$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27ac555d-052a-363f-a7ec-53779623b810.roa File: 27ac555d-052a-363f-a7ec-53779623b810.roa (raw, json) Hash identifier: 3AflDO4Iz+N1u78ipC1Ap4D5jO6VXhKVwA62pQG5Uww= Subject key identifier: F1:01:67:8A:2D:EF:64:46:D1:A8:20:FB:86:04:E8:D1:EB:94:3D:C5 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412400911B7E0B4EB402B00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27ac555d-052a-363f-a7ec-53779623b810.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.23.8.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:40:09:11:b7:e0:b4:eb:40:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=976d6141-718e-4408-98bb-1ee992830339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:c7:96:ad:93:2d:f9:52:f1:40:a0:1b:a6:02: 95:84:aa:e7:7f:a2:fd:4c:c5:40:1a:f9:ca:f9:06: 83:c0:c0:af:fd:3a:bd:b2:74:a6:0c:26:bb:7f:09: 83:9e:0d:a5:c4:9a:9f:5b:b6:a6:d2:39:01:80:9c: 1c:e0:fd:5f:69:06:c2:89:77:d8:5c:02:3c:50:77: 12:f8:95:87:54:f1:d9:7c:6e:a7:77:00:be:ae:ef: b1:9a:f9:95:df:f9:fb:00:a4:c4:f7:f5:25:25:22: 8c:7a:95:33:87:00:a0:1b:32:e7:ad:d9:e5:d2:69: 0e:a9:5d:06:55:62:83:df:4a:a7:7c:53:dc:f5:ac: bb:c7:1b:c4:38:dc:f4:3f:a3:45:97:7e:a6:77:92: 84:ec:3a:fd:1e:39:3d:8b:13:cf:2f:c0:f8:7d:af: bb:b6:7d:df:6c:d2:7e:62:84:e8:d9:07:72:4c:b9: 85:e2:72:07:f8:e3:0f:90:cf:c0:97:b8:68:05:34: 62:ff:c0:51:ed:3e:ce:db:31:93:9b:67:97:0e:76: 1e:48:72:e7:96:1c:da:38:76:d1:0a:04:9c:3b:d6: 55:ec:49:18:85:69:69:b7:76:4f:7c:a8:7a:54:8a: 27:8d:18:b1:91:ff:2d:78:15:27:6f:f5:f5:02:9c: 60:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:01:67:8A:2D:EF:64:46:D1:A8:20:FB:86:04:E8:D1:EB:94:3D:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/27ac555d-052a-363f-a7ec-53779623b810.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.23.8.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:a0:3f:9f:75:c8:31:2e:10:66:b2:f6:0e:f7:90:49:e7:67: ca:c7:c8:ab:9d:a1:ef:be:de:68:94:66:bc:ae:11:c1:90:35: cb:72:c4:4e:ee:12:f6:98:84:e3:ff:3a:98:5c:5c:16:c5:a2: eb:d2:bf:14:db:3c:58:b6:51:e5:91:e9:30:d8:dd:1f:c3:33: 07:6a:9e:4b:47:56:5b:3c:8a:89:d4:7d:57:8b:93:71:a9:bf: cc:1e:b0:8b:9e:cc:a9:6a:3c:b7:f4:36:1b:1f:93:20:b6:0b: 65:fd:91:49:13:39:25:77:44:d2:49:ad:e7:a1:3b:7e:15:43: cf:b1:b5:a8:d1:de:b3:27:b3:72:b7:76:f6:15:82:eb:ec:db: 29:b0:4d:51:71:e7:a5:69:3d:6b:41:67:17:7d:6c:bc:98:0b: f9:49:f9:0e:19:d8:cb:ff:10:e2:8d:14:15:18:3f:6e:46:df: ee:d4:c8:8f:28:00:ea:50:a2:13:59:9b:83:0a:56:d8:0a:7c: 75:73:8a:ff:dc:98:74:bd:f0:7f:d8:ad:28:d0:84:ce:81:00: 37:9c:1f:a8:02:bb:1b:05:97:fa:b1:e7:38:3c:cc:d0:2b:cf: 07:3d:90:69:16:3a:d2:04:7a:e0:9e:08:19:06:70:2b:c1:62: 2c:3a:6e:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEkAJEbfgtOtAKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTc2ZDYxNDEtNzE4ZS00NDA4LTk4YmItMWVlOTkyODMwMzM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8eWrZMt+VLxQKAbpgKVhKrnf6L9TMVAGvnK +QaDwMCv/Tq9snSmDCa7fwmDng2lxJqfW7am0jkBgJwc4P1faQbCiXfYXAI8UHcS +JWHVPHZfG6ndwC+ru+xmvmV3/n7AKTE9/UlJSKMepUzhwCgGzLnrdnl0mkOqV0G VWKD30qnfFPc9ay7xxvEONz0P6NFl36md5KE7Dr9Hjk9ixPPL8D4fa+7tn3fbNJ+ YoTo2QdyTLmF4nIH+OMPkM/Al7hoBTRi/8BR7T7O2zGTm2eXDnYeSHLnlhzaOHbR CgScO9ZV7EkYhWlpt3ZPfKh6VIonjRixkf8teBUnb/X1ApxgPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPEBZ4ot72RG0agg+4YE6NHrlD3FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMjdhYzU1NWQtMDUyYS0z NjNmLWE3ZWMtNTM3Nzk2MjNiODEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRcIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFegP591yDEuEGay9g73kEnnZ8rHyKudoe++3miUZryuEcGQNctyxE7u EvaYhOP/OphcXBbFouvSvxTbPFi2UeWR6TDY3R/DMwdqnktHVls8ionUfVeLk3Gp v8wesIuezKlqPLf0NhsfkyC2C2X9kUkTOSV3RNJJreehO34VQ8+xtajR3rMns3K3 dvYVguvs2ymwTVFx56VpPWtBZxd9bLyYC/lJ+Q4Z2Mv/EOKNFBUYP25G3+7UyI8o AOpQohNZm4MKVtgKfHVziv/cmHS98H/YrSjQhM6BADecH6gCuxsFl/qx5zg8zNAr zwc9kGkWOtIEeuCeCBkGcCvBYiw6bpA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:47:25 2025 by rpki-client