$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa File: 3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa (raw, json) Hash identifier: goiWWVcgzUGhbxo2s5cMt2lAnW8ZCIdkUQMXnHAuUpA= Subject key identifier: AB:A9:52:5E:2C:7C:92:E4:94:9B:39:87:04:D3:1B:91:03:27:85:F4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772C5B358EBDA344FB7040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 23.27.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2c:5b:35:8e:bd:a3:44:fb:70:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=7f826ed6-22de-4c44-acd9-bc59f39bdb48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:23:93:c8:6a:85:19:da:6d:ce:ca:71:c4: 0f:d2:c6:f1:a4:6f:a1:99:3f:c1:93:83:2f:48:15: 63:ad:2d:a1:2d:9c:9c:2b:55:95:de:ba:f6:fb:e1: ac:86:fa:ea:90:2c:ea:19:68:21:a3:ca:3b:32:b1: 78:d6:28:7c:e9:d2:f5:81:92:b8:b1:01:f5:50:84: 61:39:cb:c0:1e:a5:f2:40:5f:19:76:8b:2f:85:c7: 48:0c:63:f6:a7:d6:67:c7:5d:f4:46:38:4d:53:2a: 18:aa:97:d5:7d:c6:e6:26:85:38:39:9b:48:86:a6: 24:26:87:f6:93:70:4c:00:2f:4c:b0:65:2a:f1:dc: 6f:ee:2a:fa:b8:82:9a:de:3b:18:45:8d:a5:7f:8b: 20:b3:5f:16:06:c4:98:1e:d9:64:dc:01:a0:10:61: cf:de:4d:d0:c1:dc:3b:a3:5c:a7:2c:dc:fd:7c:a2: 8a:2c:26:29:fa:97:44:26:62:78:5c:be:5c:6c:4f: 9c:ba:6a:39:3d:45:fe:fb:9f:bf:69:c4:c9:60:55: e7:e9:a8:38:44:60:06:f2:5a:40:4b:2d:eb:a3:93: ef:0b:bd:40:0c:ad:05:1c:4b:06:5d:16:d9:d3:c8: 6e:ae:3e:5f:c1:4a:df:8b:81:9d:c7:5b:52:43:be: 38:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:A9:52:5E:2C:7C:92:E4:94:9B:39:87:04:D3:1B:91:03:27:85:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:97:f4:76:d7:9c:c7:0d:63:c4:2c:2a:df:ee:aa:1e:9f:e7: 88:e1:e1:fa:1d:d7:f5:0a:8e:c8:70:3e:85:5a:33:82:9b:65: a1:32:75:06:8b:85:47:7e:74:69:ac:4a:e8:18:fc:ee:4c:fb: d7:27:ef:a9:b1:47:b3:91:2f:8c:e9:af:73:c4:24:6d:62:98: e8:d1:53:8c:21:cd:0c:b6:ab:be:3e:8d:0d:49:c9:17:73:26: 2b:01:c1:20:32:6f:f2:fd:9b:a8:9e:05:fc:f7:a8:23:0e:04: 0a:d1:0e:22:33:5f:e2:26:3f:b6:c0:a1:dc:07:a7:b5:a6:e5: 7e:d8:fe:e8:f9:e6:4b:3d:2f:38:9d:10:04:79:35:c1:70:f2: 45:06:f6:d5:2a:82:46:12:87:d9:9c:d5:9e:ae:09:19:08:3e: 06:2b:1d:95:55:28:52:b3:30:82:19:b7:56:cf:79:97:ee:fa: 02:d2:d4:07:72:cf:71:c4:fa:69:f5:c8:2a:12:36:a8:9f:b0: 4d:29:ce:51:4e:ec:0c:13:da:af:6b:15:99:19:3b:9f:67:4d: 67:4e:07:ae:93:2c:de:65:21:63:d7:f3:88:48:27:4d:2b:c0: 94:d6:e9:85:80:92:be:88:7e:22:b3:16:a5:ab:33:b8:21:3d: ee:47:94:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyxbNY69o0T7cEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk N2Y4MjZlZDYtMjJkZS00YzQ0LWFjZDktYmM1OWYzOWJkYjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSIjk8hqhRnabc7KccQP0sbxpG+hmT/Bk4Mv SBVjrS2hLZycK1WV3rr2++GshvrqkCzqGWgho8o7MrF41ih86dL1gZK4sQH1UIRh OcvAHqXyQF8ZdosvhcdIDGP2p9Znx130RjhNUyoYqpfVfcbmJoU4OZtIhqYkJof2 k3BMAC9MsGUq8dxv7ir6uIKa3jsYRY2lf4sgs18WBsSYHtlk3AGgEGHP3k3Qwdw7 o1ynLNz9fKKKLCYp+pdEJmJ4XL5cbE+cumo5PUX++5+/acTJYFXn6ag4RGAG8lpA Sy3ro5PvC71ADK0FHEsGXRbZ08hurj5fwUrfi4Gdx1tSQ7442wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKupUl4sfJLklJs5hwTTG5EDJ4X0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2UwOGRkM2QtYzk2OC0z NTYyLThiZDYtZGRjNTk3MWVmODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuX9HbXnMcNY8QsKt/uqh6f54jh4fod1/UKjshwPoVaM4KbZaEydQaL hUd+dGmsSugY/O5M+9cn76mxR7ORL4zpr3PEJG1imOjRU4whzQy2q74+jQ1JyRdz JisBwSAyb/L9m6ieBfz3qCMOBArRDiIzX+ImP7bAodwHp7Wm5X7Y/uj55ks9Lzid EAR5NcFw8kUG9tUqgkYSh9mc1Z6uCRkIPgYrHZVVKFKzMIIZt1bPeZfu+gLS1Ady z3HE+mn1yCoSNqifsE0pzlFO7AwT2q9rFZkZO59nTWdOB66TLN5lIWPX84hIJ00r wJTW6YWAkr6IfiKzFqWrM7ghPe5HlJo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:22 2025 by rpki-client