$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa File: 4390aa88-8392-3e92-b96a-694f6067d383.roa (raw, json) Hash identifier: w2PV6XQ2yrC6M2V7V3pVNEyy6Fy2cxbZ//gwlMOaMsc= Subject key identifier: 2D:A1:00:1E:D4:F4:7F:C2:C3:4B:5A:29:B9:0F:70:FF:3F:FA:38:A9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797EDB6EF5BF734385C7980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:ed:b6:ef:5b:f7:34:38:5c:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=334238c0-b62f-42d7-85db-85bf09af40ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:da:da:85:e4:b2:d0:27:ac:98:20:4c:2c: af:f1:d7:10:90:d4:84:8c:42:56:a8:9e:43:75:46: da:10:df:ba:73:a3:5a:5e:f4:90:12:50:68:88:e2: 0c:16:a9:4e:13:03:f0:bd:77:fd:b9:43:18:27:45: b8:19:b3:2c:3e:cf:89:95:0d:90:bb:0a:ac:ff:45: b5:08:52:fd:83:ad:d3:72:4d:0a:83:ef:a6:c8:8a: ed:e4:b8:43:e3:55:0a:6a:6a:fb:57:4e:d8:51:b0: 70:19:97:3e:b8:65:c7:62:0c:53:bc:c5:66:4f:23: d2:34:e6:6e:75:32:49:f0:2b:28:f3:78:27:dd:e4: f2:8b:e0:79:6d:11:60:c3:ce:ae:0b:90:68:c7:31: 03:f5:01:cf:b0:79:87:82:3b:2f:78:3b:d6:7e:91: 27:9e:0c:48:ce:65:b8:bd:32:67:5f:e8:15:23:fa: 49:42:62:ff:34:d2:d9:55:e0:10:9d:e7:5c:48:2f: b3:71:ff:ec:69:a8:5a:bb:86:e7:5e:22:cc:06:dd: 79:e3:55:33:75:90:b4:76:f2:3a:87:5b:04:37:d7: 07:7e:c9:62:f7:0c:7e:2b:8d:3d:58:2b:a9:75:17: ea:1b:70:b5:4c:3b:91:a2:07:0a:48:06:72:e9:f9: 9c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A1:00:1E:D4:F4:7F:C2:C3:4B:5A:29:B9:0F:70:FF:3F:FA:38:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/4390aa88-8392-3e92-b96a-694f6067d383.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:a2:f3:00:a6:8b:13:c5:b2:f0:7e:f5:84:40:68:1f:e5:fc: e2:bb:07:63:0a:b0:df:4c:f6:6f:8e:00:f9:de:7d:36:23:ac: 02:7c:19:ed:09:37:42:f6:52:b6:bc:97:64:88:60:28:48:09: df:17:a5:64:4c:0f:97:27:65:57:99:59:93:75:1c:85:c4:24: 79:60:06:72:c0:15:21:1d:03:e6:94:b9:aa:43:fc:1b:02:0d: ab:a6:85:61:7b:78:1f:7c:d5:97:08:5d:3f:82:21:7b:08:11: f9:1f:93:ec:9b:a0:a0:3a:47:84:2d:a8:5e:74:b0:a3:5f:91: af:bf:dc:5f:50:0e:d8:d5:5d:00:42:2a:af:87:2a:a8:0e:a8: a2:02:4c:66:71:6a:df:e3:6d:2c:42:23:e3:ca:e3:59:f6:69: 97:96:33:1c:d4:59:ec:fd:6c:fe:bd:7a:35:51:c4:98:72:e9: bd:e8:38:4c:2c:d4:6f:fa:21:24:97:74:7f:ce:2b:b4:b8:5e: d4:83:b0:1e:da:5f:cf:0c:fe:59:1d:e6:61:a8:4d:d9:05:c0: ca:cf:39:50:1c:c1:19:27:a1:e7:be:c3:15:84:6b:4d:7a:1d: a8:b5:06:d9:69:71:48:03:2b:90:1a:cd:32:0b:2c:6e:d5:7f: af:cf:21:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl+2271v3NDhceYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MzM0MjM4YzAtYjYyZi00MmQ3LTg1ZGItODViZjA5YWY0MGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiXa2oXkstAnrJggTCyv8dcQkNSEjEJWqJ5D dUbaEN+6c6NaXvSQElBoiOIMFqlOEwPwvXf9uUMYJ0W4GbMsPs+JlQ2Quwqs/0W1 CFL9g63Tck0Kg++myIrt5LhD41UKamr7V07YUbBwGZc+uGXHYgxTvMVmTyPSNOZu dTJJ8Cso83gn3eTyi+B5bRFgw86uC5BoxzED9QHPsHmHgjsveDvWfpEnngxIzmW4 vTJnX+gVI/pJQmL/NNLZVeAQnedcSC+zcf/saahau4bnXiLMBt1541UzdZC0dvI6 h1sEN9cHfsli9wx+K409WCupdRfqG3C1TDuRogcKSAZy6fmcVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2hAB7U9H/Cw0taKbkPcP8/+jipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNDM5MGFhODgtODM5Mi0z ZTkyLWI5NmEtNjk0ZjYwNjdkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEWi8wCmixPFsvB+9YRAaB/l/OK7B2MKsN9M9m+OAPnefTYjrAJ8Ge0J N0L2Ura8l2SIYChICd8XpWRMD5cnZVeZWZN1HIXEJHlgBnLAFSEdA+aUuapD/BsC DaumhWF7eB981ZcIXT+CIXsIEfkfk+yboKA6R4QtqF50sKNfka+/3F9QDtjVXQBC Kq+HKqgOqKICTGZxat/jbSxCI+PK41n2aZeWMxzUWez9bP69ejVRxJhy6b3oOEws 1G/6ISSXdH/OK7S4XtSDsB7aX88M/lkd5mGoTdkFwMrPOVAcwRknoee+wxWEa016 Hai1BtlpcUgDK5AazTILLG7Vf6/PIUg= -----END CERTIFICATE-----Generated at Wed Nov 5 05:06:22 2025 by rpki-client