$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3aa602df-5456-3a4d-9e10-d6880bb17c0d.roa File: 3aa602df-5456-3a4d-9e10-d6880bb17c0d.roa (raw, json) Hash identifier: NpJrZ+pjWU7DWHztQTewYYvi/m+7e+sjLsLY2yoQcEo= Subject key identifier: 06:0A:A2:97:1E:38:E1:23:AC:A5:18:F2:CB:9B:D2:49:A1:40:FD:B4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D73D7674509013F8AF5500 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3aa602df-5456-3a4d-9e10-d6880bb17c0d.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.27.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:3d:76:74:50:90:13:f8:af:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=c8b9e818-060d-43f9-a0e0-6907fb863b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:89:b9:7f:7d:8a:37:e3:9c:85:22:f1:ec:ae: 08:e4:06:d7:88:71:a4:b1:d0:27:b2:99:1c:c7:e1: a3:6f:cf:0f:83:02:a3:de:7d:cb:3a:d5:04:dc:85: ec:bf:f7:05:a9:10:0c:3c:b0:c0:7d:3f:ea:68:77: 60:18:c7:6e:71:a0:0b:da:98:97:42:f0:6e:b2:d4: a1:20:34:b3:cd:ca:3c:38:bc:53:53:7e:2f:27:ac: d9:a2:b0:9d:a6:f0:ff:d5:e1:81:57:74:0b:4e:cd: 28:6a:94:7e:24:cc:1c:24:1e:c3:6c:a5:d3:5c:f2: 69:5a:b7:f4:81:ca:1b:a1:02:20:84:34:47:fe:d6: 1c:cb:da:63:5b:b6:bd:3f:a4:45:fd:c1:74:4f:80: 8d:1d:a3:06:10:6f:f7:49:81:7c:bf:fd:fa:14:1c: 35:70:ce:f2:dd:69:3f:0e:27:cd:d2:6d:ea:0c:14: c6:9f:00:02:f7:6b:44:94:3d:ca:39:68:9b:ae:e4: 95:c6:c4:f9:8c:23:aa:bf:35:29:12:88:ee:d6:5c: a1:26:82:78:65:00:e2:66:a8:72:b2:85:85:d0:00: 0a:17:5d:23:65:bf:97:64:c8:05:62:89:99:87:0e: 25:98:fe:d1:c5:2a:80:29:71:a4:4b:cb:2d:4e:88: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:0A:A2:97:1E:38:E1:23:AC:A5:18:F2:CB:9B:D2:49:A1:40:FD:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3aa602df-5456-3a4d-9e10-d6880bb17c0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:0a:2e:be:55:0e:de:29:8b:92:87:84:83:6f:38:57:1b:94: d2:22:13:00:ee:6c:c0:b6:0a:9d:36:6b:78:ef:87:66:47:5b: d4:84:a6:c7:99:74:da:f3:6c:66:ce:e8:8d:01:97:3f:d6:72: eb:3e:6d:fb:f0:84:f3:66:bc:8a:3a:4b:b6:bb:98:42:9e:e8: 8b:6e:91:8f:d0:f9:54:62:a6:08:8f:c2:37:64:86:69:4c:ea: 16:f5:27:81:20:de:08:dc:55:1e:1b:d1:3b:e0:c0:99:ad:41: af:72:51:b3:d9:d9:3d:d6:d3:51:a6:f0:45:56:a9:4b:a8:a9: b1:cb:13:34:16:e6:34:45:a9:da:c9:2f:5c:7d:25:01:3c:56: 03:24:25:c5:8b:5b:58:fb:f4:16:90:b8:64:3a:79:95:96:39: e1:91:8c:92:ee:21:17:2d:83:43:1d:9a:a3:18:88:de:5c:ee: 59:b0:8f:b9:0e:bf:6c:1a:f7:f2:c9:77:98:30:7e:16:9c:e1: 63:49:f9:87:38:b4:20:f6:39:0f:3a:8b:5d:63:04:fb:18:8b: 59:fc:96:a4:c5:88:f1:2a:9b:00:65:ea:a5:93:36:15:9d:06: b4:78:68:0e:d1:c0:9d:ba:d1:ee:59:a2:12:f6:cb:0a:4d:9d: 20:ac:69:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1z12dFCQE/ivVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk YzhiOWU4MTgtMDYwZC00M2Y5LWEwZTAtNjkwN2ZiODYzYjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnom5f32KN+OchSLx7K4I5AbXiHGksdAnspkc x+Gjb88PgwKj3n3LOtUE3IXsv/cFqRAMPLDAfT/qaHdgGMducaAL2piXQvBustSh IDSzzco8OLxTU34vJ6zZorCdpvD/1eGBV3QLTs0oapR+JMwcJB7DbKXTXPJpWrf0 gcoboQIghDRH/tYcy9pjW7a9P6RF/cF0T4CNHaMGEG/3SYF8v/36FBw1cM7y3Wk/ DifN0m3qDBTGnwAC92tElD3KOWibruSVxsT5jCOqvzUpEoju1lyhJoJ4ZQDiZqhy soWF0AAKF10jZb+XZMgFYomZhw4lmP7RxSqAKXGkS8stToh/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAYKopceOOEjrKUY8sub0kmhQP20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2FhNjAyZGYtNTQ1Ni0z YTRkLTllMTAtZDY4ODBiYjE3YzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRsgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwKLr5VDt4pi5KHhINvOFcblNIiEwDubMC2Cp02a3jvh2ZHW9SEpseZ dNrzbGbO6I0Blz/Wcus+bfvwhPNmvIo6S7a7mEKe6ItukY/Q+VRipgiPwjdkhmlM 6hb1J4Eg3gjcVR4b0TvgwJmtQa9yUbPZ2T3W01Gm8EVWqUuoqbHLEzQW5jRFqdrJ L1x9JQE8VgMkJcWLW1j79BaQuGQ6eZWWOeGRjJLuIRctg0MdmqMYiN5c7lmwj7kO v2wa9/LJd5gwfhac4WNJ+Yc4tCD2OQ86i11jBPsYi1n8lqTFiPEqmwBl6qWTNhWd BrR4aA7RwJ260e5ZohL2ywpNnSCsaSE= -----END CERTIFICATE-----Generated at Sat Oct 11 02:59:14 2025 by rpki-client