$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0869d78b-1ed9-390f-88be-33f781a56577.roa File: 0869d78b-1ed9-390f-88be-33f781a56577.roa (raw, json) Hash identifier: cLB01viBKAxEuD0byMmPJlDeE+663VeFjVqVUoEFDPY= Subject key identifier: EE:42:70:C9:AD:54:25:A2:F0:A0:A0:1C:6A:1A:1F:91:F4:15:C4:7F Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B26FE3151C0960EDC921B2C80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0869d78b-1ed9-390f-88be-33f781a56577.roa Signing time: Wed 10 Sep 2025 21:40:35 +0000 ROA not before: Wed 10 Sep 2025 21:40:35 +0000 ROA not after: Tue 09 Dec 2025 22:40:35 +0000 asID: 19905 IP address blocks: 173.27.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:fe:31:51:c0:96:0e:dc:92:1b:2c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 10 21:40:35 2025 GMT Not After : Dec 9 22:40:35 2025 GMT Subject: CN=2dae5d67-7d89-4bc8-97b5-3f563411a6bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6d:36:b5:d4:07:9d:08:90:06:0f:df:49:fe: d4:47:bf:27:71:e3:48:db:3e:bf:e3:0e:19:23:2c: e2:e6:8a:1f:d0:91:6f:84:27:d9:58:e7:05:c1:f0: 0a:ba:8e:b1:b4:4c:e2:0c:f2:b9:78:2c:e2:e4:ff: 13:16:1a:89:03:34:e0:8b:da:32:62:dd:70:89:88: 9f:3f:0f:a8:b4:06:18:7c:1a:2d:7b:9a:2f:3f:13: 4a:77:ff:11:70:20:8f:3f:c7:7e:b1:80:f5:61:46: 3c:72:cc:58:93:52:a9:f4:7c:55:4c:58:49:54:74: 7b:f4:53:bf:93:25:59:45:c8:c7:50:24:8d:b2:f2: de:74:2f:45:ac:c8:6c:8a:61:59:1b:ca:e1:57:d7: 3e:90:bf:4c:e1:bb:e5:d2:3e:1e:cf:8e:fa:fe:fd: 6c:b4:40:18:e7:07:fd:f8:30:52:f3:ed:01:4e:fd: 18:12:68:55:9d:e8:8f:b2:78:02:25:58:08:b7:55: 58:d9:d1:71:c0:b7:04:62:49:15:b0:89:ea:e0:e0: 5d:fd:1a:65:2a:98:70:67:6e:8e:e7:df:51:c0:82: 86:a2:bd:61:8e:ab:eb:1c:2e:b1:c5:44:25:c6:0b: 89:78:9a:69:91:e3:60:e2:42:32:7a:89:5f:3a:1a: 40:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:42:70:C9:AD:54:25:A2:F0:A0:A0:1C:6A:1A:1F:91:F4:15:C4:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0869d78b-1ed9-390f-88be-33f781a56577.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:34:68:25:10:ed:97:41:f5:55:3e:54:9a:37:f3:dd:07:c6: 7c:14:0b:ca:af:22:5e:b4:62:dc:28:0b:e4:12:40:eb:fb:9a: 94:27:08:b1:50:6c:a8:4f:63:3d:68:0e:df:b8:3c:87:94:eb: 0c:b1:82:8a:29:88:38:cb:69:84:c1:10:aa:94:ab:71:52:c2: b3:d9:ad:8f:c9:d1:fc:bc:a1:af:d6:11:97:fb:41:f9:b6:d7: 1d:40:85:39:89:85:f2:b7:7e:be:20:46:3d:eb:79:aa:0e:dc: c8:89:49:c6:12:12:97:56:47:cf:c7:3f:dd:9a:16:9b:90:62: 9d:75:2f:b6:ed:90:41:98:5a:e3:5d:76:13:37:8d:d1:22:dd: 24:ca:33:c3:f7:d1:b5:d9:a2:f3:f3:63:5d:57:79:84:d3:66: eb:af:82:2d:0d:1f:2d:74:2f:af:e1:21:20:4b:71:d0:3f:ba: 3d:ce:ff:30:97:ca:88:30:8d:55:50:2b:84:1c:c3:8c:94:79: ce:27:6b:9e:1b:93:6f:e3:1c:d3:33:59:e1:31:07:5b:4a:ec: 69:c4:63:dc:e3:ba:fe:07:c2:3b:25:eb:27:f4:8c:5d:c5:65: 06:12:4b:ec:f9:45:07:a1:39:af:13:13:c5:93:e0:af:c5:37: 49:91:bd:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsm/jFRwJYO3JIbLIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkxMDIxNDAzNVoXDTI1MTIwOTIyNDAzNVowLzEtMCsGA1UEAxMk MmRhZTVkNjctN2Q4OS00YmM4LTk3YjUtM2Y1NjM0MTFhNmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW02tdQHnQiQBg/fSf7UR78nceNI2z6/4w4Z Iyzi5oof0JFvhCfZWOcFwfAKuo6xtEziDPK5eCzi5P8TFhqJAzTgi9oyYt1wiYif Pw+otAYYfBote5ovPxNKd/8RcCCPP8d+sYD1YUY8csxYk1Kp9HxVTFhJVHR79FO/ kyVZRcjHUCSNsvLedC9FrMhsimFZG8rhV9c+kL9M4bvl0j4ez476/v1stEAY5wf9 +DBS8+0BTv0YEmhVneiPsngCJVgIt1VY2dFxwLcEYkkVsInq4OBd/RplKphwZ26O 599RwIKGor1hjqvrHC6xxUQlxguJeJppkeNg4kIyeolfOhpAhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5CcMmtVCWi8KCgHGoaH5H0FcR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMDg2OWQ3OGItMWVkOS0z OTBmLTg4YmUtMzNmNzgxYTU2NTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRuMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ0aCUQ7ZdB9VU+VJo3890HxnwUC8qvIl60YtwoC+QSQOv7mpQnCLFQ bKhPYz1oDt+4PIeU6wyxgoopiDjLaYTBEKqUq3FSwrPZrY/J0fy8oa/WEZf7Qfm2 1x1AhTmJhfK3fr4gRj3reaoO3MiJScYSEpdWR8/HP92aFpuQYp11L7btkEGYWuNd dhM3jdEi3STKM8P30bXZovPzY11XeYTTZuuvgi0NHy10L6/hISBLcdA/uj3O/zCX yogwjVVQK4Qcw4yUec4na54bk2/jHNMzWeExB1tK7GnEY9zjuv4Hwjsl6yf0jF3F ZQYSS+z5RQehOa8TE8WT4K/FN0mRvSA= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:19 2025 by rpki-client