$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa File: ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa (raw, json) Hash identifier: QzZoXDvNEvcppWxu6EHG8UjwVtgccqlYj2mJHjKFjtY= Subject key identifier: 75:D4:18:FE:D3:70:42:76:DD:AE:24:C6:93:F4:F8:62:E5:5B:9D:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AA1617CA18FBD8C4E27621900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa Signing time: Fri 25 Jul 2025 01:00:50 +0000 ROA not before: Fri 25 Jul 2025 01:00:50 +0000 ROA not after: Thu 23 Oct 2025 01:00:50 +0000 asID: 6939 IP address blocks: 23.27.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a1:61:7c:a1:8f:bd:8c:4e:27:62:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 25 01:00:50 2025 GMT Not After : Oct 23 01:00:50 2025 GMT Subject: CN=2d1c52e7-3213-4554-98ba-a6c6a858d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:73:c8:3e:22:58:aa:ac:43:8d:03:9b:80: c1:a4:9d:4b:cf:c8:ab:68:d5:f6:80:25:69:b9:5e: f6:bb:a3:a3:a5:68:06:aa:3b:e7:8a:8e:cc:7c:da: b1:3a:cf:dc:c1:bb:a7:9b:e6:f0:50:75:d9:57:be: 42:8e:3f:27:aa:b5:a1:5f:ff:6a:02:01:2a:c9:df: 28:70:ed:3f:d3:73:70:9c:6b:a6:07:01:5c:27:41: d1:cd:de:d7:b3:da:46:a1:eb:f8:7b:c9:47:4d:29: a2:be:16:98:04:7b:b1:4c:6f:85:d5:b8:02:21:3a: 80:7c:35:7b:6c:72:24:d0:ea:a5:4e:b2:29:bd:0a: da:1c:a4:f1:3d:92:ff:4c:cf:89:83:c6:be:47:ba: b2:54:fe:28:21:56:b9:ed:e5:a6:92:96:0e:ce:78: 49:7c:2f:25:2c:6c:62:1c:61:f6:75:8e:b5:63:1b: b7:ae:ab:8a:d6:b5:11:39:45:3c:93:b1:a7:15:ed: 9c:dc:5d:c2:89:3c:da:f8:0d:d8:42:bd:88:bd:bd: 86:94:af:33:cb:58:01:b3:63:0c:25:4c:b6:af:67: 3f:68:2f:b6:bd:d2:58:2d:78:c9:a7:30:1b:69:7c: 14:fc:98:50:3f:70:3b:4d:dc:60:bb:6a:d4:ba:3c: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:D4:18:FE:D3:70:42:76:DD:AE:24:C6:93:F4:F8:62:E5:5B:9D:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:61:63:c2:d7:38:95:a7:41:a0:92:bf:a0:d4:0a:4c:5a:1a: c0:14:9c:90:2c:6d:3f:ef:25:0d:06:69:a8:2d:a6:31:92:ed: e8:38:1a:4a:0c:43:08:48:a7:26:63:25:b6:22:85:9a:a0:f0: 90:ee:72:c1:08:1c:dc:ec:49:60:9c:c1:ee:6d:2a:bd:e7:04: 4d:4c:93:59:42:a5:f2:3b:b5:1f:22:fc:bd:ee:6c:1e:55:72: b8:f7:24:68:4d:cc:3a:91:92:ad:a7:ba:89:0e:27:12:16:ca: dc:bc:84:27:3d:d2:c6:b3:df:57:3f:39:63:0e:d2:31:21:5b: 03:9a:3e:00:46:26:18:28:d1:bf:20:7e:ce:6a:5f:1e:ed:4e: 04:37:1e:3e:f9:04:a8:e3:db:f3:b0:b1:32:7b:28:14:6b:17: a8:49:d8:57:af:56:7d:77:e6:78:d6:11:b9:d0:cc:0e:6e:65: 66:dd:b3:07:a8:a6:c4:5f:73:e2:8c:a8:d8:8c:e2:5a:0c:1d: 95:7d:de:a2:18:6f:82:69:75:18:c9:0d:e6:b4:7d:68:35:d9: 74:a7:c7:8e:62:c1:05:75:c2:61:af:65:4c:bc:e1:27:8e:5c: c7:45:ff:64:b9:81:ee:66:84:43:93:43:59:41:2c:55:f7:63: b2:ea:b0:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYXyhj72MTidiGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk MmQxYzUyZTctMzIxMy00NTU0LTk4YmEtYTZjNmE4NThkMmQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhipzyD4iWKqsQ40Dm4DBpJ1Lz8iraNX2gCVp uV72u6OjpWgGqjvnio7MfNqxOs/cwbunm+bwUHXZV75Cjj8nqrWhX/9qAgEqyd8o cO0/03NwnGumBwFcJ0HRzd7Xs9pGoev4e8lHTSmivhaYBHuxTG+F1bgCITqAfDV7 bHIk0OqlTrIpvQraHKTxPZL/TM+Jg8a+R7qyVP4oIVa57eWmkpYOznhJfC8lLGxi HGH2dY61Yxu3rquK1rUROUU8k7GnFe2c3F3CiTza+A3YQr2Ivb2GlK8zy1gBs2MM JUy2r2c/aC+2vdJYLXjJpzAbaXwU/JhQP3A7Tdxgu2rUujxRvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHXUGP7TcEJ23a4kxpP0+GLlW50CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmZlNzc4YjMtMzk4Ny0z NDcyLTliZjYtMWI1YWI5YzJlNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxhY8LXOJWnQaCSv6DUCkxaGsAUnJAsbT/vJQ0GaagtpjGS7eg4GkoM QwhIpyZjJbYihZqg8JDucsEIHNzsSWCcwe5tKr3nBE1Mk1lCpfI7tR8i/L3ubB5V crj3JGhNzDqRkq2nuokOJxIWyty8hCc90saz31c/OWMO0jEhWwOaPgBGJhgo0b8g fs5qXx7tTgQ3Hj75BKjj2/OwsTJ7KBRrF6hJ2FevVn135njWEbnQzA5uZWbdsweo psRfc+KMqNiM4loMHZV93qIYb4JpdRjJDea0fWg12XSnx45iwQV1wmGvZUy84SeO XMdF/2S5ge5mhEOTQ1lBLFX3Y7LqsJo= -----END CERTIFICATE-----Generated at Wed Aug 6 09:30:27 2025 by rpki-client