$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b165cc4-d69c-3498-92c2-f24a945a981b.roa File: 1b165cc4-d69c-3498-92c2-f24a945a981b.roa (raw, json) Hash identifier: gmnQJxuhyqxhIKXQFpOJpa0pNFcBc6P+soXjUAhCIHU= Subject key identifier: 27:43:DD:98:92:8D:D8:66:9C:5B:D5:72:A6:34:28:BE:0B:6B:58:3E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BBFA4E3FB68BB74C20AE41A00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b165cc4-d69c-3498-92c2-f24a945a981b.roa Signing time: Tue 04 Nov 2025 13:59:20 +0000 ROA not before: Tue 04 Nov 2025 13:59:20 +0000 ROA not after: Mon 02 Feb 2026 13:59:20 +0000 asID: 30036 IP address blocks: 173.21.128.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bf:a4:e3:fb:68:bb:74:c2:0a:e4:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 4 13:59:20 2025 GMT Not After : Feb 2 13:59:20 2026 GMT Subject: CN=00ab3c83-052c-492e-927b-6b3fe114a0ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:89:d8:2c:e2:cd:bb:3b:56:44:b8:0a:3c:95: cb:67:4c:20:45:b9:9d:d9:37:e7:c8:61:e2:f1:9e: 47:cb:c5:fb:71:1d:2f:8d:0d:bc:cb:a3:ab:09:ee: 9a:f5:40:8c:50:4e:57:88:17:b9:ec:1a:a8:a3:17: dd:fc:95:54:1e:2b:b9:42:15:5b:10:eb:08:6a:94: 9b:5c:3d:cd:4a:71:45:cb:b0:d6:f6:2b:43:a4:59: b6:f3:e9:d6:ac:ad:2c:c5:52:e5:23:83:15:70:e1: 4e:fe:2f:2f:68:16:1f:b6:1c:ca:52:05:0e:42:8f: 86:1a:53:d3:3d:72:2f:bb:d4:ad:0e:c3:7f:ab:60: 68:06:20:41:0f:fe:6a:c8:70:41:3f:fe:37:d5:5f: c3:30:14:1d:08:12:b7:e1:55:1d:0b:dc:aa:52:84: 43:d1:51:02:13:c7:fa:64:4c:27:9e:80:bb:56:0d: b5:37:ea:a1:ae:10:47:20:97:07:d8:a2:2b:05:8a: b7:72:c7:4e:77:b4:86:ed:14:93:7b:db:c2:cc:c7: 15:45:b2:c2:31:41:d4:9e:d7:19:82:03:4c:19:8b: 73:c5:3d:48:45:4c:4c:c8:d6:1d:a5:56:20:a5:74: f4:9a:c6:08:87:70:82:9f:3a:9f:bc:90:18:80:1e: 3c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:43:DD:98:92:8D:D8:66:9C:5B:D5:72:A6:34:28:BE:0B:6B:58:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/1b165cc4-d69c-3498-92c2-f24a945a981b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.128.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:ce:0f:d3:7c:a1:ed:76:8b:37:cd:0e:ea:62:dd:66:bf:24: 91:99:48:14:91:1d:a5:8e:9f:61:9f:36:6c:b8:3c:7b:8d:e9: 6f:59:12:71:ee:d7:e1:b5:45:c9:51:8e:eb:cb:1c:b7:0f:89: 44:1f:d0:4a:91:db:f5:fe:44:13:e2:55:85:83:c4:34:25:c1: 7b:4c:5b:a9:5a:cf:f6:e0:ac:4c:67:22:d1:32:30:dc:44:74: 53:ef:2d:4d:10:c0:97:4f:25:95:f2:fe:e1:94:a8:b7:fa:9c: 61:60:dd:76:5e:d8:d8:84:8a:b4:48:57:be:c8:c7:2d:b9:e0: 01:2e:a6:02:bd:d9:de:9a:f3:d0:ee:ba:31:28:21:f4:98:95: df:84:52:b8:a6:d1:c0:83:a8:6f:ab:ad:b2:3a:ff:5d:f2:f4: 11:72:90:ed:95:bd:6e:ea:32:36:8a:c6:43:5d:c3:c9:d7:98: b2:fe:a9:17:22:03:b5:f0:a7:84:5a:45:55:f7:95:01:d6:f3: fc:c1:67:63:54:04:83:dc:16:1a:0b:0c:01:09:7d:2d:76:10: 27:7a:2f:11:f8:0d:e8:f9:3b:94:be:1c:01:f5:1d:af:94:7b: 2a:62:0e:a2:83:5d:bb:81:b5:b6:0b:cb:4a:b9:bf:2f:c4:0b: 80:d8:42:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu/pOP7aLt0wgrkGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwNDEzNTkyMFoXDTI2MDIwMjEzNTkyMFowLzEtMCsGA1UEAxMk MDBhYjNjODMtMDUyYy00OTJlLTkyN2ItNmIzZmUxMTRhMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiInYLOLNuztWRLgKPJXLZ0wgRbmd2TfnyGHi 8Z5Hy8X7cR0vjQ28y6OrCe6a9UCMUE5XiBe57Bqooxfd/JVUHiu5QhVbEOsIapSb XD3NSnFFy7DW9itDpFm28+nWrK0sxVLlI4MVcOFO/i8vaBYfthzKUgUOQo+GGlPT PXIvu9StDsN/q2BoBiBBD/5qyHBBP/431V/DMBQdCBK34VUdC9yqUoRD0VECE8f6 ZEwnnoC7Vg21N+qhrhBHIJcH2KIrBYq3csdOd7SG7RSTe9vCzMcVRbLCMUHUntcZ ggNMGYtzxT1IRUxMyNYdpVYgpXT0msYIh3CCnzqfvJAYgB48JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdD3ZiSjdhmnFvVcqY0KL4La1g+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMWIxNjVjYzQtZDY5Yy0z NDk4LTkyYzItZjI0YTk0NWE5ODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC7OD9N8oe12izfNDupi3Wa/JJGZSBSRHaWOn2GfNmy4PHuN6W9ZEnHu 1+G1RclRjuvLHLcPiUQf0EqR2/X+RBPiVYWDxDQlwXtMW6laz/bgrExnItEyMNxE dFPvLU0QwJdPJZXy/uGUqLf6nGFg3XZe2NiEirRIV77Ixy254AEupgK92d6a89Du ujEoIfSYld+EUrim0cCDqG+rrbI6/13y9BFykO2VvW7qMjaKxkNdw8nXmLL+qRci A7Xwp4RaRVX3lQHW8/zBZ2NUBIPcFhoLDAEJfS12ECd6LxH4Dej5O5S+HAH1Ha+U eypiDqKDXbuBtbYLy0q5vy/EC4DYQjY= -----END CERTIFICATE-----Generated at Wed Nov 5 02:25:29 2025 by rpki-client