$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa File: 1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa (raw, json) Hash identifier: YkNlw0Dua0w9jHl1Oa+ZRrnHQwVsjf8sOjMjTsLTqcc= Subject key identifier: 05:14:98:68:90:41:B9:8D:0C:D3:4F:75:D9:CD:BB:32:14:51:D1:DF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B3DBA2C99F1F376239FD51580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 401152 IP address blocks: 23.27.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2c:99:f1:f3:76:23:9f:d5:15:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=ea819e51-6a6f-4e1c-85a4-8670c7ea1ba5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c1:56:16:55:bf:82:b8:fe:1c:f8:0b:be:58: 2a:b7:1d:ff:de:6e:5f:9e:8f:99:43:32:c6:4c:12: 8d:8c:ff:24:55:25:8b:92:4a:33:0a:89:98:c1:10: 46:c2:39:c3:6d:89:fa:50:15:c0:23:0e:3b:58:5d: 46:7c:64:3e:52:bd:02:8e:75:92:57:ba:b6:d2:00: 2f:89:81:00:6c:b6:8d:6e:44:d7:0d:05:0d:c6:04: a3:3f:95:61:61:a6:b4:ff:24:0d:f6:92:56:20:cf: 0c:b0:bd:64:5e:ee:fc:2a:2c:6c:28:e9:80:c7:df: 87:7a:ef:b2:ae:56:e6:86:b8:1b:b8:6d:a6:1f:16: 65:d8:84:6a:05:b0:fa:d0:11:17:fc:b9:92:c2:1c: 70:f9:37:bd:f1:b5:b5:e3:5b:e2:80:a0:64:e3:55: ad:ce:37:a2:37:86:36:48:0f:c1:c2:55:d5:43:b2: 1b:40:58:99:5b:fe:a5:6a:4c:b7:26:03:8d:96:68: 94:d9:3c:09:4b:ab:e6:33:c0:1b:fa:3c:7d:9c:a9: 15:3b:fc:68:2d:dc:dc:fc:ba:31:6c:d1:36:30:27: 73:40:35:d3:0c:c2:e2:5a:1a:85:5c:c8:fd:0d:af: 62:2d:73:a8:37:14:03:9c:76:ae:fe:03:90:1b:17: 9a:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:98:68:90:41:B9:8D:0C:D3:4F:75:D9:CD:BB:32:14:51:D1:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:4d:74:1f:d9:f6:a4:41:19:a6:ab:56:c8:9c:30:ac:10:76: d4:86:d8:17:5b:ab:fd:aa:a2:70:a2:4d:5d:45:29:55:e7:63: 9b:0b:0a:eb:89:75:9a:c2:12:9d:e4:23:4c:55:6c:42:53:3c: ac:49:da:da:46:d5:29:78:75:ad:cf:25:3f:04:bc:5e:67:fe: 95:54:be:91:34:4d:d7:48:cc:54:5e:30:b7:d0:48:24:11:c6: ae:82:80:be:77:a4:99:3e:9f:a6:42:2d:4d:de:5b:79:3b:1b: 20:6b:b0:90:d8:22:3e:ff:a9:1d:d9:c1:6c:91:30:79:20:52: 17:26:34:dd:a5:56:38:ae:8a:26:9d:26:5c:36:14:29:f6:2d: b9:ba:58:6d:4b:c2:43:1c:97:44:55:5b:d8:3e:4d:ad:86:0a: 53:95:ed:be:98:d1:0b:5f:2a:06:3d:8e:e1:2c:bd:fd:c8:9a: de:70:1e:e1:d6:bf:0d:30:66:7b:38:74:68:05:ec:51:03:7e: f9:15:00:73:68:8a:e3:89:39:89:39:3a:f0:6f:cd:05:9b:7f: cf:19:04:b0:9a:e1:9c:9f:33:eb:9b:14:7b:16:12:6f:98:ff: 8d:50:87:c4:e8:ed:da:8e:09:81:9b:bd:77:cd:86:6c:53:46: 85:30:02:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uiyZ8fN2I5/VFYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWE4MTllNTEtNmE2Zi00ZTFjLTg1YTQtODY3MGM3ZWExYmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscFWFlW/grj+HPgLvlgqtx3/3m5fno+ZQzLG TBKNjP8kVSWLkkozComYwRBGwjnDbYn6UBXAIw47WF1GfGQ+Ur0CjnWSV7q20gAv iYEAbLaNbkTXDQUNxgSjP5VhYaa0/yQN9pJWIM8MsL1kXu78KixsKOmAx9+Heu+y rlbmhrgbuG2mHxZl2IRqBbD60BEX/LmSwhxw+Te98bW141vigKBk41WtzjeiN4Y2 SA/BwlXVQ7IbQFiZW/6laky3JgONlmiU2TwJS6vmM8Ab+jx9nKkVO/xoLdzc/Lox bNE2MCdzQDXTDMLiWhqFXMj9Da9iLXOoNxQDnHau/gOQGxeaYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUUmGiQQbmNDNNPddnNuzIUUdHfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWE3YWExZTItMmFhZC0z NzM5LThhMzUtOWU5MWNkZjg1YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1NdB/Z9qRBGaarVsicMKwQdtSG2Bdbq/2qonCiTV1FKVXnY5sLCuuJ dZrCEp3kI0xVbEJTPKxJ2tpG1Sl4da3PJT8EvF5n/pVUvpE0TddIzFReMLfQSCQR xq6CgL53pJk+n6ZCLU3eW3k7GyBrsJDYIj7/qR3ZwWyRMHkgUhcmNN2lVjiuiiad Jlw2FCn2Lbm6WG1LwkMcl0RVW9g+Ta2GClOV7b6Y0QtfKgY9juEsvf3Imt5wHuHW vw0wZns4dGgF7FEDfvkVAHNoiuOJOYk5OvBvzQWbf88ZBLCa4ZyfM+ubFHsWEm+Y /41Qh8To7dqOCYGbvXfNhmxTRoUwAhQ= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:02 2025 by rpki-client