$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa File: 95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa (raw, json) Hash identifier: f00onmkOT/L6mgs9NI1TSJ3XEktg9JuUZgUbBJG8/Xo= Subject key identifier: 52:2A:18:86:4F:85:BE:50:15:70:90:8B:36:3D:E8:37:53:1F:9C:36 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B758CB371BD5438FBEF74FF80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 19905 IP address blocks: 173.27.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:b3:71:bd:54:38:fb:ef:74:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=d8a28a6d-3168-406e-84de-55e83b8a1117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:45:4f:57:82:37:74:92:65:21:01:33:bc:f9: 3b:bd:7b:f7:69:c4:51:c1:bd:f6:75:25:1a:bc:48: a9:d1:a7:da:0d:47:6c:62:51:8c:36:e3:e9:27:ca: b2:5c:34:e0:ea:13:7a:33:03:35:79:e0:35:c9:51: 7e:88:6d:0d:c5:fd:d8:e6:fc:c7:e6:9f:16:57:4a: 28:0e:4d:be:01:ec:c8:82:b8:b7:44:c9:4d:b3:31: 5c:c7:fb:ff:90:fd:73:6c:69:58:7c:a5:5f:e8:e0: 21:22:c7:4b:87:cc:c6:04:f1:d5:0b:39:b6:cd:25: 5b:95:d8:2f:46:fa:bb:27:9f:e4:0f:75:3a:5b:ad: f8:11:5a:b8:ab:79:73:1b:7c:1e:a4:2f:18:eb:42: b7:69:af:a0:fa:f2:94:40:ca:35:27:5a:02:21:dd: 57:4f:b3:73:fe:2c:90:a0:d6:b6:33:b1:34:9a:f4: f5:7f:b4:f6:e5:63:b3:09:41:34:68:fe:ad:e2:3e: a2:77:fc:95:5b:e2:f7:27:b7:3a:e3:a6:b9:56:17: f1:f7:d3:33:d2:e2:b7:03:ef:28:8b:3d:fe:46:3c: 71:a5:fe:4c:ef:1e:30:ef:8c:08:a9:32:cd:fd:6c: d1:04:82:21:d3:be:d5:f8:dc:90:a2:e2:4e:93:1c: e7:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:2A:18:86:4F:85:BE:50:15:70:90:8B:36:3D:E8:37:53:1F:9C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/95a6e189-d6b7-37d0-bf8a-939ce96ddcff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:a4:94:15:c9:c5:5b:25:8d:78:ad:ff:8e:27:50:06:df:3e: 4a:7f:c8:fa:e6:51:f9:0e:0d:5f:f0:91:88:f9:e2:3b:40:b0: bd:15:94:67:45:05:5b:45:2e:73:8a:8d:5c:0c:82:5f:3d:6d: a5:2c:bc:77:0e:3c:6a:7c:2a:f6:d9:6d:50:9d:8d:0c:e9:e0: 11:a1:87:c5:51:d9:3c:5f:91:8e:83:0a:96:f5:0d:9b:a1:1b: 00:90:9e:07:38:88:bb:83:c2:f2:08:f7:31:26:7a:5e:40:e6: f5:2b:60:19:af:50:1a:38:03:81:88:55:ab:b4:9f:75:46:e5: 36:59:bd:ed:23:84:38:19:f8:53:26:61:99:fb:56:47:83:9b: 06:7f:67:26:db:8b:57:99:5f:c4:c1:ef:7d:bc:82:84:34:1b: d0:da:f9:b9:80:32:ed:b9:cc:97:08:43:07:82:52:6a:b9:d3: 55:3b:6d:7a:2d:36:c6:bc:83:5b:7c:58:44:bc:5c:9a:f6:10: 4d:05:a0:33:a1:eb:9d:bb:41:fc:6b:a5:47:50:69:f5:cb:5a: 59:b7:9b:7f:cb:c8:c9:e1:a3:5b:4d:d0:d5:98:53:15:0f:d4: 70:77:30:6a:0c:37:84:60:bd:2d:fe:f8:b1:2c:44:a3:ec:9e: 58:35:04:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jLNxvVQ4++90/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk ZDhhMjhhNmQtMzE2OC00MDZlLTg0ZGUtNTVlODNiOGExMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0VPV4I3dJJlIQEzvPk7vXv3acRRwb32dSUa vEip0afaDUdsYlGMNuPpJ8qyXDTg6hN6MwM1eeA1yVF+iG0Nxf3Y5vzH5p8WV0oo Dk2+AezIgri3RMlNszFcx/v/kP1zbGlYfKVf6OAhIsdLh8zGBPHVCzm2zSVbldgv Rvq7J5/kD3U6W634EVq4q3lzG3wepC8Y60K3aa+g+vKUQMo1J1oCId1XT7Nz/iyQ oNa2M7E0mvT1f7T25WOzCUE0aP6t4j6id/yVW+L3J7c646a5Vhfx99Mz0uK3A+8o iz3+Rjxxpf5M7x4w74wIqTLN/WzRBIIh077V+NyQouJOkxznewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFIqGIZPhb5QFXCQizY96DdTH5w2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvOTVhNmUxODktZDZiNy0z N2QwLWJmOGEtOTM5Y2U5NmRkY2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuklBXJxVsljXit/44nUAbfPkp/yPrmUfkODV/wkYj54jtAsL0VlGdF BVtFLnOKjVwMgl89baUsvHcOPGp8KvbZbVCdjQzp4BGhh8VR2TxfkY6DCpb1DZuh GwCQngc4iLuDwvII9zEmel5A5vUrYBmvUBo4A4GIVau0n3VG5TZZve0jhDgZ+FMm YZn7VkeDmwZ/Zybbi1eZX8TB7328goQ0G9Da+bmAMu25zJcIQweCUmq501U7bXot Nsa8g1t8WES8XJr2EE0FoDOh6527QfxrpUdQafXLWlm3m3/LyMnho1tN0NWYUxUP 1HB3MGoMN4RgvS3++LEsRKPsnlg1BDc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:52:10 2025 by rpki-client