$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5da20c58-3d59-33f3-8812-1e182e18a388.roa File: 5da20c58-3d59-33f3-8812-1e182e18a388.roa (raw, json) Hash identifier: 4bNiu/Y9IICCplMf9/4AVXlQBQNUql2sUJ9aTkmUnMc= Subject key identifier: F5:22:02:B1:46:A2:7E:16:C3:DD:04:47:7B:CB:CF:8B:3B:BB:44:E9 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B62022065ACBEFB73E87D2280 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5da20c58-3d59-33f3-8812-1e182e18a388.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.27.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:02:20:65:ac:be:fb:73:e8:7d:22:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=51d1c7c8-c1f9-49f5-8dc7-d6e93f7e4abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fc:d2:0d:30:40:ab:8d:03:ef:59:0c:33:46: e3:b1:5a:5c:63:50:a3:6f:bd:d0:d5:46:5b:3a:59: 9e:e7:0f:52:40:8c:3d:4d:9f:e9:93:59:bf:14:af: a5:60:c9:97:cb:0a:d7:98:b9:ef:94:5f:f4:34:2f: e4:da:59:9e:a2:f0:14:de:bd:3a:34:27:f6:a9:af: b7:44:ec:5d:8b:0f:ad:76:37:56:0a:03:7d:85:b3: 34:a5:17:60:a8:aa:1f:89:b6:ae:28:aa:8e:52:3c: 4d:dc:27:3e:ea:08:69:47:16:a8:50:0e:a1:c2:af: 38:0e:a5:63:b5:94:85:11:8d:bb:73:dd:64:93:cb: be:7d:8b:1e:49:42:fc:11:ba:30:ba:40:a0:26:5f: ca:83:80:43:77:14:71:95:cd:76:eb:17:65:7a:c5: 8a:da:10:bb:82:6c:dd:a6:67:bf:b0:9f:14:38:9e: 36:3a:b8:14:ec:bd:e1:3e:cb:c9:22:bb:db:e4:ec: 08:52:f2:7c:c4:62:45:9c:6c:c5:ab:01:d5:d9:cc: 47:74:f3:e5:d4:fa:2b:4d:08:ee:33:8d:5d:c5:f9: 5b:71:8a:09:27:48:2c:24:22:c3:de:63:e0:12:9b: 87:3b:31:b7:f6:3c:ee:33:f6:aa:1d:2f:c7:db:f4: 57:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:22:02:B1:46:A2:7E:16:C3:DD:04:47:7B:CB:CF:8B:3B:BB:44:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5da20c58-3d59-33f3-8812-1e182e18a388.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:8e:16:6e:67:33:22:e0:59:01:56:ca:4c:2b:22:8c:87:03: 87:e8:d1:7a:45:06:b3:8d:50:5a:8a:f1:55:bb:1f:60:df:78: 52:0a:f1:fc:ae:ca:0b:dc:80:79:a0:0f:1c:8b:b7:e0:a4:6a: a8:fc:2e:f9:86:69:56:29:1e:e9:e5:33:b8:32:87:bc:21:45: af:50:74:05:b7:e6:75:45:04:cc:9f:12:f6:76:07:ed:e3:78: cb:b8:5a:50:07:53:6b:b6:2e:cb:73:87:9a:3b:85:41:59:27: e2:9e:f8:d9:3a:6c:09:31:e3:1b:78:c6:0b:fa:c0:79:21:a3: e6:8c:02:d8:97:81:84:49:0c:ad:d0:2b:8f:d0:6c:55:14:bd: e5:5b:d6:43:a1:23:9e:c8:17:69:03:88:a0:07:69:ca:b0:6c: df:6b:74:ef:1d:0c:65:46:d3:1f:e6:57:79:a4:ef:73:68:d2: ba:59:8f:37:73:eb:dc:b4:ea:52:00:03:3c:84:85:5c:e6:99: c3:9b:f7:37:09:a8:ad:55:e2:f2:0f:64:09:d8:8f:00:5d:c0: 19:e2:f8:69:f6:47:19:3c:23:a7:7b:67:af:f3:a6:0a:09:4a: fc:c7:38:9e:0b:44:c4:88:92:83:04:56:b2:f6:97:bf:9d:b5: 90:51:fe:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAiBlrL77c+h9IoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk NTFkMWM3YzgtYzFmOS00OWY1LThkYzctZDZlOTNmN2U0YWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvzSDTBAq40D71kMM0bjsVpcY1Cjb73Q1UZb Olme5w9SQIw9TZ/pk1m/FK+lYMmXywrXmLnvlF/0NC/k2lmeovAU3r06NCf2qa+3 ROxdiw+tdjdWCgN9hbM0pRdgqKofibauKKqOUjxN3Cc+6ghpRxaoUA6hwq84DqVj tZSFEY27c91kk8u+fYseSUL8EbowukCgJl/Kg4BDdxRxlc126xdlesWK2hC7gmzd pme/sJ8UOJ42OrgU7L3hPsvJIrvb5OwIUvJ8xGJFnGzFqwHV2cxHdPPl1PorTQju M41dxflbcYoJJ0gsJCLD3mPgEpuHOzG39jzuM/aqHS/H2/RXHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUiArFGon4Ww90ER3vLz4s7u0TpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWRhMjBjNTgtM2Q1OS0z M2YzLTg4MTItMWUxODJlMThhMzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRvdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABCOFm5nMyLgWQFWykwrIoyHA4fo0XpFBrONUFqK8VW7H2DfeFIK8fyu ygvcgHmgDxyLt+Ckaqj8LvmGaVYpHunlM7gyh7whRa9QdAW35nVFBMyfEvZ2B+3j eMu4WlAHU2u2Lstzh5o7hUFZJ+Ke+Nk6bAkx4xt4xgv6wHkho+aMAtiXgYRJDK3Q K4/QbFUUveVb1kOhI57IF2kDiKAHacqwbN9rdO8dDGVG0x/mV3mk73No0rpZjzdz 69y06lIAAzyEhVzmmcOb9zcJqK1V4vIPZAnYjwBdwBni+Gn2Rxk8I6d7Z6/zpgoJ SvzHOJ4LRMSIkoMEVrL2l7+dtZBR/pg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:45 2025 by rpki-client