$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa File: fa243cfe-a92e-3e35-a136-c32c50a344e0.roa (raw, json) Hash identifier: yRMoys8PK0slIUQU/Bu6ZuxUP4jddbJERHBGzm1sEzs= Subject key identifier: EE:1F:34:1D:3F:B3:6B:29:6D:CC:E5:35:A4:64:C7:55:35:F0:21:58 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679735C06BC9640E0B89AC00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.21.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:35:c0:6b:c9:64:0e:0b:89:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=712ab68b-be73-4378-ac45-802269ea61b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:f4:02:5f:ae:15:e7:1f:a8:6b:7c:5a:07: 35:ab:2f:87:5a:0f:db:50:8c:e3:ce:50:e3:6b:5c: 2c:6d:fb:57:dc:66:72:ad:86:61:5f:ce:83:4b:1f: 1d:b3:6d:68:3a:d9:7d:36:42:c6:f6:17:89:bd:29: a0:4f:48:f9:d1:18:68:2f:91:b9:b4:5d:07:9a:f2: 22:0b:84:4a:f6:99:70:4d:dd:02:6f:52:f7:6a:94: 8b:a6:79:31:26:06:de:e9:cd:8f:e0:eb:0c:31:65: 01:d9:e5:61:aa:9a:cf:8f:82:d5:bf:f3:78:d3:30: dd:72:1d:59:91:fa:fa:67:e9:73:4c:af:af:e9:a3: 88:04:08:5c:69:cf:a1:07:6a:c3:fa:02:8d:98:1e: 45:04:0c:4b:23:c2:df:72:f6:2d:c3:f6:f5:bd:58: f5:a5:d6:bd:bb:b0:5d:ea:4a:ef:75:3f:09:ab:26: 09:43:ae:c5:ed:28:c9:af:fb:5a:37:92:4e:e9:01: a2:b1:fe:48:5a:4b:c7:01:1e:d8:f9:bd:b5:f0:8d: e4:73:2b:59:07:67:3a:e6:f8:97:e5:15:b3:a5:69: 3d:86:43:00:3b:72:1a:f4:56:a8:ed:ba:9e:89:20: dd:70:d8:83:55:91:87:75:1f:86:f5:3f:a2:16:95: d0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:1F:34:1D:3F:B3:6B:29:6D:CC:E5:35:A4:64:C7:55:35:F0:21:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fa243cfe-a92e-3e35-a136-c32c50a344e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:be:1f:e8:32:47:c8:f1:0d:55:8c:14:e2:f4:b0:0d:c0:61: 9b:ea:00:e9:23:3b:b8:96:db:d5:6a:4f:d7:69:ff:30:a8:88: d2:3d:90:08:50:99:80:28:1b:e6:7d:84:1b:94:f9:6f:74:08: c8:a8:76:b0:52:ff:1b:89:d7:0a:38:74:8e:0f:76:60:91:34: 14:b7:49:81:0c:fd:a7:43:4c:04:55:e2:45:21:64:2c:b5:94: a7:1b:c8:43:13:1d:94:c3:48:5e:80:66:f8:8f:09:a3:e8:7c: b7:82:09:05:ee:2f:c2:bb:5e:cb:c1:9e:02:7b:97:ef:0f:ab: 9b:85:98:eb:15:72:fc:66:36:b7:64:be:ba:ba:d7:5c:31:ef: 00:ed:5b:ff:b1:14:94:5d:30:41:a8:6b:32:5f:30:85:32:91: 43:06:89:01:91:e9:21:79:68:de:14:6a:b4:51:3b:99:88:a4: 57:9e:74:e6:06:30:cb:d8:76:43:c6:62:e0:25:f2:23:47:f6: f2:86:75:1c:a3:e4:ab:93:c6:db:9d:14:dc:e8:c7:12:eb:18: 47:4d:28:fc:e7:c0:75:05:f1:d0:10:55:b6:3d:d2:5b:60:7e: 83:18:8f:ed:6f:12:ba:7a:1c:d2:14:b3:a5:86:94:92:1f:47: df:a2:40:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzXAa8lkDguJrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzEyYWI2OGItYmU3My00Mzc4LWFjNDUtODAyMjY5ZWE2MWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEj0Al+uFecfqGt8Wgc1qy+HWg/bUIzjzlDj a1wsbftX3GZyrYZhX86DSx8ds21oOtl9NkLG9heJvSmgT0j50RhoL5G5tF0HmvIi C4RK9plwTd0Cb1L3apSLpnkxJgbe6c2P4OsMMWUB2eVhqprPj4LVv/N40zDdch1Z kfr6Z+lzTK+v6aOIBAhcac+hB2rD+gKNmB5FBAxLI8LfcvYtw/b1vVj1pda9u7Bd 6krvdT8JqyYJQ67F7SjJr/taN5JO6QGisf5IWkvHAR7Y+b218I3kcytZB2c65viX 5RWzpWk9hkMAO3Ia9Fao7bqeiSDdcNiDVZGHdR+G9T+iFpXQoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4fNB0/s2spbczlNaRkx1U18CFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmEyNDNjZmUtYTkyZS0z ZTM1LWExMzYtYzMyYzUwYTM0NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRWaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABi+H+gyR8jxDVWMFOL0sA3AYZvqAOkjO7iW29VqT9dp/zCoiNI9kAhQ mYAoG+Z9hBuU+W90CMiodrBS/xuJ1wo4dI4PdmCRNBS3SYEM/adDTARV4kUhZCy1 lKcbyEMTHZTDSF6AZviPCaPofLeCCQXuL8K7XsvBngJ7l+8Pq5uFmOsVcvxmNrdk vrq611wx7wDtW/+xFJRdMEGoazJfMIUykUMGiQGR6SF5aN4UarRRO5mIpFeedOYG MMvYdkPGYuAl8iNH9vKGdRyj5KuTxtudFNzoxxLrGEdNKPznwHUF8dAQVbY90ltg foMYj+1vErp6HNIUs6WGlJIfR9+iQCM= -----END CERTIFICATE-----Generated at Wed Nov 5 02:33:37 2025 by rpki-client