$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d44b92fb-a6d6-3ab2-b968-131dce075f49.roa File: d44b92fb-a6d6-3ab2-b968-131dce075f49.roa (raw, json) Hash identifier: OKj0lTBYPY9VrkFGoUvNny4XqrgVWiipFQe0RvPh9sY= Subject key identifier: 43:9E:92:A5:A4:D6:B2:69:70:81:40:CB:87:3E:A5:F1:66:B2:44:FE Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B679734BEF1338663C3278980 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d44b92fb-a6d6-3ab2-b968-131dce075f49.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 30036 IP address blocks: 173.27.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:34:be:f1:33:86:63:c3:27:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=71a3e303-b360-45b1-964c-accf749415ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d9:ac:f2:e8:5e:3b:35:eb:29:ce:61:43:0b: b4:26:2c:53:71:e1:79:c7:cb:2f:b2:fb:13:dd:63: 1c:07:c8:3c:c0:f0:e2:3b:16:e7:09:70:04:77:60: b9:65:80:89:c2:9b:eb:f2:45:ca:fc:31:25:08:4a: 39:90:61:d7:12:44:b8:75:a8:34:b7:41:d3:dd:cc: 40:53:4d:c3:47:91:15:b7:02:ba:38:f5:5c:73:e2: 18:7d:85:4f:c3:de:7a:28:2e:41:f6:df:0c:05:c3: 2c:88:3c:75:6b:bd:7b:e8:c3:ee:f9:0d:99:c0:1b: 64:03:27:c6:05:42:e7:82:e7:0e:60:7a:d8:ce:b7: ce:77:fe:62:31:da:2b:e2:b9:11:00:7e:e6:49:d8: 36:ee:36:2d:c4:d2:35:7d:9c:5a:a9:90:57:8b:2d: 35:e3:d9:c4:3f:2f:95:39:43:2d:9d:82:83:0c:cc: 04:af:a1:0b:87:b9:6a:5f:b4:94:85:da:62:d5:62: 64:cd:ce:99:2f:d7:36:54:13:1d:b8:ef:0f:71:58: c8:e8:35:00:d0:3d:5f:00:cc:17:70:d8:09:c6:59: 99:47:e8:7d:db:a2:ae:dc:d2:6f:32:78:ee:15:f0: 2e:b5:0f:85:7b:37:e0:5e:26:5b:cd:01:98:17:54: bd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:92:A5:A4:D6:B2:69:70:81:40:CB:87:3E:A5:F1:66:B2:44:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/d44b92fb-a6d6-3ab2-b968-131dce075f49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:a0:52:3a:51:ed:dc:e8:33:f9:f6:8d:00:71:bd:f4:e6:8b: ec:92:b7:74:76:30:9e:c7:cf:aa:b8:d6:76:1f:64:d5:12:d5: 6e:9e:d6:d9:ef:dc:24:ab:dd:9b:40:a9:5a:40:a5:7d:bc:fd: 11:29:07:01:b1:31:d1:a3:aa:4e:02:92:90:09:78:bc:a0:79: b9:c6:90:57:5c:a6:e8:49:58:9f:0b:cc:62:98:47:63:f8:06: 39:fc:bf:04:07:c0:29:a1:7f:a5:cf:cb:52:01:f2:0d:5e:0a: f8:33:0d:ba:d4:10:1b:84:be:69:75:07:90:c1:b1:f8:2c:02: 68:38:98:da:8e:c7:80:89:1e:04:e9:a9:2b:cd:a6:56:13:ad: 60:07:88:cd:e1:11:25:34:48:94:07:a8:d0:0a:63:01:96:26: f2:58:56:19:62:79:f7:de:ad:0d:46:d3:00:4f:20:4d:5b:94: 3c:99:00:e0:fa:8b:06:a4:a4:ea:7a:1b:a0:99:49:62:35:02: d8:f1:53:75:f4:35:cb:7e:40:0c:ed:27:d9:d6:93:3c:6b:ec: a7:91:5d:6e:c8:cb:f2:ee:ac:cb:ff:ff:65:11:d7:63:b1:c1: 8a:b6:33:64:76:ea:34:68:ff:8d:1a:02:77:3e:99:a7:f1:20: 5d:64:10:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnlzS+8TOGY8MniYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NzFhM2UzMDMtYjM2MC00NWIxLTk2NGMtYWNjZjc0OTQxNWFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdms8uheOzXrKc5hQwu0JixTceF5x8svsvsT 3WMcB8g8wPDiOxbnCXAEd2C5ZYCJwpvr8kXK/DElCEo5kGHXEkS4dag0t0HT3cxA U03DR5EVtwK6OPVcc+IYfYVPw956KC5B9t8MBcMsiDx1a7176MPu+Q2ZwBtkAyfG BULngucOYHrYzrfOd/5iMdor4rkRAH7mSdg27jYtxNI1fZxaqZBXiy0149nEPy+V OUMtnYKDDMwEr6ELh7lqX7SUhdpi1WJkzc6ZL9c2VBMduO8PcVjI6DUA0D1fAMwX cNgJxlmZR+h926Ku3NJvMnjuFfAutQ+FezfgXiZbzQGYF1S9JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEOekqWk1rJpcIFAy4c+pfFmskT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZDQ0YjkyZmItYTZkNi0z YWIyLWI5NjgtMTMxZGNlMDc1ZjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmgUjpR7dzoM/n2jQBxvfTmi+ySt3R2MJ7Hz6q41nYfZNUS1W6e1tnv 3CSr3ZtAqVpApX28/REpBwGxMdGjqk4CkpAJeLygebnGkFdcpuhJWJ8LzGKYR2P4 Bjn8vwQHwCmhf6XPy1IB8g1eCvgzDbrUEBuEvml1B5DBsfgsAmg4mNqOx4CJHgTp qSvNplYTrWAHiM3hESU0SJQHqNAKYwGWJvJYVhliefferQ1G0wBPIE1blDyZAOD6 iwakpOp6G6CZSWI1AtjxU3X0Nct+QAztJ9nWkzxr7KeRXW7Iy/LurMv//2UR12Ox wYq2M2R26jRo/40aAnc+mafxIF1kEFg= -----END CERTIFICATE-----Generated at Sat Oct 11 02:58:40 2025 by rpki-client