$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa File: e1286f83-b066-3ef9-aa8b-3557d8930371.roa (raw, json) Hash identifier: CTRIgVo9/HH+qalOtP7OrgvEzzA0c0UUmqWudv2G+PM= Subject key identifier: FC:84:FF:17:7D:FC:89:18:7A:44:7B:44:07:6D:84:60:BE:BE:2C:0B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6797F18488D245B346130900 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:f1:84:88:d2:45:b3:46:13:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=3d4c60b7-cbb9-4ed9-b387-ce22a7715c2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2a:bd:3c:e1:ac:fe:d7:ee:49:4f:b0:f5:a7: df:e8:cd:a9:d6:5b:73:68:59:34:8d:1c:aa:bb:9d: 72:c7:d6:30:13:80:34:46:63:01:1d:23:7a:26:14: 22:86:43:c1:34:27:54:17:96:c5:f2:82:b9:18:ab: 91:28:64:31:7d:70:6a:22:fb:df:43:00:ea:f9:cf: 5e:76:db:2d:d3:c8:7c:d3:1f:e5:88:f8:b2:d8:23: d1:3d:6d:fd:52:11:b4:46:ae:9b:a8:55:84:a0:17: 42:63:12:c0:59:44:1b:d6:c7:0f:45:ae:60:76:3a: e3:f1:07:d2:d5:6a:56:a0:58:f2:b2:5d:1b:cd:03: 3d:84:88:6a:5c:b0:6c:91:0e:7a:d7:2d:92:73:85: 44:c0:b7:09:0b:b3:01:1f:a7:65:e6:e4:c4:3b:d0: 73:9e:96:98:49:3c:b7:5b:02:bf:ab:af:6c:14:bf: 2f:90:19:52:ce:73:44:38:3d:07:0d:61:7a:26:8a: f9:d4:60:9e:c3:e4:e4:4e:aa:1b:fd:02:ae:14:7a: 23:6d:ea:c6:98:04:a5:d6:b1:d9:91:d0:bc:7d:26: cb:a5:98:c2:c0:6f:bb:4a:b6:9c:0e:06:1c:58:6e: f2:aa:73:f0:48:49:b1:31:07:fa:67:26:f9:62:b4: 24:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:84:FF:17:7D:FC:89:18:7A:44:7B:44:07:6D:84:60:BE:BE:2C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e1286f83-b066-3ef9-aa8b-3557d8930371.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:bd:c4:8e:0d:9c:f3:23:8a:67:5f:df:84:fd:49:d2:55:a8: 10:84:03:70:7a:c5:3f:4e:69:50:cd:d7:35:da:3c:56:b6:f7: d1:3e:6f:6d:44:ad:26:00:0a:7b:c0:1a:b7:5b:41:3b:a8:3f: a5:22:98:02:e5:19:84:e4:fb:6f:a4:7f:86:21:14:13:3e:df: 01:0e:f1:77:64:7f:b7:70:fa:d8:28:1c:91:cc:ac:a6:98:57: d5:44:a3:c3:a3:42:9c:bd:08:d6:84:74:57:5d:33:89:31:7c: 93:1f:f1:a3:bd:1c:4a:ae:90:c5:09:e0:ac:14:53:b7:d7:b0: ea:d2:52:6d:dd:50:36:5d:dc:ce:40:b4:c7:6b:28:85:cc:d4: b9:f5:1d:07:d6:76:60:ba:1d:2d:a1:7f:d9:f4:fb:81:60:21: 22:55:d8:78:88:30:8f:b9:fa:c8:b4:b4:69:dc:8b:f0:e1:88: c3:d5:9a:99:6c:8d:ae:d5:00:ed:f1:47:08:9c:18:3f:dd:b1: 39:68:bd:3d:c9:63:02:15:0d:9f:21:38:3c:f6:76:c9:57:64: 3b:2b:48:32:aa:c1:49:bd:ef:fd:99:8e:c4:6e:a1:ff:d6:fe: 45:9c:bb:61:46:d0:bc:45:02:8e:74:b7:90:f7:12:5b:14:d3: b2:83:70:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/GEiNJFs0YTCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk M2Q0YzYwYjctY2JiOS00ZWQ5LWIzODctY2UyMmE3NzE1YzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCq9POGs/tfuSU+w9aff6M2p1ltzaFk0jRyq u51yx9YwE4A0RmMBHSN6JhQihkPBNCdUF5bF8oK5GKuRKGQxfXBqIvvfQwDq+c9e dtst08h80x/liPiy2CPRPW39UhG0Rq6bqFWEoBdCYxLAWUQb1scPRa5gdjrj8QfS 1WpWoFjysl0bzQM9hIhqXLBskQ561y2Sc4VEwLcJC7MBH6dl5uTEO9BznpaYSTy3 WwK/q69sFL8vkBlSznNEOD0HDWF6Jor51GCew+TkTqob/QKuFHojberGmASl1rHZ kdC8fSbLpZjCwG+7SracDgYcWG7yqnPwSEmxMQf6Zyb5YrQkYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyE/xd9/IkYekR7RAdthGC+viwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTEyODZmODMtYjA2Ni0z ZWY5LWFhOGItMzU1N2Q4OTMwMzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRXIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+9xI4NnPMjimdf34T9SdJVqBCEA3B6xT9OaVDN1zXaPFa299E+b21E rSYACnvAGrdbQTuoP6UimALlGYTk+2+kf4YhFBM+3wEO8Xdkf7dw+tgoHJHMrKaY V9VEo8OjQpy9CNaEdFddM4kxfJMf8aO9HEqukMUJ4KwUU7fXsOrSUm3dUDZd3M5A tMdrKIXM1Ln1HQfWdmC6HS2hf9n0+4FgISJV2HiIMI+5+si0tGnci/DhiMPVmpls ja7VAO3xRwicGD/dsTlovT3JYwIVDZ8hODz2dslXZDsrSDKqwUm97/2ZjsRuof/W /kWcu2FG0LxFAo50t5D3ElsU07KDcEY= -----END CERTIFICATE-----Generated at Wed Nov 5 07:03:30 2025 by rpki-client