$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa File: aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa (raw, json) Hash identifier: nnNtm8FUpqSC8h92paItx/S3AgR4qJIaA75Rulubq5Q= Subject key identifier: 7D:CA:02:84:29:0C:A0:DF:C2:F6:0B:09:77:20:01:FB:31:14:58:07 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B4A47367B762E2473C6724A40 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa Signing time: Tue 23 Sep 2025 13:00:40 +0000 ROA not before: Tue 23 Sep 2025 13:00:40 +0000 ROA not after: Mon 22 Dec 2025 14:00:40 +0000 asID: 30036 IP address blocks: 173.27.42.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4a:47:36:7b:76:2e:24:73:c6:72:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 23 13:00:40 2025 GMT Not After : Dec 22 14:00:40 2025 GMT Subject: CN=899171b0-5537-4aff-9260-3de7931ee41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:71:b1:a2:5e:e9:8b:fc:a2:d1:0a:3b:65:35: af:c9:c0:83:5f:42:ff:55:77:ae:62:3e:39:9f:01: a7:3c:9e:f7:ac:34:b7:7a:cf:e8:d5:11:9e:d2:b3: 9e:40:f5:82:f5:8e:99:7c:e4:ae:04:25:ca:8b:b4: 29:02:69:bb:48:f3:1e:ad:2b:f9:4b:e3:e8:60:f9: a8:91:5b:3e:c5:bc:f1:f6:73:f9:91:dd:1b:9d:20: 7c:64:c4:2d:b4:89:e9:8d:b9:1e:01:75:3e:f1:b7: bf:b8:fa:1d:39:c6:1f:12:c0:40:08:81:01:c5:be: 87:55:42:80:42:f3:08:52:56:8c:33:eb:fb:c8:74: 5d:cc:f1:76:54:00:79:fa:64:5a:95:c0:4d:4b:91: ca:11:69:2f:35:cc:59:8a:29:47:62:a9:4b:9a:15: 4f:62:73:ba:22:02:57:0d:e7:56:ac:14:45:09:46: ce:23:03:43:d9:65:8c:f6:54:4d:40:5f:f8:5e:14: 12:74:ec:8d:f8:79:e7:df:e0:a0:7c:a1:94:14:a3: 5a:9b:6c:c3:40:44:1f:64:68:0e:9c:94:50:db:9e: c6:a5:d8:0a:a8:93:81:7e:19:cd:13:ed:0f:5e:7d: 20:e9:1e:53:70:b7:ce:30:c2:dd:53:22:59:e5:15: 91:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CA:02:84:29:0C:A0:DF:C2:F6:0B:09:77:20:01:FB:31:14:58:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/aaa89bf7-cc30-3e75-8460-5ee0485844b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.42.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:8f:b6:d0:41:cf:22:a6:a3:ec:a9:a5:76:5b:26:bc:44:9a: 44:ca:ed:75:e8:54:ac:b3:8b:c5:42:77:82:22:ca:fd:f1:9e: ca:f6:5a:40:66:38:1a:1d:6b:53:8d:14:4a:ca:ce:47:1c:17: c5:da:1f:75:35:5e:8d:fb:fa:c2:3b:52:8c:a8:11:0c:98:e5: 9f:19:3c:ec:fb:dd:5f:8f:3c:b2:50:19:0f:1a:84:28:ad:f7: 1c:42:b3:b0:ab:7e:7b:fe:b4:a4:b7:48:c1:23:a6:ee:40:25: 35:d2:8d:36:cc:f7:c1:01:cf:88:c1:91:e5:e8:43:d3:38:de: a0:3c:28:e9:5a:f6:88:a9:0d:d5:63:32:dc:e3:42:0b:7e:67: 5e:84:00:1e:ec:30:2a:24:1f:e3:2c:2c:4e:a3:be:65:38:ec: c3:5e:09:ac:95:52:5a:09:86:fd:78:f4:2d:82:58:70:2b:ea: 3d:42:e3:af:48:6d:d7:29:8f:f6:74:55:02:00:0d:38:48:ef: 18:d8:bb:97:13:63:3a:ac:2b:4a:86:b7:a8:94:a9:67:31:8c: 91:b5:79:53:03:31:26:f6:68:38:bc:a7:e5:46:b7:1f:c3:60: 1f:f0:9e:da:29:2e:c0:37:b6:f0:3d:4f:ea:d5:68:3d:a0:5b: d9:0f:90:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtKRzZ7di4kc8ZySkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyMzEzMDA0MFoXDTI1MTIyMjE0MDA0MFowLzEtMCsGA1UEAxMk ODk5MTcxYjAtNTUzNy00YWZmLTkyNjAtM2RlNzkzMWVlNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXGxol7pi/yi0Qo7ZTWvycCDX0L/VXeuYj45 nwGnPJ73rDS3es/o1RGe0rOeQPWC9Y6ZfOSuBCXKi7QpAmm7SPMerSv5S+PoYPmo kVs+xbzx9nP5kd0bnSB8ZMQttInpjbkeAXU+8be/uPodOcYfEsBACIEBxb6HVUKA QvMIUlaMM+v7yHRdzPF2VAB5+mRalcBNS5HKEWkvNcxZiilHYqlLmhVPYnO6IgJX DedWrBRFCUbOIwND2WWM9lRNQF/4XhQSdOyN+Hnn3+CgfKGUFKNam2zDQEQfZGgO nJRQ257GpdgKqJOBfhnNE+0PXn0g6R5TcLfOMMLdUyJZ5RWRRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3KAoQpDKDfwvYLCXcgAfsxFFgHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWFhODliZjctY2MzMC0z ZTc1LTg0NjAtNWVlMDQ4NTg0NGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRsqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuPttBBzyKmo+yppXZbJrxEmkTK7XXoVKyzi8VCd4Iiyv3xnsr2WkBm OBoda1ONFErKzkccF8XaH3U1Xo37+sI7UoyoEQyY5Z8ZPOz73V+PPLJQGQ8ahCit 9xxCs7Crfnv+tKS3SMEjpu5AJTXSjTbM98EBz4jBkeXoQ9M43qA8KOla9oipDdVj MtzjQgt+Z16EAB7sMCokH+MsLE6jvmU47MNeCayVUloJhv149C2CWHAr6j1C469I bdcpj/Z0VQIADThI7xjYu5cTYzqsK0qGt6iUqWcxjJG1eVMDMSb2aDi8p+VGtx/D YB/wntopLsA3tvA9T+rVaD2gW9kPkDA= -----END CERTIFICATE-----Generated at Sat Oct 11 02:53:29 2025 by rpki-client