$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6b8e6e12-5c2a-373a-ba66-b4aeaf24f1f2.roa File: 6b8e6e12-5c2a-373a-ba66-b4aeaf24f1f2.roa (raw, json) Hash identifier: 9ywvH+k2EDDlDMTvHJtTGZyywkhdqR7hlrHpJaQHgQo= Subject key identifier: 42:3E:49:66:10:AD:53:B4:DC:BD:59:29:EB:CB:C1:77:00:51:52:7B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CA93A1268384233CD0D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6b8e6e12-5c2a-373a-ba66-b4aeaf24f1f2.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 23.27.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:a9:3a:12:68:38:42:33:cd:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=1ac199b6-5366-4c91-bd4e-ccc39ea307bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5b:88:73:9b:8a:0a:d7:58:95:4a:0f:a3:5e: 2b:61:a5:16:0d:c6:bb:9a:f9:68:58:32:59:26:8f: d5:1c:78:7e:b5:ec:0f:85:0d:7a:e2:84:59:cb:0b: 71:ce:bf:94:2a:60:43:f5:f9:9e:dd:41:e2:46:4d: 94:c1:c0:15:1a:a4:8a:4a:51:f4:2a:71:e8:0a:88: 19:5a:c5:7a:60:50:f6:cc:f5:b3:e3:21:de:c6:63: 74:95:67:80:0f:fd:67:99:bd:cf:ae:d2:03:c3:bf: a0:fe:d8:85:d0:2d:9f:a1:d4:f2:f9:66:7d:df:b5: 48:02:a7:37:2d:01:f3:d5:a9:d0:6d:95:83:8b:11: c2:e6:76:7a:70:4c:9b:e5:52:0c:e6:d2:32:5a:7b: 77:84:fb:04:8d:85:2a:db:06:97:eb:d2:e2:04:4d: 35:e7:65:c8:0a:20:c9:d9:b5:82:88:39:b1:32:cb: fc:27:d4:37:56:c6:38:12:b0:08:63:64:43:50:83: 98:bf:ff:e7:86:75:22:b1:e8:b2:df:74:2d:a7:fe: f8:53:d3:05:c0:47:a2:28:b0:33:a3:1d:24:1f:1f: 5b:85:f8:1a:cf:6a:c7:d6:19:80:99:3b:99:10:1e: 0e:78:82:40:43:71:a0:8f:6b:f5:7b:fa:de:11:78: 03:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:3E:49:66:10:AD:53:B4:DC:BD:59:29:EB:CB:C1:77:00:51:52:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6b8e6e12-5c2a-373a-ba66-b4aeaf24f1f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:53:a5:64:fc:ec:8e:e1:5d:df:70:f2:b1:e6:95:18:06:cd: fc:67:90:cf:aa:45:74:27:65:9b:ca:33:dc:2b:0b:04:56:83: 09:98:61:d5:40:39:ae:c2:29:99:88:d2:52:6e:3b:72:8e:cb: 1c:bb:e4:c0:bf:3b:89:85:b8:a8:14:91:d2:15:1f:f9:ae:de: 04:06:a4:ef:d3:4d:59:ef:bd:ec:b7:c1:c2:a3:a1:96:b3:92: eb:30:f6:39:bd:89:8f:9d:32:c8:70:d6:51:1c:2d:8f:48:a3: 75:fb:38:ab:fa:7b:99:94:65:a9:1e:25:2d:f4:81:2a:cb:be: 9c:2a:12:f1:42:4d:39:0a:e4:0f:15:74:00:71:7f:d2:ad:6b: c5:8f:2b:6a:c1:6b:c7:11:b0:2a:19:b2:66:53:75:8b:2d:ac: cb:f1:6d:cb:1c:a4:c0:1e:3e:a2:d8:82:bc:65:98:47:f9:b5: fe:34:e1:2b:7f:6f:14:5d:95:61:87:f6:2b:d6:98:35:dc:ec: 51:f1:2f:b2:8a:c5:78:30:89:b1:ab:d8:b7:36:ff:17:21:56: 34:af:fd:33:9f:1a:a5:4a:1b:57:e3:1b:12:91:f6:a6:6a:61: 7c:10:38:f5:53:9a:55:9b:68:f6:43:93:e6:64:df:76:a5:9e: 35:2a:63:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKk6Emg4QjPNDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MWFjMTk5YjYtNTM2Ni00YzkxLWJkNGUtY2NjMzllYTMwN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFuIc5uKCtdYlUoPo14rYaUWDca7mvloWDJZ Jo/VHHh+tewPhQ164oRZywtxzr+UKmBD9fme3UHiRk2UwcAVGqSKSlH0KnHoCogZ WsV6YFD2zPWz4yHexmN0lWeAD/1nmb3PrtIDw7+g/tiF0C2fodTy+WZ937VIAqc3 LQHz1anQbZWDixHC5nZ6cEyb5VIM5tIyWnt3hPsEjYUq2waX69LiBE0152XICiDJ 2bWCiDmxMsv8J9Q3VsY4ErAIY2RDUIOYv//nhnUiseiy33Qtp/74U9MFwEeiKLAz ox0kHx9bhfgaz2rH1hmAmTuZEB4OeIJAQ3Ggj2v1e/reEXgD3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEI+SWYQrVO03L1ZKevLwXcAUVJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmI4ZTZlMTItNWMyYS0z NzNhLWJhNjYtYjRhZWFmMjRmMWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExTpWT87I7hXd9w8rHmlRgGzfxnkM+qRXQnZZvKM9wrCwRWgwmYYdVA Oa7CKZmI0lJuO3KOyxy75MC/O4mFuKgUkdIVH/mu3gQGpO/TTVnvvey3wcKjoZaz kusw9jm9iY+dMshw1lEcLY9Io3X7OKv6e5mUZakeJS30gSrLvpwqEvFCTTkK5A8V dABxf9Kta8WPK2rBa8cRsCoZsmZTdYstrMvxbcscpMAePqLYgrxlmEf5tf404St/ bxRdlWGH9ivWmDXc7FHxL7KKxXgwibGr2Lc2/xchVjSv/TOfGqVKG1fjGxKR9qZq YXwQOPVTmlWbaPZDk+Zk33alnjUqY4c= -----END CERTIFICATE-----Generated at Tue Nov 4 23:36:09 2025 by rpki-client