$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca724c1b-b0f5-3037-aac7-17027e5a455e.roa File: ca724c1b-b0f5-3037-aac7-17027e5a455e.roa (raw, json) Hash identifier: /xcUYgI8OTTt55cYGZf8/JlZHL6GRXDq5hcQNrrjuYk= Subject key identifier: 1F:1E:2E:42:31:26:95:9E:F0:3A:DE:88:E1:44:D2:12:F9:87:DA:F0 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201CE0AD13DDECC5C5D5E80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca724c1b-b0f5-3037-aac7-17027e5a455e.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 19905 IP address blocks: 173.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:ce:0a:d1:3d:de:cc:5c:5d:5e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=fabc7ddb-8c48-4389-a3e6-c4aae7eae29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e7:05:32:31:29:c0:ae:46:20:f5:9c:1a:9d: d0:b8:61:e1:98:51:48:88:4a:fa:01:ad:a2:c3:41: 62:eb:7c:ab:33:67:20:61:b7:cc:25:2b:6c:d2:8b: 6a:fe:ad:cb:88:f2:50:b3:3f:52:35:6f:32:48:7e: 37:1f:f7:14:27:ce:2f:d1:bd:e3:58:62:3c:d9:29: 62:c2:a2:2d:31:70:dd:28:5b:be:e5:f0:cf:ab:28: 5d:0f:d6:f4:01:34:e0:f1:15:60:6f:75:fa:cf:46: 46:dd:b9:a2:45:dd:c6:1e:53:95:86:44:49:c4:a1: 2d:0b:6e:92:61:f5:0e:86:fe:a6:4b:e9:b2:85:b8: a3:83:66:70:8c:16:5d:56:77:cd:ac:56:bc:5c:c7: 84:f1:99:9c:c5:29:ee:a3:14:89:5c:d8:b6:ab:b7: 99:e8:be:4a:35:b4:3f:77:39:29:22:1d:bf:0b:5a: 26:7d:37:39:2a:ee:09:f9:a4:22:06:2c:31:5d:1f: 50:51:cd:b9:a6:7e:b1:ec:12:53:e6:99:a2:3e:2f: f4:0c:d8:02:30:10:ad:39:6a:ad:58:4d:db:c3:8f: 64:87:4b:77:5c:e9:69:08:2c:d6:39:2a:06:92:6f: 9f:2e:08:d9:41:d9:3d:94:cc:ab:73:dd:0f:81:70: 4b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:1E:2E:42:31:26:95:9E:F0:3A:DE:88:E1:44:D2:12:F9:87:DA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/ca724c1b-b0f5-3037-aac7-17027e5a455e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:01:cd:71:4a:d5:66:96:93:17:01:e8:f7:8d:be:33:2c:5c: ce:01:7d:e1:c1:70:ac:7a:08:fa:5d:b9:e2:c0:61:5c:01:c1: 0d:a1:68:a8:b3:45:2e:17:72:27:da:fc:19:39:c5:e1:8f:7a: bc:0f:97:90:de:6b:0e:f9:57:75:82:f0:02:3e:71:6f:ed:47: 5a:5f:7b:ad:a5:c6:d4:27:af:e6:0c:94:82:31:67:33:99:8d: f1:fd:40:af:19:80:23:08:4c:ae:d1:ce:ec:a3:e0:01:0e:79: ec:66:9b:55:0b:c1:cd:86:3b:9b:25:bb:38:84:3a:3c:bd:b1: ac:56:19:32:74:c9:b3:9e:e3:c3:25:57:4c:04:63:f9:22:45: 8f:3c:dd:d8:29:42:37:4c:b7:10:56:7a:b0:1a:87:2b:9c:1f: 98:15:ba:6d:49:ab:aa:84:f0:67:06:c4:f4:cf:ea:c0:cb:e7: 06:02:7e:05:60:65:d3:82:60:90:52:b4:f2:7e:62:56:68:e0: 65:e4:10:30:8b:28:2d:69:73:2c:ba:52:79:39:ec:94:94:c8: ed:f0:64:1b:e1:00:45:cf:fe:c3:c0:63:43:77:f0:e2:fb:c7: cf:36:af:4b:9f:e2:a1:5a:1c:cd:b4:31:47:33:59:2d:cc:72: 32:51:ba:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAc4K0T3ezFxdXoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk ZmFiYzdkZGItOGM0OC00Mzg5LWEzZTYtYzRhYWU3ZWFlMjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoecFMjEpwK5GIPWcGp3QuGHhmFFIiEr6Aa2i w0Fi63yrM2cgYbfMJSts0otq/q3LiPJQsz9SNW8ySH43H/cUJ84v0b3jWGI82Sli wqItMXDdKFu+5fDPqyhdD9b0ATTg8RVgb3X6z0ZG3bmiRd3GHlOVhkRJxKEtC26S YfUOhv6mS+myhbijg2ZwjBZdVnfNrFa8XMeE8ZmcxSnuoxSJXNi2q7eZ6L5KNbQ/ dzkpIh2/C1omfTc5Ku4J+aQiBiwxXR9QUc25pn6x7BJT5pmiPi/0DNgCMBCtOWqt WE3bw49kh0t3XOlpCCzWOSoGkm+fLgjZQdk9lMyrc90PgXBLZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8eLkIxJpWe8DreiOFE0hL5h9rwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2E3MjRjMWItYjBmNS0z MDM3LWFhYzctMTcwMjdlNWE0NTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4BzXFK1WaWkxcB6PeNvjMsXM4BfeHBcKx6CPpdueLAYVwBwQ2haKiz RS4Xcifa/Bk5xeGPerwPl5Deaw75V3WC8AI+cW/tR1pfe62lxtQnr+YMlIIxZzOZ jfH9QK8ZgCMITK7Rzuyj4AEOeexmm1ULwc2GO5sluziEOjy9saxWGTJ0ybOe48Ml V0wEY/kiRY883dgpQjdMtxBWerAahyucH5gVum1Jq6qE8GcGxPTP6sDL5wYCfgVg ZdOCYJBStPJ+YlZo4GXkEDCLKC1pcyy6Unk57JSUyO3wZBvhAEXP/sPAY0N38OL7 x882r0uf4qFaHM20MUczWS3McjJRug8= -----END CERTIFICATE-----Generated at Sat Oct 11 02:42:59 2025 by rpki-client