$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa File: 597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa (raw, json) Hash identifier: tyLI9dC0dSqfuA3vjZF+YcxDhbIPkIYONQPy0uBRkRk= Subject key identifier: 7D:E6:4E:D7:05:4F:78:65:3C:31:33:E0:C2:1D:45:12:C7:A6:38:19 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201CE29B091A1C930550E48 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.21.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:ce:29:b0:91:a1:c9:30:55:0e:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=af2d3b42-f1ed-42f6-bc9d-ea7a94635267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:84:e1:d4:2f:03:43:6e:e8:6c:2f:ac:65:51: 2c:f1:fe:f9:e3:69:d4:5c:26:c9:d4:0d:f4:82:2e: 53:8a:f3:58:a0:3a:9d:7e:2d:9f:45:f2:0a:e3:14: 07:ec:5d:c8:5f:55:7a:3d:19:bb:da:e5:b5:c6:6c: d5:d5:d5:ab:fa:fe:c7:e8:6b:14:55:5c:0f:9d:f5: 77:12:ce:c0:b8:f5:a3:a6:64:28:ae:2f:79:7f:f5: bd:38:77:80:5f:a9:aa:96:22:19:07:af:5d:9c:e5: f2:61:f6:8e:f1:a4:aa:2c:99:56:13:8b:58:5c:3a: 22:ed:49:b9:16:f5:b2:9f:66:88:ac:09:a4:4a:60: fc:bf:16:53:01:3f:1f:24:1d:4b:95:67:67:c4:b3: c6:bf:c2:ca:e8:8c:cb:c9:9a:ac:4b:9f:7d:66:3b: fc:76:c1:a9:2f:4b:d9:7c:65:73:86:ac:8e:40:89: 52:94:3e:39:8f:53:02:27:42:e9:7c:23:93:6e:a5: ec:4c:a6:b3:74:4f:fc:28:58:1c:4e:26:83:79:1d: a0:45:4b:29:bd:dc:24:96:4c:c9:9b:5f:2f:67:45: 9d:e9:14:3b:c4:fd:0d:87:eb:6a:bc:9a:b3:01:88: 6b:ae:f2:fd:55:de:c7:e7:c7:9c:c2:7c:26:1b:b7: 52:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E6:4E:D7:05:4F:78:65:3C:31:33:E0:C2:1D:45:12:C7:A6:38:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/597393ed-62d8-35f7-9f2a-6137f0af3ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:9f:7c:34:12:07:31:ba:fb:e3:77:cc:9f:61:7d:13:e5:87: 8c:50:60:d7:0e:6e:47:14:e0:9c:ba:c1:8f:fd:6f:fa:e3:ce: 7f:95:e9:bc:a2:8b:ac:fe:6e:eb:58:32:2e:1a:5b:85:1d:58: 54:b6:8e:87:6b:83:fd:64:ef:6f:98:da:4d:3d:7d:e9:31:1e: 8c:d7:74:c5:11:da:dd:26:6d:ed:44:26:23:cc:16:dd:40:cb: 13:cf:e1:e5:0f:f4:14:52:2a:cf:b7:a2:a4:69:0e:6b:9b:8f: cf:67:d8:da:26:94:53:59:47:f2:3b:09:a8:8f:a3:d4:2c:7e: 7c:82:f4:62:f3:32:77:1b:3b:a6:07:3a:e9:57:47:7f:85:e3: 03:35:7e:22:97:8a:6f:43:6a:5f:5a:51:ba:b4:83:43:e5:70: f6:be:6c:ed:ae:c2:24:58:a8:ea:e5:72:c1:4a:94:4a:05:0a: f9:e5:31:10:bb:a3:72:a9:10:fc:35:a0:24:8e:2f:51:65:6f: 7a:94:88:50:10:c1:60:08:45:28:47:19:11:34:00:ee:bd:02: c6:89:91:0c:b2:c4:6d:1e:3c:23:64:44:29:83:82:4b:c6:c4: 7f:e4:e7:f0:fb:a4:85:69:ec:28:1d:06:61:c1:12:e6:7e:4b: 5c:cf:b1:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAc4psJGhyTBVDkgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YWYyZDNiNDItZjFlZC00MmY2LWJjOWQtZWE3YTk0NjM1MjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAloTh1C8DQ27obC+sZVEs8f7542nUXCbJ1A30 gi5TivNYoDqdfi2fRfIK4xQH7F3IX1V6PRm72uW1xmzV1dWr+v7H6GsUVVwPnfV3 Es7AuPWjpmQori95f/W9OHeAX6mqliIZB69dnOXyYfaO8aSqLJlWE4tYXDoi7Um5 FvWyn2aIrAmkSmD8vxZTAT8fJB1LlWdnxLPGv8LK6IzLyZqsS599Zjv8dsGpL0vZ fGVzhqyOQIlSlD45j1MCJ0LpfCOTbqXsTKazdE/8KFgcTiaDeR2gRUspvdwklkzJ m18vZ0Wd6RQ7xP0Nh+tqvJqzAYhrrvL9Vd7H58ecwnwmG7dSWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3mTtcFT3hlPDEz4MIdRRLHpjgZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNTk3MzkzZWQtNjJkOC0z NWY3LTlmMmEtNjEzN2YwYWYzYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+ffDQSBzG6++N3zJ9hfRPlh4xQYNcObkcU4Jy6wY/9b/rjzn+V6byi i6z+butYMi4aW4UdWFS2jodrg/1k72+Y2k09fekxHozXdMUR2t0mbe1EJiPMFt1A yxPP4eUP9BRSKs+3oqRpDmubj89n2NomlFNZR/I7CaiPo9QsfnyC9GLzMncbO6YH OulXR3+F4wM1fiKXim9Dal9aUbq0g0PlcPa+bO2uwiRYqOrlcsFKlEoFCvnlMRC7 o3KpEPw1oCSOL1Flb3qUiFAQwWAIRShHGRE0AO69AsaJkQyyxG0ePCNkRCmDgkvG xH/k5/D7pIVp7CgdBmHBEuZ+S1zPseM= -----END CERTIFICATE-----Generated at Wed Nov 5 15:13:43 2025 by rpki-client