$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa File: fca88dc6-80a8-38ce-899a-71fceb3b14af.roa (raw, json) Hash identifier: 7afOquwbEmlB4IREVfxBrAavQuuqCFXeDtKBREATV54= Subject key identifier: D2:C4:78:99:CA:36:C3:9A:59:27:3D:08:1C:80:E3:F6:46:21:58:93 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201D5C46B7BEF0BBEB80B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.21.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:d5:c4:6b:7b:ef:0b:be:b8:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=a5e63f33-4a1c-4248-9949-3316d6365605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0e:d6:72:fb:2a:1b:b3:9a:a9:36:86:95:10: ea:f6:d4:09:f9:46:f1:a4:8e:e7:d5:88:2f:f8:27: 75:da:ad:bf:31:13:7a:69:e2:a4:4b:92:f1:ee:94: 49:08:c0:93:36:11:66:3d:89:b9:2c:e6:34:2a:32: 3a:8a:43:70:7f:aa:5b:6a:bb:1f:47:8f:32:c3:63: 4a:09:85:5e:8c:07:4c:f8:0b:43:82:c2:46:52:9a: b2:0c:82:91:35:b0:76:cd:e8:1d:d0:33:5e:3f:76: dd:56:3b:a6:91:d9:4d:8b:01:41:54:d4:56:74:e0: 21:35:3d:3f:6d:ba:3e:50:51:db:ad:83:4c:00:1a: bb:52:03:0b:10:ec:57:87:90:f4:46:35:12:f2:ea: 03:d4:f3:80:8d:b8:d3:aa:63:14:f9:12:b8:2b:7c: 2d:0c:f0:0c:e5:2c:8f:f7:24:61:e0:6d:7b:8c:cc: a4:77:f7:08:f0:fd:b0:d4:29:7d:5f:32:79:33:8f: 58:eb:df:b3:be:a8:76:b3:87:32:47:d6:fd:57:e0: 52:8f:7b:b2:35:6c:74:af:a6:f8:94:3f:8d:0e:fc: 09:81:3e:b9:90:4a:e2:47:8a:17:d4:52:e0:a3:e6: 05:03:62:30:87:25:62:8d:5c:0c:d5:94:9a:7f:3e: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:C4:78:99:CA:36:C3:9A:59:27:3D:08:1C:80:E3:F6:46:21:58:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fca88dc6-80a8-38ce-899a-71fceb3b14af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:1a:7f:d9:0b:f6:b4:ca:5a:97:29:0d:f9:25:51:54:bc:e6: 88:c6:b8:4a:eb:ff:bb:0d:71:3e:ba:cd:16:4a:7d:e4:00:6b: b4:1f:15:c1:76:6a:8c:5e:78:e1:15:45:48:d6:28:75:63:4a: 20:df:67:a2:f5:25:0a:4a:d8:62:d2:85:e9:f6:a8:a6:9f:88: d9:3d:46:b9:cc:eb:b4:1e:10:0b:d0:77:25:1f:15:ec:2d:81: 85:ab:08:1d:4d:98:82:28:cb:ac:71:ea:8b:48:b7:eb:8b:0b: 52:23:f8:3f:ef:ee:66:a3:2a:8d:8e:71:a1:41:a7:f4:6b:61: de:33:ad:d8:6a:f2:5e:b2:f8:63:29:16:b1:7f:fd:0d:79:39: 5b:a0:d6:d8:af:54:70:2e:fc:3a:a2:6c:59:4e:3b:bc:02:7a: 7f:3c:7c:09:e9:88:a4:10:cb:ed:e1:7e:aa:3a:44:e7:4d:10: 06:ec:ec:e1:eb:62:bc:f6:72:2c:e6:da:18:0a:18:be:dc:c5: b7:d4:d2:c2:27:af:6b:10:6d:36:2e:06:42:af:8c:7d:cb:89: 44:6b:67:cf:d8:0c:e4:93:0c:07:91:ed:64:a7:33:df:23:79: aa:7d:7f:90:9a:2c:ac:cd:53:97:7b:48:82:59:e8:70:a6:d5: 9c:93:f4:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAdXEa3vvC764CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YTVlNjNmMzMtNGExYy00MjQ4LTk5NDktMzMxNmQ2MzY1NjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyg7WcvsqG7OaqTaGlRDq9tQJ+UbxpI7n1Ygv +Cd12q2/MRN6aeKkS5Lx7pRJCMCTNhFmPYm5LOY0KjI6ikNwf6pbarsfR48yw2NK CYVejAdM+AtDgsJGUpqyDIKRNbB2zegd0DNeP3bdVjumkdlNiwFBVNRWdOAhNT0/ bbo+UFHbrYNMABq7UgMLEOxXh5D0RjUS8uoD1POAjbjTqmMU+RK4K3wtDPAM5SyP 9yRh4G17jMykd/cI8P2w1Cl9XzJ5M49Y69+zvqh2s4cyR9b9V+BSj3uyNWx0r6b4 lD+NDvwJgT65kEriR4oX1FLgo+YFA2IwhyVijVwM1ZSafz65MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLEeJnKNsOaWSc9CByA4/ZGIViTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmNhODhkYzYtODBhOC0z OGNlLTg5OWEtNzFmY2ViM2IxNGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRX9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFgaf9kL9rTKWpcpDfklUVS85ojGuErr/7sNcT66zRZKfeQAa7QfFcF2 aoxeeOEVRUjWKHVjSiDfZ6L1JQpK2GLShen2qKafiNk9RrnM67QeEAvQdyUfFewt gYWrCB1NmIIoy6xx6otIt+uLC1Ij+D/v7majKo2OcaFBp/RrYd4zrdhq8l6y+GMp FrF//Q15OVug1tivVHAu/DqibFlOO7wCen88fAnpiKQQy+3hfqo6ROdNEAbs7OHr Yrz2cizm2hgKGL7cxbfU0sInr2sQbTYuBkKvjH3LiURrZ8/YDOSTDAeR7WSnM98j eap9f5CaLKzNU5d7SIJZ6HCm1ZyT9HA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:57:57 2025 by rpki-client