66:1f:ff:30:6c:37:03:38:5c:44:77: b8:18:e2:00:59:e1:8b:92:7b:dd:9c:ce:fe:77:34: b3:55:76:e3:90:7f:4a:b4:cf:0c:8b:02:46:8c:c4: 13:66:9e:a2:8d:c2:4e:48:cd:35:b8:67:3d:2a:5d: fe:d6:56:33:a8:14:6d:9a:a2:3f:01:86:84:ef:3b: f7:7d:7e:b8:bd:fe:c9:70:53:85:7a:31:1a:81:42: ef:11:e3:fb:ab:3d:05:b2:26:fc:64:f1:73:3d:9a: fa:de:2e:6d:44:56:02:80:91:ec:8a:85:64:01:1b: 55:30:eb:c5:7f:27:df:ac:d2:80:a5:73:1e:40:a3: b5:d3:33:d6:46:bc:52:f1:55:9a:9e:56:ea:4f:4e: ed:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:3B:FC:C0:EF:15:6F:7E:11:07:03:16:33:74:DD:2A:03:97:93:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/3e249ed8-a8b1-3ad0-8011-67e14614aa9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.crl X509v3 Authority Key Identifier: keyid:AE:57:89:B5:6E:58:19:47:0D:45:25:4E:58:B2:70:00:DA:93:82:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c6921896-3c0f-4cb4-9c99-e2d60d1d2e41.cer sbgp-ipAddrBlock: critical IPv4: 173.213.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:d6:3b:2e:f3:42:bb:f1:29:b1:8e:b9:0a:2b:6a:f3:c2:96: 31:ac:93:01:b1:ab:dd:04:e2:74:57:18:b3:16:b3:13:75:c9: a9:12:15:08:f0:83:bd:10:82:6d:38:d1:89:70:83:bf:6f:5a: 27:90:b7:d3:52:02:b3:41:8d:6a:07:95:0e:fb:a1:5d:12:70: a3:7e:7e:e2:2e:53:e3:3c:f8:51:75:81:ba:6b:e0:50:3c:4a: a2:3d:f6:39:bc:26:b3:0c:59:fd:31:22:7a:91:93:11:02:c9: 7d:4b:43:df:e6:b0:4c:ca:a3:c3:dd:dc:9d:c1:22:6f:31:72: f1:cb:72:f3:a4:81:a9:d5:71:a4:41:85:a9:f9:49:d1:cd:b9: a3:06:1a:bd:93:a3:1a:e3:1e:21:67:5f:6c:4b:8e:9a:fd:93: d8:83:70:13:fe:c2:b4:e1:f0:76:16:23:62:02:1c:10:39:25: 48:32:aa:82:cd:8e:a8:5a:c4:ab:e9:eb:08:66:c3:57:15:ce: 99:a5:ab:bf:13:bf:34:9d:87:47:38:3c:f3:23:04:c6:e9:56: b8:16:71:a5:b6:df:b1:cd:8b:57:13:99:dd:d6:2e:e7:ce:70: 21:31:61:c4:18:33:11:d9:83:2d:26:61:1e:29:b7:ba:12:72: 85:8e:4e:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsEfBKvumJ24W0xkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzY5MjE4OTYtM2MwZi00Y2I0LTljOTktZTJkNjBkMWQy ZTQxMB4XDTI1MDgyOTEzMDA0MVoXDTI1MTEyNzE0MDA0MVowLzEtMCsGA1UEAxMk Y2IxZGViNGUtOGMzNC00ZjAwLTlmMTMtMjZmZDI0YjQzMzE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2yuQXY3sYMJIzzR18S3lnfd7dQFxqO/scH4 Teo3nDeslE8523BWH0EWKXCGy0HJXmCIqfoPViDNKJ1+gjNvuAPmmMQGtrW5BjCd PkBBEtzCqW/z3n+wW/+KLLmaBlTfISpnTFKG4mUuTvM+Zh//MGw3AzhcRHe4GOIA WeGLknvdnM7+dzSzVXbjkH9KtM8MiwJGjMQTZp6ijcJOSM01uGc9Kl3+1lYzqBRt mqI/AYaE7zv3fX64vf7JcFOFejEagULvEeP7qz0Fsib8ZPFzPZr63i5tRFYCgJHs ioVkARtVMOvFfyffrNKApXMeQKO10zPWRrxS8VWanlbqT07tXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCg7/MDvFW9+EQcDFjN03SoDl5OlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjky MTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2MGQxZDJlNDEvM2UyNDllZDgtYThiMS0z YWQwLTgwMTEtNjdlMTQ2MTRhYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzY5MjE4OTYtM2MwZi00Y2I0LTlj OTktZTJkNjBkMWQyZTQxL2M2OTIxODk2LTNjMGYtNGNiNC05Yzk5LWUyZDYwZDFk MmU0MS5jcmwwHwYDVR0jBBgwFoAUrleJtW5YGUcNRSVOWLJwANqTgo4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNjkyMTg5Ni0zYzBmLTRjYjQtOWM5OS1lMmQ2 MGQxZDJlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFrdUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/WOy7zQrvxKbGOuQoravPCljGskwGxq90E4nRXGLMWsxN1yakSFQjw g70Qgm040Ylwg79vWieQt9NSArNBjWoHlQ77oV0ScKN+fuIuU+M8+FF1gbpr4FA8 SqI99jm8JrMMWf0xInqRkxECyX1LQ9/msEzKo8Pd3J3BIm8xcvHLcvOkganVcaRB han5SdHNuaMGGr2ToxrjHiFnX2xLjpr9k9iDcBP+wrTh8HYWI2ICHBA5JUgyqoLN jqhaxKvp6whmw1cVzpmlq78TvzSdh0c4PPMjBMbpVrgWcaW237HNi1cTmd3WLufO cCExYcQYMxHZgy0mYR4pt7oScoWOTkQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:35:58 2025 by rpki-client