$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99572500-0690-3f26-9020-a89d682525ee.roa File: 99572500-0690-3f26-9020-a89d682525ee.roa (raw, json) Hash identifier: qA/95QcxvhsHCHdflzpzF3DXA1whlTn+yiGU4vBLJsM= Subject key identifier: 8F:E1:E5:D3:62:3C:5F:3C:D2:42:DA:6F:82:F4:EB:95:5D:0D:12:38 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8575EEA4327A06BE0C1E7E20 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99572500-0690-3f26-9020-a89d682525ee.roa Signing time: Tue 15 Jul 2025 01:00:49 +0000 ROA not before: Tue 15 Jul 2025 01:00:49 +0000 ROA not after: Mon 13 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.21.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:85:75:ee:a4:32:7a:06:be:0c:1e:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 15 01:00:49 2025 GMT Not After : Oct 13 01:00:49 2025 GMT Subject: CN=38f9f2fc-a752-4810-bbf5-397bd1322c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:fb:46:a1:99:ba:6f:5a:79:20:a4:be:db: 14:de:fd:e3:4d:06:ea:50:59:5a:a4:b0:a0:b8:4c: 88:e1:97:44:dc:bd:5d:b8:86:d1:39:fc:57:38:70: 9a:d8:22:3b:12:6e:cc:96:05:7d:05:5a:d8:02:64: ca:c8:f6:a8:e1:dc:ac:e9:ed:7b:3b:7d:04:d0:4d: 60:b3:19:67:d0:ca:93:40:73:07:ff:2f:3a:02:79: 79:e2:46:66:21:56:8c:68:0d:37:7c:9a:92:53:46: f7:16:e9:2e:4d:b5:bf:4e:77:12:2e:66:fb:f9:eb: e6:8a:21:c4:ef:78:f6:69:ce:f0:e4:be:a3:28:cb: dd:32:8f:5e:1e:48:32:84:86:96:56:ce:a5:bc:1c: 81:5d:6b:2f:eb:26:8b:ba:c3:d3:34:8c:86:6b:7d: bc:06:b8:41:9f:eb:63:78:6c:67:8d:85:e5:3c:4e: 3a:9e:96:49:5d:6c:a5:53:a1:23:cd:f0:db:26:92: 17:64:95:3e:7a:d0:15:8f:f5:25:ad:f8:e8:a2:2e: 5a:7d:01:c7:8e:81:3a:9c:59:e6:d7:31:c5:25:0a: 21:a6:47:14:10:d4:60:b2:bd:86:aa:64:f1:5e:b2: 40:01:e5:05:b3:71:4e:8b:af:c2:05:e6:fa:d3:6e: 48:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:E1:E5:D3:62:3C:5F:3C:D2:42:DA:6F:82:F4:EB:95:5D:0D:12:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/99572500-0690-3f26-9020-a89d682525ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8c:c5:da:d5:eb:cd:af:c8:dd:1e:7e:40:e6:c9:7e:48:66: 98:31:96:4d:42:bc:57:cc:0d:95:4c:e9:8c:77:10:71:44:a4: a0:24:42:bd:ae:01:e2:1a:3d:78:f6:d3:19:62:a2:ed:46:3c: 0b:59:d7:7c:2f:66:ba:e6:4a:49:47:1c:74:fb:56:b6:bf:73: 41:62:7d:3f:8a:ac:65:64:d7:ec:dc:a5:62:b2:31:60:ff:68: d2:98:91:ac:34:37:c3:e6:44:65:5c:36:67:bb:2e:92:d6:bf: 17:b4:b7:93:97:46:92:31:98:dd:11:ce:89:e6:d0:2b:cb:a8: 03:a8:b2:6f:30:3c:38:e2:43:9f:da:d3:dd:a9:00:2b:c0:f6: bb:ab:cf:2a:17:78:e4:3d:67:18:fb:d9:9f:5a:d9:7a:48:af: 41:dd:a8:47:19:d3:56:ff:41:24:cf:6f:99:a8:a6:31:90:4e: d8:d7:0f:11:73:e0:de:e8:6f:fb:9a:27:a1:ac:45:2e:16:29: 65:0b:4d:1d:77:44:20:80:a5:4b:da:25:48:b1:a2:17:0c:eb: ee:4d:17:1b:17:b0:ca:44:91:dd:25:e7:e3:76:93:36:e2:f8: 2f:47:23:cd:30:a5:91:44:12:f1:ef:01:1e:6f:d6:62:28:9d: dd:cc:75:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqFde6kMnoGvgwefiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNTAxMDA0OVoXDTI1MTAxMzAxMDA0OVowLzEtMCsGA1UEAxMk MzhmOWYyZmMtYTc1Mi00ODEwLWJiZjUtMzk3YmQxMzIyYzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT/7RqGZum9aeSCkvtsU3v3jTQbqUFlapLCg uEyI4ZdE3L1duIbROfxXOHCa2CI7Em7MlgV9BVrYAmTKyPao4dys6e17O30E0E1g sxln0MqTQHMH/y86Anl54kZmIVaMaA03fJqSU0b3FukuTbW/TncSLmb7+evmiiHE 73j2ac7w5L6jKMvdMo9eHkgyhIaWVs6lvByBXWsv6yaLusPTNIyGa328BrhBn+tj eGxnjYXlPE46npZJXWylU6EjzfDbJpIXZJU+etAVj/Ulrfjooi5afQHHjoE6nFnm 1zHFJQohpkcUENRgsr2GqmTxXrJAAeUFs3FOi6/CBeb6025IMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/h5dNiPF880kLab4L065VdDRI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTk1NzI1MDAtMDY5MC0z ZjI2LTkwMjAtYTg5ZDY4MjUyNWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaMxdrV682vyN0efkDmyX5IZpgxlk1CvFfMDZVM6Yx3EHFEpKAkQr2u AeIaPXj20xliou1GPAtZ13wvZrrmSklHHHT7Vra/c0FifT+KrGVk1+zcpWKyMWD/ aNKYkaw0N8PmRGVcNme7LpLWvxe0t5OXRpIxmN0Rzonm0CvLqAOosm8wPDjiQ5/a 092pACvA9rurzyoXeOQ9Zxj72Z9a2XpIr0HdqEcZ01b/QSTPb5mopjGQTtjXDxFz 4N7ob/uaJ6GsRS4WKWULTR13RCCApUvaJUixohcM6+5NFxsXsMpEkd0l5+N2kzbi +C9HI80wpZFEEvHvAR5v1mIond3MdQQ= -----END CERTIFICATE-----Generated at Wed Aug 6 07:58:30 2025 by rpki-client