$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cda82f7d-333c-3a31-b08e-5bf6574afb10.roa File: cda82f7d-333c-3a31-b08e-5bf6574afb10.roa (raw, json) Hash identifier: /atk+T1DK+NAo88CcmH1UoVHG6pM661v1p7qKEMrbe4= Subject key identifier: B3:18:95:4C:19:34:2A:8F:7D:EC:B6:09:69:62:DE:B3:30:B5:62:1C Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B513057FCDEDD80ED1ADAF300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cda82f7d-333c-3a31-b08e-5bf6574afb10.roa Signing time: Fri 26 Sep 2025 00:25:35 +0000 ROA not before: Fri 26 Sep 2025 00:25:35 +0000 ROA not after: Thu 25 Dec 2025 01:25:35 +0000 asID: 30036 IP address blocks: 173.27.172.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:51:30:57:fc:de:dd:80:ed:1a:da:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 26 00:25:35 2025 GMT Not After : Dec 25 01:25:35 2025 GMT Subject: CN=96c65482-4c77-453b-bcc7-97152ee4634d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:fb:88:64:3a:6c:1e:0b:98:78:fc:22:fc: 56:51:01:e3:14:dd:6a:44:a6:5c:aa:54:d3:c3:df: be:b8:df:77:86:a0:53:20:5d:30:96:eb:dc:6c:7e: 25:9b:a1:ba:4a:23:00:ab:5f:27:83:81:d4:f0:a0: 4b:0b:62:05:4e:f1:09:d1:2f:bc:15:06:27:16:25: d8:5c:1f:3c:12:d8:07:e3:d7:97:d6:e6:4a:74:3d: 71:fa:62:9d:6a:23:a5:37:7b:15:3f:49:d6:e1:5f: ca:af:df:ef:38:93:34:e0:df:f7:de:e2:09:06:3d: 8a:bf:a7:2d:ed:85:00:a9:4a:f0:cc:b3:44:ca:cb: 5e:2b:93:ea:f6:f2:ea:ce:09:00:a4:a1:fd:71:f7: 89:2e:83:59:97:40:b0:59:2c:3e:c9:7a:2c:14:e8: bc:87:92:e9:28:53:0c:27:17:53:d0:02:00:ce:dc: 3d:78:98:14:9c:22:74:e4:17:6e:ff:cf:a9:71:57: ed:f5:03:42:50:0e:31:f2:54:da:84:c5:4d:fc:48: a9:74:cc:09:81:96:26:21:32:e1:42:ec:ac:eb:10: bd:b9:49:0f:95:be:05:e5:9e:6e:d1:84:e1:d1:2e: e7:df:0b:55:cc:72:ec:10:73:20:d7:5a:a4:75:b6: 14:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:18:95:4C:19:34:2A:8F:7D:EC:B6:09:69:62:DE:B3:30:B5:62:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/cda82f7d-333c-3a31-b08e-5bf6574afb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.172.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:43:25:2a:ca:72:b2:0e:43:31:c8:fe:ea:8c:73:1a:af:82: 14:84:e7:d4:f1:ed:88:50:b9:76:2b:7e:4f:2f:60:b0:6a:95: cb:ea:26:f4:b9:d8:40:f0:98:5c:a5:06:10:d6:5a:94:cd:3f: af:e5:35:45:d6:25:d0:00:85:73:2e:e8:fd:57:22:68:cb:dc: ab:da:60:06:86:ad:58:0b:0b:1e:bb:8c:44:6e:1e:a9:25:ba: c5:3c:c8:7e:f7:b5:86:9f:3c:a1:19:0f:fa:1a:10:76:73:84: 7f:a6:9b:77:6c:98:3e:9f:60:2b:73:72:ef:09:e1:22:e1:10: 9a:1c:cf:26:d9:d7:4c:13:6f:f0:21:be:a3:72:fb:59:5a:7c: 96:2c:82:c7:aa:96:86:d1:3a:c7:04:a5:03:dc:4a:71:ff:0a: 93:e8:dd:9c:91:db:13:b3:01:ab:1e:11:1f:76:8a:39:ef:7b: bc:50:52:8f:7d:f7:2d:9d:29:c7:6d:cd:40:fd:79:d0:48:28: 9a:8c:5f:41:1d:42:39:59:b8:d4:54:8f:e8:bb:e3:5b:1d:42: 83:d1:86:08:7c:6f:a0:9e:bb:56:ec:08:ca:44:b7:48:e1:49: 9b:2d:6c:59:70:16:3a:10:49:f8:21:71:d7:d7:36:9f:80:4c: 0e:36:ba:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtRMFf83t2A7Rra8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyNjAwMjUzNVoXDTI1MTIyNTAxMjUzNVowLzEtMCsGA1UEAxMk OTZjNjU0ODItNGM3Ny00NTNiLWJjYzctOTcxNTJlZTQ2MzRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W/7iGQ6bB4LmHj8IvxWUQHjFN1qRKZcqlTT w9++uN93hqBTIF0wluvcbH4lm6G6SiMAq18ng4HU8KBLC2IFTvEJ0S+8FQYnFiXY XB88EtgH49eX1uZKdD1x+mKdaiOlN3sVP0nW4V/Kr9/vOJM04N/33uIJBj2Kv6ct 7YUAqUrwzLNEysteK5Pq9vLqzgkApKH9cfeJLoNZl0CwWSw+yXosFOi8h5LpKFMM JxdT0AIAztw9eJgUnCJ05Bdu/8+pcVft9QNCUA4x8lTahMVN/EipdMwJgZYmITLh Quys6xC9uUkPlb4F5Z5u0YTh0S7n3wtVzHLsEHMg11qkdbYUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLMYlUwZNCqPfey2CWli3rMwtWIcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvY2RhODJmN2QtMzMzYy0z YTMxLWIwOGUtNWJmNjU3NGFmYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRusMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZDJSrKcrIOQzHI/uqMcxqvghSE59Tx7YhQuXYrfk8vYLBqlcvqJvS5 2EDwmFylBhDWWpTNP6/lNUXWJdAAhXMu6P1XImjL3KvaYAaGrVgLCx67jERuHqkl usU8yH73tYafPKEZD/oaEHZzhH+mm3dsmD6fYCtzcu8J4SLhEJoczybZ10wTb/Ah vqNy+1lafJYsgseqlobROscEpQPcSnH/CpPo3ZyR2xOzAaseER92ijnve7xQUo99 9y2dKcdtzUD9edBIKJqMX0EdQjlZuNRUj+i741sdQoPRhgh8b6Ceu1bsCMpEt0jh SZstbFlwFjoQSfghcdfXNp+ATA42uuI= -----END CERTIFICATE-----Generated at Sat Oct 11 03:00:43 2025 by rpki-client