$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa File: a975a81c-bc25-3450-a356-fd9d9f94312c.roa (raw, json) Hash identifier: O0KxKUV/dxmzJhGhPh8bSUz48Xzuu3W0tRPztercl6E= Subject key identifier: 14:12:28:67:34:D9:97:F3:2A:59:D6:1D:93:B8:A8:4D:F3:87:E9:61 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B7A0CCF6B312304C6C0888400 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa Signing time: Fri 10 Oct 2025 15:42:08 +0000 ROA not before: Fri 10 Oct 2025 15:42:08 +0000 ROA not after: Thu 08 Jan 2026 16:42:08 +0000 asID: 19905 IP address blocks: 173.21.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7a:0c:cf:6b:31:23:04:c6:c0:88:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 15:42:08 2025 GMT Not After : Jan 8 16:42:08 2026 GMT Subject: CN=048352cf-8c57-4c30-9949-3ace4459e4ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7f:78:36:c6:b6:a5:c9:f4:3b:98:ee:9e:03: 66:36:36:38:9b:c2:e6:7b:37:25:65:21:b6:d5:cd: 5c:68:c3:57:c2:be:dc:18:93:08:24:c9:78:37:23: 17:8b:b1:5b:65:4f:b4:0c:48:dd:f8:8b:4e:ca:3e: 8f:4b:46:ee:d6:1d:d2:a8:96:62:bd:51:bc:33:df: bd:ce:4e:09:69:f4:3d:dc:91:7a:b7:93:c9:28:58: a4:42:2e:dc:a7:95:c8:06:30:0c:18:0e:10:e6:92: 6c:c8:8f:a9:92:86:6f:95:11:da:cb:cf:53:a9:f8: 8c:d6:9d:e5:c1:01:d0:9c:6b:99:ee:38:d3:f5:f4: bd:82:dd:21:0b:b5:46:f5:1e:9a:86:fe:5f:f9:ea: 14:da:63:f3:88:bb:66:44:dc:3c:30:72:2c:39:30: db:73:b2:c7:12:64:30:fd:6f:b0:53:63:fd:4d:d0: 6d:4c:5b:03:cf:9b:c3:25:9e:f7:2b:f9:cd:d3:7d: 32:1e:04:bf:89:a2:79:4d:7c:2c:6a:2d:6d:29:41: df:07:df:4a:78:b0:2a:87:26:e1:d9:f7:6b:ed:3a: c9:74:38:51:64:2d:d9:5e:f0:4c:d2:79:88:28:ea: fb:76:71:3f:22:39:ff:54:f6:6a:2a:84:5c:c0:14: ed:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:12:28:67:34:D9:97:F3:2A:59:D6:1D:93:B8:A8:4D:F3:87:E9:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a975a81c-bc25-3450-a356-fd9d9f94312c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:80:39:6a:c7:a9:3f:27:c1:35:ac:7d:11:35:eb:48:68:ab: 27:b4:77:bb:be:d8:17:43:fe:07:04:b8:3b:ac:d9:a0:e9:b0: db:30:ac:65:e0:7f:f7:40:23:aa:aa:fa:e3:b8:ca:a2:98:af: a4:67:bd:4b:cd:a3:59:77:53:7d:06:ea:44:02:60:00:ea:1c: 7f:06:76:c0:81:0c:4e:0f:fa:ad:d4:86:61:93:5a:ce:4b:7e: b6:a5:db:ca:0a:5e:c6:f8:9b:42:46:c3:ec:9b:aa:72:b8:7b: 97:d3:1f:7a:95:1d:29:ae:fd:e2:bd:3e:3b:91:59:5b:e4:27: ee:34:46:06:f5:c8:bc:17:53:dc:e4:60:a2:2b:dc:f7:fd:a3: 0a:b0:8d:e3:f0:a7:91:6b:af:35:57:99:01:6f:0c:e3:23:77: d8:8d:81:0e:a2:c5:43:a7:1d:b7:24:5b:06:ff:2a:db:d5:21: 9d:8c:a2:65:94:66:c1:a7:e4:92:73:5f:c0:0c:3a:9c:59:1c: 70:51:99:14:9b:b7:87:3c:65:94:d6:6e:ac:64:4f:55:56:36: 64:e4:c2:13:43:10:5b:c7:76:83:54:ac:ba:85:b9:80:f8:d7: 12:73:80:15:b3:0a:94:9f:6e:8d:a5:1e:6f:1b:6c:bd:7c:3a: 6f:f6:0f:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt6DM9rMSMExsCIhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDE1NDIwOFoXDTI2MDEwODE2NDIwOFowLzEtMCsGA1UEAxMk MDQ4MzUyY2YtOGM1Ny00YzMwLTk5NDktM2FjZTQ0NTllNGFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiH94Nsa2pcn0O5jungNmNjY4m8LmezclZSG2 1c1caMNXwr7cGJMIJMl4NyMXi7FbZU+0DEjd+ItOyj6PS0bu1h3SqJZivVG8M9+9 zk4JafQ93JF6t5PJKFikQi7cp5XIBjAMGA4Q5pJsyI+pkoZvlRHay89TqfiM1p3l wQHQnGuZ7jjT9fS9gt0hC7VG9R6ahv5f+eoU2mPziLtmRNw8MHIsOTDbc7LHEmQw /W+wU2P9TdBtTFsDz5vDJZ73K/nN030yHgS/iaJ5TXwsai1tKUHfB99KeLAqhybh 2fdr7TrJdDhRZC3ZXvBM0nmIKOr7dnE/Ijn/VPZqKoRcwBTtlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQSKGc02ZfzKlnWHZO4qE3zh+lhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTk3NWE4MWMtYmMyNS0z NDUwLWEzNTYtZmQ5ZDlmOTQzMTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCAOWrHqT8nwTWsfRE160hoqye0d7u+2BdD/gcEuDus2aDpsNswrGXg f/dAI6qq+uO4yqKYr6RnvUvNo1l3U30G6kQCYADqHH8GdsCBDE4P+q3UhmGTWs5L fral28oKXsb4m0JGw+ybqnK4e5fTH3qVHSmu/eK9PjuRWVvkJ+40Rgb1yLwXU9zk YKIr3Pf9owqwjePwp5FrrzVXmQFvDOMjd9iNgQ6ixUOnHbckWwb/KtvVIZ2MomWU ZsGn5JJzX8AMOpxZHHBRmRSbt4c8ZZTWbqxkT1VWNmTkwhNDEFvHdoNUrLqFuYD4 1xJzgBWzCpSfbo2lHm8bbL18Om/2DzI= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:21 2025 by rpki-client