$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa File: af609f70-5354-323b-9ace-22f38e8708a1.roa (raw, json) Hash identifier: roh01KCz156tWpo/vzuZS05W3zxkl8jHetM8qeZoufU= Subject key identifier: 8D:3A:50:78:27:24:2F:1D:51:1F:11:6E:B3:83:CE:7F:13:B6:F8:DA Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B68FC9887EB703E8F44942920 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa Signing time: Sat 04 Oct 2025 13:00:40 +0000 ROA not before: Sat 04 Oct 2025 13:00:40 +0000 ROA not after: Fri 02 Jan 2026 14:00:40 +0000 asID: 30036 IP address blocks: 173.27.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:68:fc:98:87:eb:70:3e:8f:44:94:29:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 4 13:00:40 2025 GMT Not After : Jan 2 14:00:40 2026 GMT Subject: CN=70b2e7b4-7386-41c7-8385-a3b68fcc8adf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:7d:93:11:5f:55:57:54:d5:ce:46:90:e0: 02:cf:29:8b:41:21:1f:e5:23:9d:65:d7:6e:bd:2b: 80:2d:b1:42:60:25:b6:12:1f:ac:09:0a:8d:f2:1f: f2:36:a2:b9:95:de:c5:09:ad:cd:10:00:37:42:91: f1:37:d4:6d:9c:93:53:57:c1:66:84:c8:c4:64:8c: ac:be:12:61:4c:5f:53:6d:ac:92:44:c1:9b:34:2d: db:bc:31:c0:e7:2b:ac:52:11:13:3b:74:61:ed:56: 0b:7d:47:62:ef:82:0a:1a:d1:c6:0a:98:f7:47:7f: 8d:0a:e1:dc:34:db:3a:53:ee:81:4c:49:4b:0b:86: 00:8c:aa:2b:84:0a:f2:0f:17:78:7a:2f:7d:28:16: f4:8a:ff:ac:a4:b3:c7:1d:e7:1e:72:7f:9e:b5:83: e3:d5:23:88:fb:35:3a:2f:0c:56:09:91:45:3b:c3: c3:5a:78:2e:57:b5:8c:6c:40:4b:1b:f1:a4:24:fb: 7d:49:3d:ab:12:1c:63:0a:3f:0c:89:75:97:a7:99: 21:5c:7c:dd:e5:7e:3f:63:30:1f:7d:c9:d3:61:0a: e7:07:10:87:b5:c4:8e:46:b7:a7:f5:5a:8a:df:a3: 8d:99:30:7f:e8:6b:46:74:2d:fd:36:9b:c8:a6:24: ce:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3A:50:78:27:24:2F:1D:51:1F:11:6E:B3:83:CE:7F:13:B6:F8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af609f70-5354-323b-9ace-22f38e8708a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:d8:0d:58:54:32:bb:5e:88:20:73:0e:18:e0:cd:93:bc:91: e1:91:d3:13:6e:68:04:54:a6:90:21:0d:3b:5b:65:19:26:00: b5:be:2f:6a:81:91:44:b8:2b:76:34:4f:ce:c2:1e:1e:e1:65: e5:03:19:a6:34:71:04:58:cf:1e:03:e7:c1:60:54:28:09:b4: 29:f5:03:a6:cd:28:3b:f7:9d:8b:13:db:f9:9e:5e:ac:41:6b: 10:51:64:f1:68:86:08:ce:ac:77:f9:23:22:fc:3a:b0:ff:68: 2f:7d:8a:a7:45:58:3b:4f:b6:f9:e7:f2:90:ab:df:03:3a:04: 0a:f1:11:cb:39:3b:fe:56:c4:3e:16:97:3b:19:e0:88:f2:e9: 71:51:98:a6:1a:0c:20:7d:6b:15:49:08:5d:b0:a4:01:18:57: 3a:c7:a0:d5:16:b1:0a:28:d3:c0:d4:48:9c:01:aa:bc:74:b0: fb:8f:8a:51:66:d5:f4:e3:bc:0c:62:d3:8f:0e:84:6a:81:c0: 30:d4:d6:4e:9b:da:6f:7a:eb:34:e6:b8:7d:7a:02:2a:a9:69: ff:ec:d9:bf:dd:2f:cc:35:ff:df:58:d2:a9:46:53:5d:6b:46: 52:25:80:be:a3:01:bb:e1:07:dd:4f:5c:00:d9:33:ad:81:6d: 81:88:45:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEto/JiH63A+j0SUKSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwNDEzMDA0MFoXDTI2MDEwMjE0MDA0MFowLzEtMCsGA1UEAxMk NzBiMmU3YjQtNzM4Ni00MWM3LTgzODUtYTNiNjhmY2M4YWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcZ9kxFfVVdU1c5GkOACzymLQSEf5SOdZddu vSuALbFCYCW2Eh+sCQqN8h/yNqK5ld7FCa3NEAA3QpHxN9RtnJNTV8FmhMjEZIys vhJhTF9TbaySRMGbNC3bvDHA5yusUhETO3Rh7VYLfUdi74IKGtHGCpj3R3+NCuHc NNs6U+6BTElLC4YAjKorhAryDxd4ei99KBb0iv+spLPHHececn+etYPj1SOI+zU6 LwxWCZFFO8PDWnguV7WMbEBLG/GkJPt9ST2rEhxjCj8MiXWXp5khXHzd5X4/YzAf fcnTYQrnBxCHtcSORren9VqK36ONmTB/6GtGdC39NpvIpiTOTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI06UHgnJC8dUR8RbrODzn8TtvjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWY2MDlmNzAtNTM1NC0z MjNiLTlhY2UtMjJmMzhlODcwOGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvYDVhUMrteiCBzDhjgzZO8keGR0xNuaARUppAhDTtbZRkmALW+L2qB kUS4K3Y0T87CHh7hZeUDGaY0cQRYzx4D58FgVCgJtCn1A6bNKDv3nYsT2/meXqxB axBRZPFohgjOrHf5IyL8OrD/aC99iqdFWDtPtvnn8pCr3wM6BArxEcs5O/5WxD4W lzsZ4Ijy6XFRmKYaDCB9axVJCF2wpAEYVzrHoNUWsQoo08DUSJwBqrx0sPuPilFm 1fTjvAxi048OhGqBwDDU1k6b2m966zTmuH16Aiqpaf/s2b/dL8w1/99Y0qlGU11r RlIlgL6jAbvhB91PXADZM62BbYGIRU0= -----END CERTIFICATE-----Generated at Wed Nov 5 04:18:14 2025 by rpki-client