$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be34aeab-23a3-3a38-81f5-3763967ee6f6.roa File: be34aeab-23a3-3a38-81f5-3763967ee6f6.roa (raw, json) Hash identifier: EBx1Jzcpyvw/zTmHz5kgrCI2l6A1uHCZTlrpwRTZcNw= Subject key identifier: 38:36:BE:C6:77:F8:BB:0D:0D:A7:F8:3F:1E:C9:C7:7B:B8:2E:42:11 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B56D729C34C84B56F0BB89D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be34aeab-23a3-3a38-81f5-3763967ee6f6.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 30036 IP address blocks: 173.27.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:29:c3:4c:84:b5:6f:0b:b8:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=5b510f25-63ce-47a6-9e00-37adcff32b62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:81:e1:67:bf:8f:81:d6:c4:48:32:12:35:0b: 5f:d1:bc:38:32:63:18:02:13:12:07:3c:6b:38:7e: a9:67:2a:82:ba:86:f8:54:b0:24:ba:e6:38:9e:2c: 81:e7:79:f2:a3:12:53:75:7b:8f:7e:44:f9:e3:a4: 28:f0:ab:71:9d:1e:d0:77:31:8f:7a:9b:6b:ae:de: bb:68:eb:89:3a:36:22:0c:be:29:cb:e1:a3:24:82: 67:d1:17:3c:e7:10:3d:97:27:04:04:a5:85:da:f4: eb:b7:3e:9a:72:ae:7a:d1:94:ca:6f:1e:7c:7d:fa: 49:f2:1f:52:0d:f8:13:f0:e8:79:53:ba:42:23:ca: 7c:28:8d:97:64:89:59:22:26:52:3c:a7:ad:08:60: 46:a6:d9:f0:b6:4e:2c:12:11:47:3b:1b:eb:fd:55: 7a:a8:aa:5b:aa:27:cf:34:e9:4d:c7:56:f0:d9:80: b3:88:5d:52:2f:62:a3:c8:a7:d4:4a:e7:e5:11:a0: 6e:9a:1d:01:c5:c0:48:04:df:5a:d0:f5:77:64:90: eb:35:29:79:3c:a8:12:92:35:27:fa:19:fc:0f:04: 74:92:b8:bd:f3:c3:d5:ba:6c:51:c3:48:38:a2:76: 05:58:12:60:6c:2a:cc:31:c1:96:7d:c9:52:5f:0c: e5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:36:BE:C6:77:F8:BB:0D:0D:A7:F8:3F:1E:C9:C7:7B:B8:2E:42:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/be34aeab-23a3-3a38-81f5-3763967ee6f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:63:45:f7:35:52:ae:db:18:9c:0c:4f:44:95:37:50:dc:e3: 82:df:bf:8d:70:4b:92:42:22:f9:02:a7:24:c6:f5:1e:db:2c: 10:55:8e:dc:2b:ed:30:81:65:a6:e5:32:85:82:6f:ba:a1:5c: 21:f1:83:e3:7e:e3:b8:0b:0d:6d:8e:c0:c7:cd:2d:b2:50:2a: 8c:16:a1:65:22:1f:ca:bd:dd:97:65:34:b3:cd:47:1a:e7:5b: e2:45:e2:64:82:aa:0c:ca:b7:8e:92:c3:f2:57:e6:9d:a8:e1: e2:4c:51:b9:e5:39:c0:f2:21:7c:fc:0c:5d:74:f9:7c:97:17: 77:98:47:b9:81:9c:20:41:a3:16:fc:5e:d2:34:8c:3c:ed:29: 76:4d:e8:7b:06:f4:e0:87:9b:69:3a:12:75:83:39:f6:6b:79: fa:05:05:5c:70:b9:e9:54:38:84:aa:7e:95:67:dc:68:3a:d7: 35:10:8a:e6:b2:a4:89:49:06:28:83:6a:50:42:a3:c0:46:1b: 11:46:bf:91:91:18:81:72:30:ed:75:0c:ed:4f:19:64:5c:a4: 1a:59:15:8a:e9:db:2f:a0:2d:a8:90:92:a9:7e:28:8d:cb:33: 87:8d:52:67:f6:83:35:d1:a2:73:de:49:64:dd:cb:15:3f:2b: 0e:95:4b:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1ynDTIS1bwu4nQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NWI1MTBmMjUtNjNjZS00N2E2LTllMDAtMzdhZGNmZjMyYjYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioHhZ7+PgdbESDISNQtf0bw4MmMYAhMSBzxr OH6pZyqCuob4VLAkuuY4niyB53nyoxJTdXuPfkT546Qo8KtxnR7QdzGPeptrrt67 aOuJOjYiDL4py+GjJIJn0Rc85xA9lycEBKWF2vTrtz6acq560ZTKbx58ffpJ8h9S DfgT8Oh5U7pCI8p8KI2XZIlZIiZSPKetCGBGptnwtk4sEhFHOxvr/VV6qKpbqifP NOlNx1bw2YCziF1SL2KjyKfUSuflEaBumh0BxcBIBN9a0PV3ZJDrNSl5PKgSkjUn +hn8DwR0kri988PVumxRw0g4onYFWBJgbCrMMcGWfclSXwzlrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDg2vsZ3+LsNDaf4Px7Jx3u4LkIRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYmUzNGFlYWItMjNhMy0z YTM4LTgxZjUtMzc2Mzk2N2VlNmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRtBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5jRfc1Uq7bGJwMT0SVN1Dc44Lfv41wS5JCIvkCpyTG9R7bLBBVjtwr 7TCBZablMoWCb7qhXCHxg+N+47gLDW2OwMfNLbJQKowWoWUiH8q93ZdlNLPNRxrn W+JF4mSCqgzKt46Sw/JX5p2o4eJMUbnlOcDyIXz8DF10+XyXF3eYR7mBnCBBoxb8 XtI0jDztKXZN6HsG9OCHm2k6EnWDOfZrefoFBVxwuelUOISqfpVn3Gg61zUQiuay pIlJBiiDalBCo8BGGxFGv5GRGIFyMO11DO1PGWRcpBpZFYrp2y+gLaiQkql+KI3L M4eNUmf2gzXRonPeSWTdyxU/Kw6VS+Y= -----END CERTIFICATE-----Generated at Wed Nov 5 02:43:20 2025 by rpki-client