$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87874dd1-a8ff-3986-a37d-73a261d4e6ae.roa File: 87874dd1-a8ff-3986-a37d-73a261d4e6ae.roa (raw, json) Hash identifier: b3A28aB54FoNJ3OnPDUc/r5NLKSHVZY4xuGmCAuHgjo= Subject key identifier: C9:C7:39:71:60:95:B3:08:AA:36:C8:8A:1B:56:71:B0:B6:8B:11:DC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584C42DBE9FA46B6B9493F2EE4C0 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87874dd1-a8ff-3986-a37d-73a261d4e6ae.roa Signing time: Sun 21 Dec 2025 14:00:40 +0000 ROA not before: Sun 21 Dec 2025 14:00:40 +0000 ROA not after: Sat 21 Mar 2026 13:00:40 +0000 asID: 30036 IP address blocks: 173.27.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:42:db:e9:fa:46:b6:b9:49:3f:2e:e4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Dec 21 14:00:40 2025 GMT Not After : Mar 21 13:00:40 2026 GMT Subject: CN=af3c5028-7cfb-45d3-a87d-8cb9880cc27f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:14:55:b6:b5:78:45:b3:fc:e8:cf:70:0b:5a: db:58:70:90:a2:fd:b3:07:ca:ee:e7:ba:6f:1b:29: ed:60:c6:e8:db:52:0d:e5:78:61:e8:de:96:47:64: 87:58:df:2e:b2:3d:c3:58:c7:52:9c:c6:82:15:15: 3d:75:ad:91:5a:ba:77:2e:2a:b9:df:df:f2:9f:ab: db:b2:45:af:ce:69:b8:c6:dd:e0:8b:70:e0:6a:28: 61:0c:f0:a2:85:a1:b9:eb:e8:19:20:41:b5:99:80: 42:e3:29:5f:67:4c:a7:ea:c0:45:af:3d:b7:93:0b: 93:ce:83:e3:31:bb:46:8e:eb:24:0e:c1:a3:5a:00: 98:06:3d:6d:60:1f:34:a0:da:d4:87:5d:87:ec:79: 77:62:de:da:6b:76:4d:8f:07:a3:c5:09:3d:7c:51: 63:4b:e9:1b:c3:86:fa:29:4c:eb:57:b6:bb:e4:b5: 83:c7:d5:ea:b8:da:55:a1:a6:d5:2d:c8:42:cc:aa: 20:55:9c:78:12:5c:b0:33:73:9f:79:ca:ed:bb:f2: 41:ce:db:72:ba:26:4d:9f:2a:19:3b:09:47:bd:89: f8:5a:5d:ec:fb:8f:82:73:cf:c3:06:f8:30:4f:6e: 0b:a9:86:22:26:c8:2d:6b:bc:a7:30:d6:14:60:b8: 4f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C7:39:71:60:95:B3:08:AA:36:C8:8A:1B:56:71:B0:B6:8B:11:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/87874dd1-a8ff-3986-a37d-73a261d4e6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9c:be:49:04:6e:b1:65:51:c4:4d:20:75:12:be:5f:f3:7e: 74:05:14:fb:9d:1b:90:e9:a7:ba:66:41:bc:8c:d2:5e:a7:29: d0:fb:98:7d:bb:3e:06:7a:6b:84:e9:17:9d:06:cc:77:55:7f: b4:8a:03:7f:a0:bb:02:f2:9c:a8:35:8b:44:e5:d1:f0:45:67: e6:fb:48:74:fe:ed:69:c0:fe:73:e5:cb:38:92:3e:a7:24:02: fc:d0:63:b1:bb:06:57:46:af:1d:b9:21:0f:af:a8:e0:12:c8: 8c:b6:af:56:9a:82:6b:a4:70:d2:70:0d:b4:d8:89:1a:c2:5a: f4:5d:71:da:09:ff:62:77:63:ae:82:2d:7d:74:b1:08:8b:81: 9b:69:86:ea:52:15:cf:23:c5:94:6b:01:ff:2b:ba:fe:1c:c9: ed:56:e8:b5:aa:45:d7:42:86:0f:06:1d:e1:75:af:2e:c8:b0: cb:96:70:e0:d3:46:56:fa:d9:da:c5:27:58:ff:23:d1:7d:ca: 79:7e:93:42:b9:76:fe:14:ba:30:12:e2:96:d7:80:b5:2e:ff: bb:8d:03:e6:7d:b7:59:16:c7:e7:b8:b3:17:f8:a2:07:fb:71: 12:88:de:f0:38:12:67:a4:48:c2:ce:5e:b3:01:90:7a:e6:22: 39:f6:6b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExC2+n6Rra5ST8u5MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTIyMTE0MDA0MFoXDTI2MDMyMTEzMDA0MFowLzEtMCsGA1UEAxMk YWYzYzUwMjgtN2NmYi00NWQzLWE4N2QtOGNiOTg4MGNjMjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixRVtrV4RbP86M9wC1rbWHCQov2zB8ru57pv GyntYMbo21IN5Xhh6N6WR2SHWN8usj3DWMdSnMaCFRU9da2RWrp3Liq539/yn6vb skWvzmm4xt3gi3DgaihhDPCihaG56+gZIEG1mYBC4ylfZ0yn6sBFrz23kwuTzoPj MbtGjuskDsGjWgCYBj1tYB80oNrUh12H7Hl3Yt7aa3ZNjwejxQk9fFFjS+kbw4b6 KUzrV7a75LWDx9XquNpVoabVLchCzKogVZx4ElywM3Ofecrtu/JBzttyuiZNnyoZ OwlHvYn4Wl3s+4+Cc8/DBvgwT24LqYYiJsgta7ynMNYUYLhPgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMnHOXFglbMIqjbIihtWcbC2ixHcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODc4NzRkZDEtYThmZi0z OTg2LWEzN2QtNzNhMjYxZDRlNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrRuwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmcvkkEbrFlUcRNIHUSvl/zfnQFFPudG5Dpp7pmQbyM0l6nKdD7mH27 PgZ6a4TpF50GzHdVf7SKA3+guwLynKg1i0Tl0fBFZ+b7SHT+7WnA/nPlyziSPqck AvzQY7G7BldGrx25IQ+vqOASyIy2r1aagmukcNJwDbTYiRrCWvRdcdoJ/2J3Y66C LX10sQiLgZtphupSFc8jxZRrAf8ruv4cye1W6LWqRddChg8GHeF1ry7IsMuWcODT Rlb62drFJ1j/I9F9ynl+k0K5dv4UujAS4pbXgLUu/7uNA+Z9t1kWx+e4sxf4ogf7 cRKI3vA4EmekSMLOXrMBkHrmIjn2a+k= -----END CERTIFICATE-----Generated at Sun Mar 1 22:51:32 2026 by rpki-client