$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe2900cb-7da5-3a7f-b9ec-3b86b8d9ab2b.roa File: fe2900cb-7da5-3a7f-b9ec-3b86b8d9ab2b.roa (raw, json) Hash identifier: B6LS8c3Fe9FCcO3FownUdqAVfD0MLSgPsJKs9QLPhIg= Subject key identifier: 22:31:64:FA:7E:92:42:A3:39:23:A2:4E:59:AC:7A:9F:88:6A:29:70 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B475CBA0022548A222230CA00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe2900cb-7da5-3a7f-b9ec-3b86b8d9ab2b.roa Signing time: Mon 22 Sep 2025 11:56:56 +0000 ROA not before: Mon 22 Sep 2025 11:56:56 +0000 ROA not after: Sun 21 Dec 2025 12:56:56 +0000 asID: 19905 IP address blocks: 173.21.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:47:5c:ba:00:22:54:8a:22:22:30:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 22 11:56:56 2025 GMT Not After : Dec 21 12:56:56 2025 GMT Subject: CN=895a522f-154c-4115-bd3b-a929b3b79b88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:58:9d:10:b9:61:e1:af:40:52:21:ba:29:1f: 6f:c3:14:39:f2:e1:03:a1:06:a8:68:88:fc:fd:b7: 3c:29:88:1a:89:42:46:ed:8f:29:c3:e4:30:fd:ff: 52:f8:bf:57:dd:d8:33:86:0a:13:c5:d8:9f:31:fc: 47:48:98:eb:8d:e9:a5:f3:d2:fe:32:eb:9c:cb:82: 53:e3:b3:5b:ee:59:30:f8:74:bd:87:1b:cb:bb:0f: 19:7a:b9:93:0e:cc:a7:ab:f3:74:77:92:92:50:56: ce:13:c5:9b:2a:68:9c:90:12:3d:d4:a3:6d:a0:cf: 1c:08:94:2b:93:0b:f0:1a:35:53:f8:e1:97:4f:ef: 35:08:f8:4f:bb:88:01:71:37:78:41:a9:40:d7:5c: 75:de:9d:00:06:6d:1d:64:37:0d:ac:fa:3c:1f:89: eb:46:f3:8d:94:db:b3:60:67:c2:44:54:e1:13:62: ce:a6:e1:e0:fa:e0:4f:40:17:ec:87:6c:90:64:5c: 8d:c0:2f:50:99:aa:05:77:c7:b6:2e:b2:3a:f3:bf: 8a:26:37:2c:00:37:00:9a:0c:36:62:a9:61:5e:ab: e0:fb:56:18:d7:c3:98:55:2e:81:19:6e:cd:df:78: b4:1e:f9:83:51:8d:1c:1b:37:14:55:13:fd:58:db: 5a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:31:64:FA:7E:92:42:A3:39:23:A2:4E:59:AC:7A:9F:88:6A:29:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/fe2900cb-7da5-3a7f-b9ec-3b86b8d9ab2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.21.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:a6:76:94:41:87:e5:33:9d:94:8d:b5:9a:3a:e4:9b:71:9b: 64:29:f5:45:55:6f:b0:27:68:3b:bf:26:bb:06:e8:e5:bd:99: 50:35:c8:88:de:ca:35:67:42:61:8a:48:74:97:21:aa:e9:c2: 8b:93:1d:3a:13:50:1a:16:a3:13:f5:f3:8e:c5:ae:f8:f6:e0: cc:65:6a:3b:b0:41:8c:fe:fc:57:5d:4f:9e:77:dd:e8:e8:c1: c3:bf:f5:a0:d5:0c:0d:ee:89:01:3c:b2:2c:4c:45:60:78:62: 3c:05:78:fe:8a:f1:94:28:b1:be:64:a5:48:a9:b7:53:0b:60: fd:83:2e:eb:e0:d6:1d:62:3a:a9:e4:8f:bd:2b:ed:a7:9b:1a: 8c:30:58:39:a3:7c:70:1f:9d:d0:61:2c:f8:22:7f:01:79:de: 03:e3:79:06:49:e0:3f:30:92:ed:bd:88:42:cc:1c:a4:de:70: fe:64:73:78:fd:8d:2b:24:03:3c:f8:64:cf:5e:e2:00:47:34: 49:f2:0e:5d:58:21:40:07:31:0a:a1:38:ba:d1:5a:9d:9e:71: cf:91:28:d4:29:a8:cf:83:a2:e2:99:9f:55:67:4e:38:3c:db: 72:ed:91:f6:a5:fa:b7:b5:b5:0c:86:dd:ee:01:c5:1e:24:e8: 91:8a:62:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtHXLoAIlSKIiIwygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMjExNTY1NloXDTI1MTIyMTEyNTY1NlowLzEtMCsGA1UEAxMk ODk1YTUyMmYtMTU0Yy00MTE1LWJkM2ItYTkyOWIzYjc5Yjg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVidELlh4a9AUiG6KR9vwxQ58uEDoQaoaIj8 /bc8KYgaiUJG7Y8pw+Qw/f9S+L9X3dgzhgoTxdifMfxHSJjrjeml89L+Muucy4JT 47Nb7lkw+HS9hxvLuw8ZermTDsynq/N0d5KSUFbOE8WbKmickBI91KNtoM8cCJQr kwvwGjVT+OGXT+81CPhPu4gBcTd4QalA11x13p0ABm0dZDcNrPo8H4nrRvONlNuz YGfCRFThE2LOpuHg+uBPQBfsh2yQZFyNwC9QmaoFd8e2LrI687+KJjcsADcAmgw2 YqlhXqvg+1YY18OYVS6BGW7N33i0HvmDUY0cGzcUVRP9WNtaxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIxZPp+kkKjOSOiTlmsep+IailwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZmUyOTAwY2ItN2RhNS0z YTdmLWI5ZWMtM2I4NmI4ZDlhYjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRVrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOmdpRBh+UznZSNtZo65Jtxm2Qp9UVVb7AnaDu/JrsG6OW9mVA1yIje yjVnQmGKSHSXIarpwouTHToTUBoWoxP1847Frvj24MxlajuwQYz+/FddT5533ejo wcO/9aDVDA3uiQE8sixMRWB4YjwFeP6K8ZQosb5kpUipt1MLYP2DLuvg1h1iOqnk j70r7aebGowwWDmjfHAfndBhLPgifwF53gPjeQZJ4D8wku29iELMHKTecP5kc3j9 jSskAzz4ZM9e4gBHNEnyDl1YIUAHMQqhOLrRWp2ecc+RKNQpqM+DouKZn1VnTjg8 23Ltkfal+re1tQyG3e4BxR4k6JGKYiU= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:18 2025 by rpki-client