$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5fd7e2f1-06a7-3230-86aa-888005af8e1d.roa File: 5fd7e2f1-06a7-3230-86aa-888005af8e1d.roa (raw, json) Hash identifier: 6JNPx56CRnP0dU4EhjEXUwlDiitk1JL/iCUCdSyl8Zk= Subject key identifier: 58:70:81:0B:9D:29:75:78:ED:EC:72:2B:0E:81:51:30:F4:05:22:F4 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BBE40604BE197AECDDD998300 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5fd7e2f1-06a7-3230-86aa-888005af8e1d.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.27.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:60:4b:e1:97:ae:cd:dd:99:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=05de2fc5-39d3-4cd5-9bab-583df2e27085 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3c:74:05:ca:40:8f:b8:fb:6c:88:cd:23:25: 5e:27:36:a7:85:d8:5d:12:ee:e9:fb:3d:46:85:e1: c7:47:a4:1c:85:ec:1b:cc:b3:0a:db:07:07:de:8b: 52:3d:56:18:d5:ad:8f:c9:d0:79:d0:09:88:f3:c8: e1:ec:35:f4:71:c8:26:77:39:3a:4e:39:30:01:d0: 41:a6:78:73:09:d2:f5:a5:77:fa:72:73:0d:42:e5: 08:f5:6a:44:81:41:4d:d5:5a:bd:e3:23:f9:24:ca: 4a:81:13:5d:52:a0:f5:13:47:91:8d:a7:f6:41:54: a0:3a:11:c6:df:06:0a:6a:4f:01:6a:c4:f1:d0:37: 50:5c:51:37:fb:ae:61:a3:af:73:80:06:84:a4:74: 17:65:5c:2c:5c:79:24:aa:36:80:3a:39:e2:ed:4f: e8:81:5a:a3:3c:85:81:96:c3:00:99:6e:22:ba:4e: 95:58:fd:bc:5e:b7:53:5e:48:c5:e7:34:a1:7f:7f: d0:3f:ea:27:18:f9:5f:67:d6:bb:f8:bc:26:0a:09: 27:99:57:49:eb:39:8e:db:27:e5:8d:88:a4:d3:51: 39:ae:72:82:f2:87:32:dc:22:6b:a0:8a:f9:75:73: c0:32:9b:1f:3d:eb:be:c0:80:81:65:f6:90:64:a7: 67:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:70:81:0B:9D:29:75:78:ED:EC:72:2B:0E:81:51:30:F4:05:22:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/5fd7e2f1-06a7-3230-86aa-888005af8e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.146.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:6e:a0:2e:61:4b:79:3c:03:4b:9c:4c:3a:e7:32:54:b3:39: 3f:c9:70:df:49:90:83:83:ac:94:d7:ad:d1:86:56:12:b5:a8: 2c:78:a3:07:94:5b:58:72:cc:b7:f1:0e:33:02:ce:a1:23:7b: 0d:e9:23:1e:45:a3:ab:48:ab:3d:2f:69:75:82:dc:ea:e4:23: 48:08:54:c9:60:d1:37:12:2f:0c:c7:40:84:e2:7a:10:9d:65: bc:22:d1:47:c4:0c:1f:ec:cb:b4:ff:06:d9:79:6d:43:78:43: 0b:18:99:e3:a9:dc:cd:de:2f:7b:f0:2b:ef:4f:af:7c:06:25: 61:9c:b3:59:55:0b:81:c1:18:ba:48:68:a8:c4:33:28:26:06: e4:aa:dd:0a:11:47:c6:65:d7:34:b4:32:aa:61:ce:41:d4:a2: 49:f8:38:5e:64:d0:62:b8:27:e3:c1:6e:55:18:29:53:9f:6d: 78:40:85:bb:95:07:19:1d:68:29:d2:29:2a:2b:ff:dc:64:e0: 98:e0:d5:df:25:36:fa:dc:7e:6b:09:ce:e5:d1:4a:f9:25:a6: 94:ac:12:3d:74:33:fb:c8:e6:5b:91:a8:0b:7b:7b:a1:f2:ae: 9a:25:20:bc:33:22:a1:d9:fe:03:b9:de:46:17:f9:44:ba:f0: a9:7a:95:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QGBL4Zeuzd2ZgwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MDVkZTJmYzUtMzlkMy00Y2Q1LTliYWItNTgzZGYyZTI3MDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDx0BcpAj7j7bIjNIyVeJzanhdhdEu7p+z1G heHHR6QchewbzLMK2wcH3otSPVYY1a2PydB50AmI88jh7DX0ccgmdzk6TjkwAdBB pnhzCdL1pXf6cnMNQuUI9WpEgUFN1Vq94yP5JMpKgRNdUqD1E0eRjaf2QVSgOhHG 3wYKak8BasTx0DdQXFE3+65ho69zgAaEpHQXZVwsXHkkqjaAOjni7U/ogVqjPIWB lsMAmW4iuk6VWP28XrdTXkjF5zShf3/QP+onGPlfZ9a7+LwmCgknmVdJ6zmO2yfl jYik01E5rnKC8ocy3CJroIr5dXPAMpsfPeu+wICBZfaQZKdnzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFhwgQudKXV47exyKw6BUTD0BSL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvNWZkN2UyZjEtMDZhNy0z MjMwLTg2YWEtODg4MDA1YWY4ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRuSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpuoC5hS3k8A0ucTDrnMlSzOT/JcN9JkIODrJTXrdGGVhK1qCx4oweU W1hyzLfxDjMCzqEjew3pIx5Fo6tIqz0vaXWC3OrkI0gIVMlg0TcSLwzHQITiehCd Zbwi0UfEDB/sy7T/Btl5bUN4QwsYmeOp3M3eL3vwK+9Pr3wGJWGcs1lVC4HBGLpI aKjEMygmBuSq3QoRR8Zl1zS0MqphzkHUokn4OF5k0GK4J+PBblUYKVOfbXhAhbuV BxkdaCnSKSor/9xk4Jjg1d8lNvrcfmsJzuXRSvklppSsEj10M/vI5luRqAt7e6Hy rpolILwzIqHZ/gO53kYX+US68Kl6lf8= -----END CERTIFICATE-----Generated at Tue Nov 4 19:20:49 2025 by rpki-client