$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb940b8-2103-3662-bb3c-fc25c1e4124a.roa File: dfb940b8-2103-3662-bb3c-fc25c1e4124a.roa (raw, json) Hash identifier: pYlST4QDa1jTC1T7tLMqU2Vg8IUncvEuGnlaMU39Hoo= Subject key identifier: 65:74:65:52:DA:0B:60:2F:D4:B4:38:F9:BE:65:21:24:4B:23:87:72 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584BA7CD1C09896F21BCC72E3B80 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb940b8-2103-3662-bb3c-fc25c1e4124a.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 19905 IP address blocks: 173.27.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:1c:09:89:6f:21:bc:c7:2e:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=5c685dcf-cdff-4d08-b188-ecd3b2bb01f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f3:8d:ff:e4:a8:96:88:62:6b:f4:7e:15:1e: 2a:2c:8e:77:9a:dc:df:b5:a1:1f:a8:f6:5f:47:a2: 87:51:de:67:71:f7:38:36:3d:f9:35:25:87:3e:e3: ea:61:d7:fc:c9:27:4f:0d:41:a4:7b:11:79:c6:4e: 56:f5:af:d3:e4:a7:f4:87:b8:e8:e8:a5:a3:ae:4b: b2:64:d5:75:c5:cb:92:be:bd:3c:d0:fc:7d:ee:26: b4:9f:8a:35:e3:19:41:42:18:6c:1b:1b:35:2f:ba: 59:57:23:9d:79:7c:a6:54:92:b3:09:71:5e:6e:8d: e3:c2:55:83:a6:c0:12:30:44:ac:9d:ea:0e:88:60: da:c3:c1:31:0f:0f:f3:18:9a:78:62:bd:8f:0c:45: a9:01:48:00:6b:db:ed:a6:4d:40:60:58:2a:d3:b8: 6a:23:3a:a1:7e:d1:db:7b:c4:7d:73:2a:c4:33:d3: 26:1f:91:07:d1:ba:3f:ff:5e:a1:76:56:82:b2:9e: 91:16:40:32:a4:11:a6:77:28:9f:1e:85:fb:89:66: f5:a8:2a:50:21:51:11:d5:80:b2:54:1b:74:23:fd: 78:c7:87:95:a3:4d:0f:98:87:94:06:c2:e9:b5:c6: a0:78:31:78:8e:5c:a4:09:7d:65:20:de:f7:40:25: 5d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:74:65:52:DA:0B:60:2F:D4:B4:38:F9:BE:65:21:24:4B:23:87:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/dfb940b8-2103-3662-bb3c-fc25c1e4124a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8d:74:25:81:3b:f0:e2:f1:cc:28:dd:8d:63:7c:6a:b3:82: 5f:8c:25:a6:4b:14:ef:2f:c8:30:5c:e4:48:de:09:06:54:56: f1:51:e3:16:b0:35:83:f1:16:b1:ab:65:69:24:25:0e:85:44: 74:69:41:58:82:74:c6:78:f2:3a:4c:0b:9a:92:6c:d0:d5:51: 02:fd:02:e9:3e:53:c7:50:02:17:9f:4f:4d:4e:b5:34:cc:d3: 2d:d8:f8:c5:3a:2d:9e:7a:6b:dd:60:27:23:85:fd:7f:b6:ba: 7e:13:fb:1e:10:f7:10:c1:51:b6:df:c3:1c:28:7c:ba:6e:b1: d7:97:9d:e2:a0:8b:25:dc:a4:3f:fd:a0:7c:80:ee:47:72:91: d3:c6:25:74:3c:43:45:8a:74:ec:d1:da:c9:c1:f8:82:ae:c1: 05:a5:0b:e7:31:aa:da:ae:35:3c:f7:02:7e:d4:1b:20:76:c0: 3c:92:a0:17:2c:81:b7:f5:bf:04:c3:f0:30:0d:79:e3:18:11: fa:68:89:3a:20:b3:db:f0:49:dc:1a:dc:be:0c:3e:fb:63:08: 7a:c2:43:97:89:1c:70:ec:ce:e4:50:64:dc:11:6e:36:f0:2c: fa:72:f6:9f:8f:3e:2f:ae:43:01:b0:c0:cc:5e:0d:7c:5f:34: a2:19:21:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRwJiW8hvMcuO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk NWM2ODVkY2YtY2RmZi00ZDA4LWIxODgtZWNkM2IyYmIwMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfON/+Solohia/R+FR4qLI53mtzftaEfqPZf R6KHUd5ncfc4Nj35NSWHPuPqYdf8ySdPDUGkexF5xk5W9a/T5Kf0h7jo6KWjrkuy ZNV1xcuSvr080Px97ia0n4o14xlBQhhsGxs1L7pZVyOdeXymVJKzCXFebo3jwlWD psASMESsneoOiGDaw8ExDw/zGJp4Yr2PDEWpAUgAa9vtpk1AYFgq07hqIzqhftHb e8R9cyrEM9MmH5EH0bo//16hdlaCsp6RFkAypBGmdyifHoX7iWb1qCpQIVER1YCy VBt0I/14x4eVo00PmIeUBsLptcageDF4jlykCX1lIN73QCVd8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGV0ZVLaC2Av1LQ4+b5lISRLI4dyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGZiOTQwYjgtMjEwMy0z NjYyLWJiM2MtZmMyNWMxZTQxMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRs5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuNdCWBO/Di8cwo3Y1jfGqzgl+MJaZLFO8vyDBc5EjeCQZUVvFR4xaw NYPxFrGrZWkkJQ6FRHRpQViCdMZ48jpMC5qSbNDVUQL9Auk+U8dQAhefT01OtTTM 0y3Y+MU6LZ56a91gJyOF/X+2un4T+x4Q9xDBUbbfwxwofLpusdeXneKgiyXcpD/9 oHyA7kdykdPGJXQ8Q0WKdOzR2snB+IKuwQWlC+cxqtquNTz3An7UGyB2wDySoBcs gbf1vwTD8DANeeMYEfpoiTogs9vwSdwa3L4MPvtjCHrCQ5eJHHDszuRQZNwRbjbw LPpy9p+PPi+uQwGwwMxeDXxfNKIZIfs= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:48 2025 by rpki-client