$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a21b1582-cc9f-3d4d-99c2-a39383136b22.roa File: a21b1582-cc9f-3d4d-99c2-a39383136b22.roa (raw, json) Hash identifier: t8MSeRkFCyZt3poYP8VlfCIST6w8K69X5xG6ZCnWvQw= Subject key identifier: 32:AF:88:D6:49:5D:B2:53:79:14:5E:7C:13:12:92:3B:94:A7:E2:A2 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584AF256A2525AC8D8EA550E6200 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a21b1582-cc9f-3d4d-99c2-a39383136b22.roa Signing time: Sat 23 Aug 2025 01:00:33 +0000 ROA not before: Sat 23 Aug 2025 01:00:33 +0000 ROA not after: Fri 21 Nov 2025 02:00:33 +0000 asID: 19905 IP address blocks: 173.30.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f2:56:a2:52:5a:c8:d8:ea:55:0e:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Aug 23 01:00:33 2025 GMT Not After : Nov 21 02:00:33 2025 GMT Subject: CN=d04f6eb2-f7be-4261-8d9a-fdc5af510761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:8b:d3:8a:76:92:1a:d6:f2:03:f4:59:34: 5f:fa:ef:ce:63:b9:b7:ec:a4:ba:6a:79:d4:ee:ad: b0:21:9e:fe:cd:9b:11:e3:fb:b2:0a:b5:83:cd:ce: 89:ab:ec:f7:e1:e2:09:88:41:77:e6:7d:68:11:20: b8:5f:10:59:27:25:cc:d2:52:e1:4d:5e:71:38:0f: 3e:5a:93:a2:a5:de:a5:96:68:4d:40:d3:d6:9f:b4: 3d:37:68:2b:b9:4d:6b:14:5a:16:e5:94:57:93:0b: 14:97:22:c7:b2:f5:2c:6b:44:36:11:ba:f0:2f:99: c9:1b:eb:6a:a4:c7:59:2b:44:c8:e0:0c:85:e8:ee: a5:b8:0f:be:60:22:9a:ad:aa:9f:71:a9:1a:9e:1d: 5c:9d:d6:f9:9a:ab:70:55:b2:d2:4f:61:0a:81:6c: 23:8b:94:eb:f8:80:69:b1:03:9f:27:e7:d8:0f:34: 1a:ef:50:19:12:e7:3b:1a:e4:b7:9d:cf:83:37:00: 4d:ee:48:2e:92:67:92:23:fa:1c:2b:cf:7f:e2:33: 63:fb:cb:ad:53:62:28:66:06:8e:5c:16:27:f1:39: db:75:54:28:99:64:d8:f4:49:b9:c7:e9:1b:5d:fd: 69:69:d2:1f:72:78:76:4a:64:8f:0c:61:4e:99:18: 30:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:AF:88:D6:49:5D:B2:53:79:14:5E:7C:13:12:92:3B:94:A7:E2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a21b1582-cc9f-3d4d-99c2-a39383136b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.30.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:cf:f1:c0:5b:0e:ef:45:96:bf:3f:dc:f7:2b:b2:c3:4c:e4: ea:7e:0c:92:ed:08:dc:16:8f:f4:49:ac:fe:d1:f4:34:31:2f: f6:b2:25:0b:ef:47:62:9f:16:69:b1:73:95:57:74:7e:b3:5b: e8:3c:dc:29:47:a7:9d:07:ed:74:fb:b2:70:55:a4:aa:94:ea: 0c:88:9e:e5:ab:b0:48:1c:99:1d:f4:ce:a1:e8:29:fc:0c:35: c0:ce:87:ee:4a:27:25:de:e2:fc:a5:be:57:29:bd:6b:c7:79: e1:3b:79:08:8a:7a:71:bd:d4:f6:37:71:8b:88:26:7c:f1:28: 95:6b:29:e3:3a:3b:1a:fa:c9:70:e6:0e:7a:d4:07:d3:45:a7: 48:42:e5:21:6f:4c:7c:b0:7d:4d:ef:61:0d:9b:2a:a8:e5:ca: 15:35:f6:e9:2f:c4:0b:85:2b:61:13:65:a0:2b:14:83:66:96: 50:73:07:9a:cb:ce:0d:27:28:58:95:67:de:72:8c:5b:fc:2d: da:9f:52:4e:23:43:d1:9f:fe:03:29:7c:6c:17:44:99:e5:2a: 6f:1e:c1:1a:c4:59:c7:85:0a:d4:be:06:f2:41:c1:72:a8:46: b3:1d:68:ad:aa:22:bd:8c:1b:ae:32:a6:a7:bb:b2:81:19:a2: 16:4b:b7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEryVqJSWsjY6lUOYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDgyMzAxMDAzM1oXDTI1MTEyMTAyMDAzM1owLzEtMCsGA1UEAxMk ZDA0ZjZlYjItZjdiZS00MjYxLThkOWEtZmRjNWFmNTEwNzYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUKL04p2khrW8gP0WTRf+u/OY7m37KS6annU 7q2wIZ7+zZsR4/uyCrWDzc6Jq+z34eIJiEF35n1oESC4XxBZJyXM0lLhTV5xOA8+ WpOipd6llmhNQNPWn7Q9N2gruU1rFFoW5ZRXkwsUlyLHsvUsa0Q2EbrwL5nJG+tq pMdZK0TI4AyF6O6luA++YCKaraqfcakanh1cndb5mqtwVbLST2EKgWwji5Tr+IBp sQOfJ+fYDzQa71AZEuc7GuS3nc+DNwBN7kgukmeSI/ocK89/4jNj+8utU2IoZgaO XBYn8TnbdVQomWTY9Em5x+kbXf1padIfcnh2SmSPDGFOmRgwlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKviNZJXbJTeRRefBMSkjuUp+KiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTIxYjE1ODItY2M5Zi0z ZDRkLTk5YzItYTM5MzgzMTM2YjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR77MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErP8cBbDu9Flr8/3PcrssNM5Op+DJLtCNwWj/RJrP7R9DQxL/ayJQvv R2KfFmmxc5VXdH6zW+g83ClHp50H7XT7snBVpKqU6gyInuWrsEgcmR30zqHoKfwM NcDOh+5KJyXe4vylvlcpvWvHeeE7eQiKenG91PY3cYuIJnzxKJVrKeM6Oxr6yXDm DnrUB9NFp0hC5SFvTHywfU3vYQ2bKqjlyhU19ukvxAuFK2ETZaArFINmllBzB5rL zg0nKFiVZ95yjFv8LdqfUk4jQ9Gf/gMpfGwXRJnlKm8ewRrEWceFCtS+BvJBwXKo RrMdaK2qIr2MG64ypqe7soEZohZLt5Q= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:53 2025 by rpki-client