$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b576113f-a3a0-31be-b634-d806f9ece589.roa File: b576113f-a3a0-31be-b634-d806f9ece589.roa (raw, json) Hash identifier: zk2Md8G3/pHQ/UJZofOqd9l2wVvRTduYH/Cf8TsWFEY= Subject key identifier: 19:3A:2C:0A:BF:0B:78:EE:F1:23:0D:97:EE:77:12:AC:77:68:ED:05 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584A8412516BB63116724FC0C800 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b576113f-a3a0-31be-b634-d806f9ece589.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 30036 IP address blocks: 173.27.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:51:6b:b6:31:16:72:4f:c0:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=256ee868-2bb3-4b0d-a76b-3f7a7dcab1fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a6:dd:0f:fd:23:c7:d2:6a:31:c5:d8:8a:fc: b0:5d:c5:f4:3e:a1:d9:a8:18:ce:20:11:ae:9b:87: 69:67:9b:c5:91:1b:cc:c3:72:aa:14:d4:ed:91:2d: 52:6b:9b:d2:dd:1c:1d:de:46:56:a1:4b:03:02:a1: d1:d1:fe:61:61:6b:87:a4:38:cb:55:0e:c2:8d:a8: c7:27:c7:c9:1c:66:d9:fb:7d:2d:62:de:4d:9c:b7: d3:3c:db:fe:a3:77:6f:9e:df:67:11:dc:73:c2:9d: 0e:55:c8:75:19:f6:2a:64:4d:6d:f2:d3:e4:d1:35: 2e:2b:5f:0d:a5:6f:a6:99:87:7b:57:33:25:83:37: b5:73:3e:2d:cd:7d:12:a2:26:f3:cf:96:a9:47:79: b5:ae:61:fa:7f:c3:4c:e7:ab:77:0e:e5:28:88:f3: 2a:54:8b:cf:34:36:a8:74:fe:49:ba:da:af:ec:70: 35:12:b2:3c:ea:8a:db:a0:f1:26:e6:f7:23:5a:c6: 70:31:82:97:e4:e9:a8:68:95:73:4c:fc:c9:c4:21: 5d:d3:50:6f:7c:fb:fe:49:04:10:e0:30:38:fc:7e: a0:5e:05:48:ec:0f:f9:fa:a8:c8:61:a5:d5:2a:21: 99:ae:61:de:4e:d7:96:1a:72:50:3d:58:b8:fc:de: c0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3A:2C:0A:BF:0B:78:EE:F1:23:0D:97:EE:77:12:AC:77:68:ED:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/b576113f-a3a0-31be-b634-d806f9ece589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:aa:fc:45:e7:04:01:e7:1c:a3:be:f4:77:0b:7a:f1:44:97: 09:21:9e:4e:d2:28:b5:5b:66:58:a7:b1:56:b7:b9:61:17:64: da:e0:34:4f:76:2c:84:69:36:27:cb:2f:09:d5:25:bf:19:de: 69:a3:22:fb:ce:1f:d5:58:5b:49:07:e3:3e:95:a2:0f:f6:ed: 2d:40:74:0c:a9:67:d9:64:c2:88:eb:55:c5:44:55:58:91:c8: 8b:4b:6b:d0:aa:6f:33:4e:3d:c0:05:89:07:da:21:71:74:52: 20:8a:ec:e8:c5:ce:e2:21:81:b7:ce:a2:53:4a:d4:d6:e6:74: 5a:5e:3c:3c:fa:b7:25:0b:92:39:00:19:52:37:6a:cd:6f:88: 69:98:eb:b2:49:71:c3:a5:26:09:85:8d:f8:9f:da:43:db:38: c2:80:1a:48:ab:23:74:64:68:7c:48:7e:ec:35:eb:12:88:bc: 17:2f:52:f9:7c:43:f0:54:1a:31:9b:36:d6:38:c4:66:95:a7: 15:c6:2f:d0:75:93:43:6f:4f:d1:9e:3e:87:f2:9e:a3:a5:21: 68:17:2b:55:15:aa:97:71:4d:20:b3:ea:d2:c4:d2:6b:3b:c8: 0c:32:5f:17:ea:23:82:2f:70:ad:1a:5c:9c:72:d8:20:46:98: 83:e3:f7:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEElFrtjEWck/AyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjU2ZWU4NjgtMmJiMy00YjBkLWE3NmItM2Y3YTdkY2FiMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6bdD/0jx9JqMcXYivywXcX0PqHZqBjOIBGu m4dpZ5vFkRvMw3KqFNTtkS1Sa5vS3Rwd3kZWoUsDAqHR0f5hYWuHpDjLVQ7CjajH J8fJHGbZ+30tYt5NnLfTPNv+o3dvnt9nEdxzwp0OVch1GfYqZE1t8tPk0TUuK18N pW+mmYd7VzMlgze1cz4tzX0Soibzz5apR3m1rmH6f8NM56t3DuUoiPMqVIvPNDao dP5Jutqv7HA1ErI86orboPEm5vcjWsZwMYKX5OmoaJVzTPzJxCFd01BvfPv+SQQQ 4DA4/H6gXgVI7A/5+qjIYaXVKiGZrmHeTteWGnJQPVi4/N7A3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBk6LAq/C3ju8SMNl+53Eqx3aO0FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYjU3NjExM2YtYTNhMC0z MWJlLWI2MzQtZDgwNmY5ZWNlNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmq/EXnBAHnHKO+9HcLevFElwkhnk7SKLVbZlinsVa3uWEXZNrgNE92 LIRpNifLLwnVJb8Z3mmjIvvOH9VYW0kH4z6Vog/27S1AdAypZ9lkwojrVcVEVViR yItLa9CqbzNOPcAFiQfaIXF0UiCK7OjFzuIhgbfOolNK1NbmdFpePDz6tyULkjkA GVI3as1viGmY67JJccOlJgmFjfif2kPbOMKAGkirI3RkaHxIfuw16xKIvBcvUvl8 Q/BUGjGbNtY4xGaVpxXGL9B1k0NvT9GePofynqOlIWgXK1UVqpdxTSCz6tLE0ms7 yAwyXxfqI4IvcK0aXJxy2CBGmIPj9yk= -----END CERTIFICATE-----Generated at Tue Aug 5 23:00:44 2025 by rpki-client