$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa File: af609f70-5354-323b-9ace-22f38e8708a1.roa (raw, json) Hash identifier: RCwkvSFcegwx5MMOnIQXtzN++DgrZe4jesdDgJ8KP6A= Subject key identifier: 78:48:65:40:3D:EE:83:EC:F9:53:F5:78:BB:2E:B2:C5:AD:B8:5C:3B Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A88409B66B28225DBB8727140 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa Signing time: Wed 16 Jul 2025 01:00:49 +0000 ROA not before: Wed 16 Jul 2025 01:00:49 +0000 ROA not after: Tue 14 Oct 2025 01:00:49 +0000 asID: 30036 IP address blocks: 173.27.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:88:40:9b:66:b2:82:25:db:b8:72:71:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 16 01:00:49 2025 GMT Not After : Oct 14 01:00:49 2025 GMT Subject: CN=775dc7da-dcaf-4f99-8aa9-11fe4eabd782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:85:ff:84:4d:d9:07:73:bd:90:2f:d6:a9:2f: 60:36:ae:5b:c6:3f:b5:ee:8c:d0:d1:e0:3d:ea:5d: 3a:38:fb:6b:46:93:26:08:a7:50:5c:6a:8a:3a:3e: c6:b4:82:80:d9:6a:24:1b:92:4f:86:bf:85:ff:58: 93:c7:97:76:e8:c8:1e:4a:77:d3:d9:84:40:06:fb: 72:38:f1:67:8a:58:ab:f6:9b:c6:fa:72:9d:33:43: e9:6c:a6:ba:ac:38:97:fd:50:8f:f8:bd:a5:44:06: 3e:c4:c7:ad:81:d2:be:41:12:2c:d7:51:c4:78:42: 8c:16:8b:2e:8f:8a:cf:c2:a7:a8:54:f3:5f:bb:57: 09:e0:8f:b9:33:cf:a6:ee:b5:9e:a4:79:14:28:04: e2:da:94:e6:a4:72:9b:5d:6f:02:a9:fd:c8:90:f7: 22:fd:dd:d5:86:e9:92:9d:08:11:37:e9:ef:0b:72: 17:d8:91:8e:6f:74:ae:2e:f4:1a:6e:5a:a9:c8:8d: f1:69:fb:05:e8:40:ea:97:c4:42:34:bf:8c:20:12: f1:d4:59:a8:bf:8b:4b:e8:bb:9d:63:29:3d:27:91: a4:62:cd:54:76:dc:70:04:df:e3:45:fe:0a:1f:ee: 4c:9f:21:ca:d8:01:eb:ba:8f:a0:4e:c7:68:1a:72: 80:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:48:65:40:3D:EE:83:EC:F9:53:F5:78:BB:2E:B2:C5:AD:B8:5C:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ae:5b:33:d4:f5:e4:cc:2e:7a:bf:ab:cb:14:aa:03:54:a0: 7c:65:84:41:f4:7c:3e:5c:25:b5:56:e2:df:55:de:72:40:da: 9f:9c:e0:45:a4:75:f5:30:d1:d9:8f:f7:2d:f7:65:77:ea:db: 55:02:7e:98:03:16:29:11:b1:40:60:e1:dc:42:2a:49:79:3b: ae:52:48:25:58:42:cb:90:15:39:9a:6a:22:87:61:ea:f8:d0: f2:40:8c:b7:6c:5f:79:69:b0:a0:ba:84:c4:28:b5:4e:89:cc: 5d:8d:27:f0:3e:4a:91:f2:00:a4:ce:1d:1a:91:6e:10:a4:07: 88:d5:58:e7:9c:23:f5:7f:6a:c9:34:98:9e:76:53:0b:d9:3c: db:0a:54:c7:a4:20:39:7e:eb:95:d5:e4:06:dc:d3:69:87:0f: 6a:98:14:e5:7d:50:9c:93:6d:40:97:68:ac:4a:1e:0c:75:5f: c1:8d:2a:c3:ed:93:fb:e3:e3:44:ce:92:ec:fc:f2:66:23:06: 44:f2:f1:39:f6:27:26:6b:03:e5:62:e0:9e:9e:45:a7:d5:7a: 11:de:40:33:74:21:5e:10:39:70:bf:86:03:79:42:1a:25:b6: 61:04:f4:97:66:b3:3f:b1:8f:8a:35:3b:29:b2:00:34:82:d6: 8b:69:7b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJtmsoIl27hycUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk Nzc1ZGM3ZGEtZGNhZi00Zjk5LThhYTktMTFmZTRlYWJkNzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIX/hE3ZB3O9kC/WqS9gNq5bxj+17ozQ0eA9 6l06OPtrRpMmCKdQXGqKOj7GtIKA2WokG5JPhr+F/1iTx5d26MgeSnfT2YRABvty OPFnilir9pvG+nKdM0PpbKa6rDiX/VCP+L2lRAY+xMetgdK+QRIs11HEeEKMFosu j4rPwqeoVPNfu1cJ4I+5M8+m7rWepHkUKATi2pTmpHKbXW8Cqf3IkPci/d3VhumS nQgRN+nvC3IX2JGOb3SuLvQablqpyI3xafsF6EDql8RCNL+MIBLx1Fmov4tL6Lud Yyk9J5GkYs1UdtxwBN/jRf4KH+5MnyHK2AHruo+gTsdoGnKAswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhIZUA97oPs+VP1eLsussWtuFw7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWY2MDlmNzAtNTM1NC0z MjNiLTlhY2UtMjJmMzhlODcwOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEquWzPU9eTMLnq/q8sUqgNUoHxlhEH0fD5cJbVW4t9V3nJA2p+c4EWk dfUw0dmP9y33ZXfq21UCfpgDFikRsUBg4dxCKkl5O65SSCVYQsuQFTmaaiKHYer4 0PJAjLdsX3lpsKC6hMQotU6JzF2NJ/A+SpHyAKTOHRqRbhCkB4jVWOecI/V/ask0 mJ52UwvZPNsKVMekIDl+65XV5Abc02mHD2qYFOV9UJyTbUCXaKxKHgx1X8GNKsPt k/vj40TOkuz88mYjBkTy8Tn2JyZrA+Vi4J6eRafVehHeQDN0IV4QOXC/hgN5Qhol tmEE9Jdmsz+xj4o1OymyADSC1otpew4= -----END CERTIFICATE-----Generated at Tue Aug 5 23:03:08 2025 by rpki-client