$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847b8d21-7564-3171-935e-e4f547712088.roa File: 847b8d21-7564-3171-935e-e4f547712088.roa (raw, json) Hash identifier: InZJvD+DjEXi9c7HlmFzb1ESZNUpyJqYDAynnoL0rAM= Subject key identifier: CF:AF:90:88:59:0E:30:2F:1B:CD:42:D3:AA:73:3A:82:09:D0:26:57 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B785747D04807728131A35E00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847b8d21-7564-3171-935e-e4f547712088.roa Signing time: Fri 10 Oct 2025 01:00:30 +0000 ROA not before: Fri 10 Oct 2025 01:00:30 +0000 ROA not after: Thu 08 Jan 2026 02:00:30 +0000 asID: 30036 IP address blocks: 173.27.170.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:78:57:47:d0:48:07:72:81:31:a3:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 01:00:30 2025 GMT Not After : Jan 8 02:00:30 2026 GMT Subject: CN=648f37b1-9a76-43ed-9df3-e706fecf461b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:7a:28:bb:7e:d5:0e:f0:b0:82:dd:32:f5: 88:cb:57:ea:e1:69:91:5a:5e:30:ea:fa:af:71:55: 6d:bf:ea:7a:35:26:0e:aa:67:75:06:45:1b:d2:1d: 77:05:0e:44:13:e1:15:e6:f5:74:45:9c:f3:51:70: da:f2:09:45:28:b0:c4:04:b7:bf:08:23:3d:2c:a1: ea:bd:14:0e:f9:b4:dc:bc:72:83:33:aa:e5:df:f4: 04:61:a7:8c:13:79:85:61:0c:91:1b:6e:b6:34:f2: 27:de:14:14:ae:a6:2e:f7:11:00:f3:4b:c2:aa:5c: 5f:fa:bc:20:58:01:dc:9d:64:6f:0a:c6:2c:12:6b: 6c:da:9f:eb:ab:44:0f:72:fa:ae:f0:a9:99:e3:43: 37:01:33:7f:a1:22:27:fc:7d:73:3a:5f:b0:36:09: 6a:e4:af:a1:12:9d:69:9e:70:04:bd:a6:8c:b7:cf: d2:11:7d:ec:1f:e7:5c:42:b7:a3:b9:de:4e:ec:9d: ca:2d:5b:26:12:28:ee:e9:f6:b0:5f:5a:c1:9b:cf: 73:d1:35:4c:cf:6c:1f:00:5b:6d:92:81:46:e9:6a: aa:4b:57:f8:63:3d:29:70:63:42:e6:27:a0:91:06: 97:85:37:39:18:3d:57:dc:4a:9e:4f:27:e6:ed:f6: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:90:88:59:0E:30:2F:1B:CD:42:D3:AA:73:3A:82:09:D0:26:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/847b8d21-7564-3171-935e-e4f547712088.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:50:c2:91:64:36:ae:c4:26:be:03:e6:05:db:1e:28:ff:53: 0a:61:08:70:20:58:88:b8:f7:82:44:47:e6:31:f4:f1:79:77: 3a:f7:b1:bd:44:21:34:fa:a2:6e:11:21:54:29:16:b3:c2:32: 04:aa:d3:3a:a3:74:c6:64:99:dd:76:8c:24:62:b5:bb:52:55: 92:2a:30:f8:1e:5d:f9:dc:2a:f3:bf:6c:74:a6:39:4c:c9:7f: 51:26:36:25:49:0d:02:6d:2f:92:dd:2d:17:b8:e5:72:98:8b: 99:ad:9a:3e:08:f6:53:7b:a7:4b:a7:6a:79:43:02:a1:76:e7: ad:ce:fd:a9:56:71:8a:e8:ec:c4:b0:bf:d7:ac:52:a4:88:4a: 34:d9:73:51:af:83:45:41:a0:19:ff:28:2d:cf:a1:3a:2c:28: 71:47:97:4e:aa:31:35:58:88:5a:52:f4:cb:be:98:4a:d9:10: 04:c3:36:1a:66:4f:e6:d8:fa:15:76:2b:32:27:05:d6:5b:9f: 8f:78:c5:6e:bb:36:69:de:87:f2:f3:49:33:64:21:3c:ce:cf: 0d:0f:e3:fd:24:81:fe:83:1b:50:99:b1:91:d1:1f:99:56:fb: 04:71:aa:c1:cc:06:61:e4:fa:65:86:08:0e:4c:eb:31:27:de: 6e:dc:d7:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt4V0fQSAdygTGjXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDAxMDAzMFoXDTI2MDEwODAyMDAzMFowLzEtMCsGA1UEAxMk NjQ4ZjM3YjEtOWE3Ni00M2VkLTlkZjMtZTcwNmZlY2Y0NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8F6KLt+1Q7wsILdMvWIy1fq4WmRWl4w6vqv cVVtv+p6NSYOqmd1BkUb0h13BQ5EE+EV5vV0RZzzUXDa8glFKLDEBLe/CCM9LKHq vRQO+bTcvHKDM6rl3/QEYaeME3mFYQyRG262NPIn3hQUrqYu9xEA80vCqlxf+rwg WAHcnWRvCsYsEmts2p/rq0QPcvqu8KmZ40M3ATN/oSIn/H1zOl+wNglq5K+hEp1p nnAEvaaMt8/SEX3sH+dcQrejud5O7J3KLVsmEiju6fawX1rBm89z0TVMz2wfAFtt koFG6WqqS1f4Yz0pcGNC5iegkQaXhTc5GD1X3EqeTyfm7fa1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+vkIhZDjAvG81C06pzOoIJ0CZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODQ3YjhkMjEtNzU2NC0z MTcxLTkzNWUtZTRmNTQ3NzEyMDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFQwpFkNq7EJr4D5gXbHij/UwphCHAgWIi494JER+Yx9PF5dzr3sb1E ITT6om4RIVQpFrPCMgSq0zqjdMZkmd12jCRitbtSVZIqMPgeXfncKvO/bHSmOUzJ f1EmNiVJDQJtL5LdLRe45XKYi5mtmj4I9lN7p0unanlDAqF2563O/alWcYro7MSw v9esUqSISjTZc1Gvg0VBoBn/KC3PoTosKHFHl06qMTVYiFpS9Mu+mErZEATDNhpm T+bY+hV2KzInBdZbn494xW67Nmneh/LzSTNkITzOzw0P4/0kgf6DG1CZsZHRH5lW +wRxqsHMBmHk+mWGCA5M6zEn3m7c19g= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:53 2025 by rpki-client