$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a5b58c3-1120-3ab3-881e-3291973497bd.roa File: 0a5b58c3-1120-3ab3-881e-3291973497bd.roa (raw, json) Hash identifier: 1SouEDqXY2zNXWmMOz65Aez+9zMlRZGbuY0zcRuUtLs= Subject key identifier: D0:DD:91:DA:69:66:81:26:48:97:E6:27:F0:8F:19:55:0D:1D:FE:9D Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6172C9317EEA0CA3B3BCB674 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a5b58c3-1120-3ab3-881e-3291973497bd.roa Signing time: Wed 01 Oct 2025 20:12:23 +0000 ROA not before: Wed 01 Oct 2025 20:12:23 +0000 ROA not after: Tue 30 Dec 2025 21:12:23 +0000 asID: 19905 IP address blocks: 173.21.16.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:61:72:c9:31:7e:ea:0c:a3:b3:bc:b6:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 1 20:12:23 2025 GMT Not After : Dec 30 21:12:23 2025 GMT Subject: CN=af78a3bf-b75f-453b-95c5-bce2e2b05e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:63:6c:ad:65:0e:34:b5:2e:65:0a:a2:eb:48: ed:a8:9c:f5:9f:4c:4d:9c:31:f5:d8:03:59:b8:b0: f1:fe:eb:cf:14:1a:71:d9:ed:8d:96:a5:34:66:51: 30:e2:92:d4:df:49:91:19:46:24:1c:e6:d0:09:88: 3d:48:03:ab:94:58:56:4d:a8:20:dd:07:ae:b7:90: 67:89:23:d5:70:74:ff:c9:83:b7:48:ad:50:e7:e3: a9:4d:b7:3c:58:69:6d:7d:ce:1e:fd:f4:8c:63:47: 12:29:22:9a:a5:ae:90:28:4f:44:79:e2:8e:d7:3c: 21:56:83:b7:e5:7e:5c:37:c0:e1:94:03:e7:25:05: 3d:1a:9e:14:95:3c:26:38:16:36:72:c7:d2:61:39: ac:63:de:0e:f9:63:e1:56:62:de:f1:4a:85:70:c3: e3:46:f9:1d:81:2f:f3:49:10:a9:7e:20:bf:dc:77: 63:96:69:39:59:5a:58:8e:5b:ed:c9:6a:a6:79:b2: 9b:9a:d7:b7:eb:fa:82:60:c5:62:34:75:20:7f:61: a1:80:ac:71:76:a1:36:65:3d:33:0f:37:d2:88:7e: 97:de:48:a3:ce:18:9e:ef:31:7d:97:c4:b8:e9:b8: c5:cc:59:04:b7:f7:c6:bf:cb:0e:7d:11:5d:15:c1: dc:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:DD:91:DA:69:66:81:26:48:97:E6:27:F0:8F:19:55:0D:1D:FE:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0a5b58c3-1120-3ab3-881e-3291973497bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.16.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:a8:16:8a:22:1b:14:d7:2b:3d:7e:cd:49:7a:4a:32:9c:11: c2:cd:cf:bf:6f:9d:76:86:24:a5:bc:b6:77:df:44:1e:1e:9a: dc:69:d1:5f:6c:fc:5c:2b:12:8b:67:76:86:4f:0c:40:8a:e4: 79:e1:08:04:83:d0:59:51:ab:b4:2c:4a:1f:47:14:7f:6f:c4: ff:f0:cb:e4:49:a6:2b:d8:cb:01:a2:de:d8:03:79:3e:2a:64: 1f:b0:85:a6:52:28:aa:13:a4:ba:01:04:1b:6d:7b:24:91:33: 8b:89:35:9b:50:82:34:e5:b2:b4:20:ae:f7:d2:a8:55:2e:5c: d3:62:35:2c:9e:ab:96:79:21:9d:7b:12:aa:70:7f:1f:16:5c: 64:20:74:0e:73:a6:72:41:4b:d9:03:d2:05:21:14:3c:c3:ef: 9b:bb:3c:cf:a5:cb:43:1c:c6:20:a3:20:29:e2:5d:9a:c7:aa: 23:37:1f:3e:d8:36:cc:02:7c:8b:54:5f:76:81:35:05:57:27: ad:33:5e:7d:3c:60:af:9c:6d:34:01:2c:a6:f8:1f:37:d2:09: e3:20:fe:16:e8:8a:1b:2c:24:4a:1c:63:ff:c1:67:31:76:91: 5d:a3:f2:24:17:83:bc:e3:f3:a0:fd:c0:e9:4e:76:3d:4e:96: 98:52:37:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEthcskxfuoMo7O8tnQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMTIwMTIyM1oXDTI1MTIzMDIxMTIyM1owLzEtMCsGA1UEAxMk YWY3OGEzYmYtYjc1Zi00NTNiLTk1YzUtYmNlMmUyYjA1ZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWNsrWUONLUuZQqi60jtqJz1n0xNnDH12ANZ uLDx/uvPFBpx2e2NlqU0ZlEw4pLU30mRGUYkHObQCYg9SAOrlFhWTagg3Qeut5Bn iSPVcHT/yYO3SK1Q5+OpTbc8WGltfc4e/fSMY0cSKSKapa6QKE9EeeKO1zwhVoO3 5X5cN8DhlAPnJQU9Gp4UlTwmOBY2csfSYTmsY94O+WPhVmLe8UqFcMPjRvkdgS/z SRCpfiC/3Hdjlmk5WVpYjlvtyWqmebKbmte36/qCYMViNHUgf2GhgKxxdqE2ZT0z DzfSiH6X3kijzhie7zF9l8S46bjFzFkEt/fGv8sOfRFdFcHcjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDdkdppZoEmSJfmJ/CPGVUNHf6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMGE1YjU4YzMtMTEyMC0z YWIzLTg4MWUtMzI5MTk3MzQ5N2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRUQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWoFooiGxTXKz1+zUl6SjKcEcLNz79vnXaGJKW8tnffRB4emtxp0V9s /FwrEotndoZPDECK5HnhCASD0FlRq7QsSh9HFH9vxP/wy+RJpivYywGi3tgDeT4q ZB+whaZSKKoTpLoBBBtteySRM4uJNZtQgjTlsrQgrvfSqFUuXNNiNSyeq5Z5IZ17 Eqpwfx8WXGQgdA5zpnJBS9kD0gUhFDzD75u7PM+ly0McxiCjICniXZrHqiM3Hz7Y NswCfItUX3aBNQVXJ60zXn08YK+cbTQBLKb4HzfSCeMg/hboihssJEocY//BZzF2 kV2j8iQXg7zj86D9wOlOdj1OlphSN0k= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:07 2025 by rpki-client