$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3ef7df66-94b2-3a2d-860f-be895b43888e.roa File: 3ef7df66-94b2-3a2d-860f-be895b43888e.roa (raw, json) Hash identifier: SoMZNF/AA80zlTk16j3Z+PNlX4ym0kmeu0mN8hnJX2g= Subject key identifier: 60:EC:03:52:29:20:85:AA:C6:10:47:2C:33:49:2D:33:57:C5:2B:83 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584BB2F7AA24303E41343A4BFF00 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3ef7df66-94b2-3a2d-860f-be895b43888e.roa Signing time: Fri 31 Oct 2025 01:00:30 +0000 ROA not before: Fri 31 Oct 2025 01:00:30 +0000 ROA not after: Thu 29 Jan 2026 02:00:30 +0000 asID: 13984 IP address blocks: 8.34.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b2:f7:aa:24:30:3e:41:34:3a:4b:ff:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 31 01:00:30 2025 GMT Not After : Jan 29 02:00:30 2026 GMT Subject: CN=85b0129d-029e-4d71-9252-de0cd0b447ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:0f:a3:31:4d:ce:6d:a1:7c:d5:84:bd:19:ed: d6:d3:fe:dd:f7:61:bf:bb:7d:4e:35:d2:9f:8d:5b: dd:6d:4e:2c:d3:2d:1d:81:08:f1:ff:3a:99:e1:1e: 48:c7:6d:0f:9a:25:ac:a2:07:85:04:ae:40:e4:fa: 0b:b9:17:27:79:46:08:e2:12:1c:c1:ac:77:96:0e: 52:c6:f3:79:ec:7d:de:56:26:cf:2e:c1:dd:7e:4c: b8:38:e2:c8:c5:c7:db:99:73:72:d3:06:0d:c8:e6: 17:b3:f2:b1:40:18:3c:a7:91:a6:1b:85:fe:d6:f3: 7f:fb:28:6d:6d:3f:56:95:a2:bf:cd:61:10:59:47: e1:1b:b9:d5:b9:c0:8c:ec:73:bf:39:b6:cf:b6:97: 3d:2e:f9:c6:14:8b:99:05:19:eb:2f:33:b3:c5:08: 2f:ae:8d:ef:ae:0b:21:da:b5:12:2c:a0:42:c5:2f: f6:5c:13:38:83:46:dd:22:fd:08:89:c3:e1:c2:16: b3:c0:f7:1d:99:d4:83:7b:26:14:57:05:dc:2e:27: d7:eb:a3:49:93:8f:00:d2:e3:00:36:cf:fc:e9:31: 3d:5c:e8:a0:f6:1e:a7:00:8f:da:b1:05:38:39:c0: 35:7e:6a:d0:cd:8c:cf:ea:a9:b0:e8:cc:5a:aa:71: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:EC:03:52:29:20:85:AA:C6:10:47:2C:33:49:2D:33:57:C5:2B:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/3ef7df66-94b2-3a2d-860f-be895b43888e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 8.34.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:52:b3:25:4d:07:2f:5b:d7:23:13:b3:52:3a:ae:4f:d5:8a: 0e:43:d6:e0:52:1f:10:a1:b0:e9:c9:3b:40:18:68:ee:af:ba: 0d:06:36:77:71:79:93:cd:ad:7c:63:53:1a:93:84:fb:7e:4a: a9:fd:3c:5b:b3:c4:c7:09:50:b6:56:d7:86:ac:c8:16:2e:40: f6:71:d5:09:f1:87:28:76:0d:86:34:4e:fa:85:f1:63:28:11: da:41:bb:21:cd:1f:f9:be:c6:61:82:cd:bc:27:81:60:49:c8: 2e:82:d9:7a:0b:c0:a8:07:88:1d:b8:2c:a5:d9:3e:db:92:e5: 7b:bc:1b:ca:ae:7e:bc:f3:04:1f:1c:98:6f:0e:30:35:78:55: 23:5f:1f:4b:db:70:24:4d:d8:c4:45:ec:09:bb:5c:60:09:12: 5f:35:55:da:95:ea:0f:b5:a3:b6:6f:65:ac:b5:1a:16:20:71: 06:3d:5b:53:33:bd:9f:67:dc:3c:eb:f2:a6:70:f0:35:21:a6: d3:c4:4a:03:db:03:b1:82:25:08:f6:b8:06:3d:1b:27:8f:0b: 20:c6:40:af:94:dc:50:6c:ea:9f:92:a3:1f:67:2f:70:87:58: d8:fa:4b:57:08:ed:b1:97:46:be:ca:c1:6d:de:37:bd:95:94: 1c:b4:88:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuy96okMD5BNDpL/wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI1MTAzMTAxMDAzMFoXDTI2MDEyOTAyMDAzMFowLzEtMCsGA1UEAxMk ODViMDEyOWQtMDI5ZS00ZDcxLTkyNTItZGUwY2QwYjQ0N2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhA+jMU3ObaF81YS9Ge3W0/7d92G/u31ONdKf jVvdbU4s0y0dgQjx/zqZ4R5Ix20PmiWsogeFBK5A5PoLuRcneUYI4hIcwax3lg5S xvN57H3eVibPLsHdfky4OOLIxcfbmXNy0wYNyOYXs/KxQBg8p5GmG4X+1vN/+yht bT9WlaK/zWEQWUfhG7nVucCM7HO/ObbPtpc9LvnGFIuZBRnrLzOzxQgvro3vrgsh 2rUSLKBCxS/2XBM4g0bdIv0IicPhwhazwPcdmdSDeyYUVwXcLifX66NJk48A0uMA Ns/86TE9XOig9h6nAI/asQU4OcA1fmrQzYzP6qmw6MxaqnEjEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGDsA1IpIIWqxhBHLDNJLTNXxSuDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvM2VmN2RmNjYtOTRiMi0z YTJkLTg2MGYtYmU4OTViNDM4ODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQACCIbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBSsyVNBy9b1yMTs1I6rk/Vig5D1uBSHxChsOnJO0AYaO6vug0GNndx eZPNrXxjUxqThPt+Sqn9PFuzxMcJULZW14asyBYuQPZx1Qnxhyh2DYY0TvqF8WMo EdpBuyHNH/m+xmGCzbwngWBJyC6C2XoLwKgHiB24LKXZPtuS5Xu8G8qufrzzBB8c mG8OMDV4VSNfH0vbcCRN2MRF7Am7XGAJEl81VdqV6g+1o7ZvZay1GhYgcQY9W1Mz vZ9n3Dzr8qZw8DUhptPESgPbA7GCJQj2uAY9GyePCyDGQK+U3FBs6p+Sox9nL3CH WNj6S1cI7bGXRr7KwW3eN72VlBy0iOE= -----END CERTIFICATE-----Generated at Mon Nov 3 18:01:40 2025 by rpki-client