$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89aab09e-5da5-381e-80e8-9dcf466ebfb8.roa File: 89aab09e-5da5-381e-80e8-9dcf466ebfb8.roa (raw, json) Hash identifier: ujltjIMZM5HZ2cZLXa4Kna117Rm23GtWZOA24oBflF0= Subject key identifier: B9:0E:5A:97:C9:AF:CC:D3:FD:16:C6:2D:FC:D7:11:30:69:82:FC:DC Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA502409526D99682F61E5F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89aab09e-5da5-381e-80e8-9dcf466ebfb8.roa Signing time: Sun 26 Oct 2025 01:00:31 +0000 ROA not before: Sun 26 Oct 2025 01:00:31 +0000 ROA not after: Sat 24 Jan 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.27.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a5:02:40:95:26:d9:96:82:f6:1e:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 26 01:00:31 2025 GMT Not After : Jan 24 02:00:31 2026 GMT Subject: CN=ff5bf90d-1f7c-4dce-bdb2-0ee4c5305a6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:36:b9:73:44:1c:e2:42:ae:a2:5f:db:fd:7d: 67:33:a7:fb:51:ce:7f:0f:34:78:d7:25:e1:04:45: b5:39:79:17:37:1d:14:c3:b2:9e:75:6e:f6:83:4c: a0:7e:c6:ce:37:7c:10:23:63:83:bb:27:3a:a1:a3: 1a:b6:9d:c9:cf:d7:b3:55:17:67:72:d4:a7:d5:63: 31:2e:35:b2:fe:d8:99:5a:89:78:36:49:0c:bd:03: 27:22:3f:00:7e:c6:5f:81:5f:50:ab:44:7d:bf:7e: 79:d3:9f:cd:e6:8b:e4:39:8e:3b:15:4a:90:18:43: f7:27:a7:44:70:13:e3:ea:e7:e8:b3:fb:f7:ec:57: 9d:38:2f:d5:25:ab:da:11:b3:7e:51:21:28:d9:b7: 53:c6:45:42:4e:aa:c4:2c:d8:e0:f5:5e:20:5d:7c: d7:25:0f:ae:01:f8:95:a9:90:89:90:2c:32:30:d8: 88:6d:b8:76:f5:36:d5:e6:0e:8d:5e:c7:cd:ee:c8: c3:ac:bb:82:ca:41:91:79:91:e2:a8:72:c9:05:98: 52:d4:9d:10:70:b1:66:89:1d:90:c1:90:23:a5:bc: e4:d4:24:f6:d3:ae:7d:9a:e3:42:de:10:d5:e9:3e: a6:37:79:6e:55:84:9c:47:65:08:87:db:ef:6f:35: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:5A:97:C9:AF:CC:D3:FD:16:C6:2D:FC:D7:11:30:69:82:FC:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/89aab09e-5da5-381e-80e8-9dcf466ebfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:82:90:7c:ee:f8:9c:05:9c:54:c3:4e:17:e7:3b:2a:fc:cd: de:45:05:da:0b:d0:49:ad:a3:f2:bb:a5:49:3b:58:20:3c:c5: a2:98:a4:0c:8a:e2:5e:1c:04:92:6b:92:4b:7a:79:6d:e0:31: 25:a8:a0:7e:2e:5d:84:3b:24:d0:b9:56:8f:cb:ea:07:5d:26: ed:8b:cc:18:f3:4d:cc:da:c3:fb:2a:35:4d:62:22:ab:99:0f: a2:66:fa:f6:46:8f:22:15:31:c7:ea:19:91:3e:41:83:33:d4: d9:23:0f:2f:48:8c:b6:00:be:2d:9a:3d:58:a7:fd:53:67:93: 8d:fd:a0:7d:2e:89:4a:c5:77:ec:5b:4e:50:1a:47:92:87:f8: 41:bf:b0:e6:40:09:a8:f4:28:a3:25:08:b8:0e:a4:f6:fc:d6: d0:17:ed:38:b8:64:c0:cf:52:1d:c5:ab:51:9f:32:66:82:8d: b8:c0:66:65:98:c8:ac:a9:6d:e8:26:25:c9:7f:14:5d:14:85: 60:1f:36:6b:d3:37:43:ea:d5:97:a6:b1:cd:29:8a:ae:51:e1: 77:d0:f2:b2:bd:75:2a:4e:4e:fe:54:93:53:c5:a4:73:9e:e3: 6b:9c:da:6e:d3:e3:1d:33:ff:81:7d:8a:af:29:69:e0:b3:d7: fc:5d:73:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEulAkCVJtmWgvYeXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNjAxMDAzMVoXDTI2MDEyNDAyMDAzMVowLzEtMCsGA1UEAxMk ZmY1YmY5MGQtMWY3Yy00ZGNlLWJkYjItMGVlNGM1MzA1YTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDa5c0Qc4kKuol/b/X1nM6f7Uc5/DzR41yXh BEW1OXkXNx0Uw7KedW72g0ygfsbON3wQI2ODuyc6oaMatp3Jz9ezVRdnctSn1WMx LjWy/tiZWol4NkkMvQMnIj8AfsZfgV9Qq0R9v35505/N5ovkOY47FUqQGEP3J6dE cBPj6ufos/v37FedOC/VJavaEbN+USEo2bdTxkVCTqrELNjg9V4gXXzXJQ+uAfiV qZCJkCwyMNiIbbh29TbV5g6NXsfN7sjDrLuCykGReZHiqHLJBZhS1J0QcLFmiR2Q wZAjpbzk1CT20659muNC3hDV6T6mN3luVYScR2UIh9vvbzU+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOWpfJr8zT/RbGLfzXETBpgvzcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvODlhYWIwOWUtNWRhNS0z ODFlLTgwZTgtOWRjZjQ2NmViZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRs4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6CkHzu+JwFnFTDThfnOyr8zd5FBdoL0Emto/K7pUk7WCA8xaKYpAyK 4l4cBJJrkkt6eW3gMSWooH4uXYQ7JNC5Vo/L6gddJu2LzBjzTczaw/sqNU1iIquZ D6Jm+vZGjyIVMcfqGZE+QYMz1NkjDy9IjLYAvi2aPVin/VNnk439oH0uiUrFd+xb TlAaR5KH+EG/sOZACaj0KKMlCLgOpPb81tAX7Ti4ZMDPUh3Fq1GfMmaCjbjAZmWY yKypbegmJcl/FF0UhWAfNmvTN0Pq1Zemsc0piq5R4XfQ8rK9dSpOTv5Uk1PFpHOe 42uc2m7T4x0z/4F9iq8paeCz1/xdc/A= -----END CERTIFICATE-----Generated at Tue Nov 4 16:54:03 2025 by rpki-client