$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3465c2ea-3894-3055-a2be-39e8d4db158b.roa File: 3465c2ea-3894-3055-a2be-39e8d4db158b.roa (raw, json) Hash identifier: tg41II07G4zc5OJ4Aj8SOvya4qRGufc4i62UUDYc0tM= Subject key identifier: CC:E2:3E:84:6F:47:20:DD:79:49:24:C2:17:C2:A0:7F:AF:FD:0C:96 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201F8E324C891027430FD80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3465c2ea-3894-3055-a2be-39e8d4db158b.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.21.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:f8:e3:24:c8:91:02:74:30:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=b50cc05a-2638-4228-98ed-a6e58a74dc29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9c:20:90:81:20:7a:dd:0b:fc:6f:1c:26:54: 09:bc:c1:a7:21:01:71:85:9b:b6:68:bc:4f:c3:3a: cc:ab:94:b8:27:45:23:c6:04:81:b6:11:1d:9e:cf: e3:76:e8:ba:ff:24:63:70:c1:a5:07:62:f4:e9:46: a9:90:c0:05:48:2b:85:44:3d:3b:12:47:8c:d2:23: 05:1d:97:e2:31:d0:26:5e:59:d3:bd:9f:9b:94:ce: 5f:6b:96:bf:35:08:f6:5a:67:e8:6d:ff:80:58:44: 98:65:58:3b:63:00:08:70:2e:bd:b1:4b:c5:f2:bf: a8:b4:e4:4e:db:72:64:28:0f:ac:0a:7a:2c:eb:37: 8a:15:7f:02:f1:fa:2c:f7:e3:7e:81:d8:63:b5:1c: e1:58:7c:74:fa:93:7c:b8:af:dc:b8:b0:91:2d:81: 8a:45:a1:e6:d4:3a:0f:5f:25:14:97:7c:b9:e0:64: 97:ac:0e:80:cd:48:c0:55:83:eb:f0:97:c6:3f:fd: b0:6c:c4:4a:ae:f2:b9:47:ce:f4:39:60:4d:6a:54: 28:60:ed:07:86:92:76:c8:81:1d:4e:15:04:27:be: 1b:23:00:7a:62:8e:90:93:82:c0:6c:36:6f:f5:4b: 39:1f:ef:19:55:56:89:cb:5e:fb:5f:a1:06:c3:c3: af:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:3E:84:6F:47:20:DD:79:49:24:C2:17:C2:A0:7F:AF:FD:0C:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3465c2ea-3894-3055-a2be-39e8d4db158b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.110.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:27:71:fa:09:64:de:d9:20:b7:23:32:3f:8c:4b:39:e5:fd: f3:71:19:aa:61:be:68:6d:2c:fe:66:d4:a1:3b:62:06:21:74: 91:6a:4b:9e:4e:1b:74:ef:ed:d9:03:fa:66:9d:5d:37:39:6a: ca:ad:0a:3f:44:0a:66:95:32:47:33:b3:7e:02:f5:44:7f:e6: 15:76:4f:a2:f2:77:7e:7b:b9:94:99:5b:1e:67:c4:9f:ec:b0: 8e:92:53:65:33:59:7b:53:db:42:8d:1a:a1:3c:a7:04:bc:30: ce:00:d8:cb:cb:02:e8:f7:d7:82:65:90:42:c0:20:44:d7:d0: 29:66:11:53:58:a2:43:eb:f3:f7:72:c5:34:1a:30:92:0d:cf: 87:66:b5:8c:69:84:68:b7:e3:40:e6:6e:ed:1e:46:60:ae:9b: 9d:b4:4f:d9:e5:19:80:b6:86:e0:5d:71:ec:0b:4a:5e:ef:42: 77:19:50:d4:86:61:0c:af:a5:1a:f1:8f:65:45:2d:e4:76:86: b6:57:68:cd:d2:9b:4f:4c:f4:83:ec:8f:51:db:f2:b5:ce:6f: 16:d3:d2:93:8d:44:99:54:48:51:ed:cc:cd:5f:eb:a0:22:e1: 16:a2:b6:46:49:9d:94:53:79:82:8f:25:b8:a1:8d:dc:ee:99: c0:89:5d:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAfjjJMiRAnQw/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YjUwY2MwNWEtMjYzOC00MjI4LTk4ZWQtYTZlNThhNzRkYzI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5wgkIEget0L/G8cJlQJvMGnIQFxhZu2aLxP wzrMq5S4J0UjxgSBthEdns/jdui6/yRjcMGlB2L06UapkMAFSCuFRD07EkeM0iMF HZfiMdAmXlnTvZ+blM5fa5a/NQj2Wmfobf+AWESYZVg7YwAIcC69sUvF8r+otORO 23JkKA+sCnos6zeKFX8C8fos9+N+gdhjtRzhWHx0+pN8uK/cuLCRLYGKRaHm1DoP XyUUl3y54GSXrA6AzUjAVYPr8JfGP/2wbMRKrvK5R870OWBNalQoYO0HhpJ2yIEd ThUEJ74bIwB6Yo6Qk4LAbDZv9Us5H+8ZVVaJy177X6EGw8OvkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMziPoRvRyDdeUkkwhfCoH+v/QyWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzQ2NWMyZWEtMzg5NC0z MDU1LWEyYmUtMzllOGQ0ZGIxNThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwncfoJZN7ZILcjMj+MSznl/fNxGaphvmhtLP5m1KE7YgYhdJFqS55O G3Tv7dkD+madXTc5asqtCj9ECmaVMkczs34C9UR/5hV2T6Lyd357uZSZWx5nxJ/s sI6SU2UzWXtT20KNGqE8pwS8MM4A2MvLAuj314JlkELAIETX0ClmEVNYokPr8/dy xTQaMJINz4dmtYxphGi340Dmbu0eRmCum520T9nlGYC2huBdcewLSl7vQncZUNSG YQyvpRrxj2VFLeR2hrZXaM3Sm09M9IPsj1Hb8rXObxbT0pONRJlUSFHtzM1f66Ai 4RaitkZJnZRTeYKPJbihjdzumcCJXZU= -----END CERTIFICATE-----Generated at Wed Nov 5 03:12:26 2025 by rpki-client