$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a1a6c9b-5b19-359d-8bed-d12c2d5ef655.roa File: 2a1a6c9b-5b19-359d-8bed-d12c2d5ef655.roa (raw, json) Hash identifier: QzS8dJLgaFHKTdo0rde0Ws6gIfvqtzVBCRqi0htuwOo= Subject key identifier: A2:C6:1B:91:38:EB:AA:61:F9:91:65:D3:31:8E:28:F9:A1:32:21:24 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584F331D17B3230E0C6FEA015100 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a1a6c9b-5b19-359d-8bed-d12c2d5ef655.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 19905 IP address blocks: 173.27.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:17:b3:23:0e:0c:6f:ea:01:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=7e4b0ad2-c673-4087-921b-9f6acd3e4355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ca:02:c3:11:d9:97:dc:b3:42:93:87:7a:36: b9:43:f3:46:c5:ab:97:3c:6f:f3:19:82:14:ee:ab: 61:36:0a:f4:ca:7a:93:16:6a:2e:f1:c4:68:6d:7c: aa:06:04:c9:b9:34:14:38:cb:c8:32:f7:1d:14:f2: a5:e5:80:39:42:eb:04:b5:3e:50:31:0e:f2:38:67: 9e:47:42:5e:5e:4e:eb:72:ff:28:97:e6:12:c3:b0: dd:b1:c9:cd:5e:37:cd:ea:87:dd:9a:b1:9a:84:3f: a9:27:c9:8d:95:4f:78:18:67:b0:45:5a:78:0c:68: 9a:0b:ee:76:cf:8b:1a:09:80:0d:8c:5f:58:44:15: 36:a5:da:5f:6f:58:21:0d:87:90:8e:6d:c0:b7:7e: 7a:e8:65:a5:20:72:0f:28:46:ca:9b:07:ff:e4:49: e1:3f:e6:1e:ea:9f:b3:f3:25:8d:96:fc:2c:18:bf: 41:fa:9e:11:28:4b:72:40:1e:4b:0e:2d:8a:9a:e6: 15:4a:07:0a:ce:f7:f2:09:e8:18:2c:c4:e5:3d:a5: 01:24:8e:bc:c9:0d:91:e1:fa:93:b0:b7:76:26:12: b5:41:34:1e:ca:f0:99:28:f2:a7:3c:2c:ee:49:37: 4f:81:00:79:a4:57:1a:26:6a:ab:a9:50:04:26:f8: b6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:C6:1B:91:38:EB:AA:61:F9:91:65:D3:31:8E:28:F9:A1:32:21:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/2a1a6c9b-5b19-359d-8bed-d12c2d5ef655.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.27.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:4e:0d:e6:32:60:9a:f3:ef:5d:d3:f1:2c:a4:b9:f3:d9:f9: a3:cb:99:d2:46:7d:ce:82:f1:4c:23:4d:f0:d4:31:ec:26:09: 7f:36:48:4b:a1:1c:09:06:e8:e2:62:37:1f:2a:4d:ae:67:2a: 1e:07:02:8e:27:24:81:3b:87:85:45:f6:be:ee:ea:93:d0:db: 79:bb:8a:8a:9e:ba:89:3a:18:46:93:18:7d:e0:17:41:0f:9d: 7a:22:74:f2:4a:0a:32:c5:06:ca:75:cb:b6:72:a0:78:54:b1: f5:68:63:34:66:7c:7f:a8:64:c8:78:03:6d:e1:a0:9e:30:20: 84:bd:10:a9:c7:e4:7c:03:ff:14:2d:48:a1:12:ef:e1:26:db: 2a:c6:24:11:6a:05:a8:ef:c6:bb:3f:e7:a2:76:fe:fc:b6:e8: 4c:66:42:14:6b:a4:1c:e5:59:36:f7:06:21:e2:05:4d:f0:2e: 13:27:00:a8:5b:ce:1d:59:d6:2d:c4:24:71:95:85:1c:60:fe: 43:56:a1:3e:06:d8:80:97:83:a2:41:73:91:0e:73:78:50:ab: 47:04:34:e0:83:20:b4:1b:ea:02:70:ef:88:8d:9f:d7:2e:3e: ff:70:41:1b:c8:ad:e4:d5:28:9d:bf:ea:25:a7:23:20:95:f6: b2:d6:59:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHRezIw4Mb+oBUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk N2U0YjBhZDItYzY3My00MDg3LTkyMWItOWY2YWNkM2U0MzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcoCwxHZl9yzQpOHeja5Q/NGxauXPG/zGYIU 7qthNgr0ynqTFmou8cRobXyqBgTJuTQUOMvIMvcdFPKl5YA5QusEtT5QMQ7yOGee R0JeXk7rcv8ol+YSw7DdscnNXjfN6ofdmrGahD+pJ8mNlU94GGewRVp4DGiaC+52 z4saCYANjF9YRBU2pdpfb1ghDYeQjm3At3566GWlIHIPKEbKmwf/5EnhP+Ye6p+z 8yWNlvwsGL9B+p4RKEtyQB5LDi2KmuYVSgcKzvfyCegYLMTlPaUBJI68yQ2R4fqT sLd2JhK1QTQeyvCZKPKnPCzuSTdPgQB5pFcaJmqrqVAEJvi2UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKLGG5E466ph+ZFl0zGOKPmhMiEkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMmExYTZjOWItNWIxOS0z NTlkLThiZWQtZDEyYzJkNWVmNjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArRsFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNODeYyYJrz713T8SykufPZ+aPLmdJGfc6C8UwjTfDUMewmCX82SEuh HAkG6OJiNx8qTa5nKh4HAo4nJIE7h4VF9r7u6pPQ23m7ioqeuok6GEaTGH3gF0EP nXoidPJKCjLFBsp1y7ZyoHhUsfVoYzRmfH+oZMh4A23hoJ4wIIS9EKnH5HwD/xQt SKES7+Em2yrGJBFqBajvxrs/56J2/vy26ExmQhRrpBzlWTb3BiHiBU3wLhMnAKhb zh1Z1i3EJHGVhRxg/kNWoT4G2ICXg6JBc5EOc3hQq0cENOCDILQb6gJw74iNn9cu Pv9wQRvIreTVKJ2/6iWnIyCV9rLWWRM= -----END CERTIFICATE-----Generated at Wed Sep 23 18:23:28 2026 by rpki-client