$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef667c44-82a2-3e2f-b7d1-952257dd7cff.roa File: ef667c44-82a2-3e2f-b7d1-952257dd7cff.roa (raw, json) Hash identifier: J1kXvnhTIBuipUyAajNFnuzjvLVkVwGXZ4zjj90JpU0= Subject key identifier: 26:93:F9:BA:07:D9:4E:44:81:9C:D7:9E:1E:0E:45:9C:2F:01:A3:9D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F06729AA45BE9E0FF6B3B6080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef667c44-82a2-3e2f-b7d1-952257dd7cff.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 2856 IP address blocks: 23.27.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9a:a4:5b:e9:e0:ff:6b:3b:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=7c607d9d-a465-40d3-8472-e452b22b1592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:9b:22:c1:2a:2b:ab:2d:fa:1f:c6:c2:27: 2d:05:93:a0:e6:10:b9:4a:e5:29:1a:94:ab:bc:e2: 69:07:cf:57:07:67:df:d3:fd:54:3f:27:a5:51:06: 33:3f:1b:a4:d8:c0:fb:e6:4b:c7:8f:94:b7:52:fe: 4d:98:fd:d4:95:b2:c4:c0:8e:08:b0:31:6a:a7:c1: a5:f0:c1:1e:47:c2:5e:a8:91:8a:ac:8f:c7:95:dc: 6b:9d:b1:04:1d:43:9d:c4:d6:f1:56:42:8b:e5:44: 37:d1:f7:4c:2c:af:ee:bc:f2:a3:c4:10:43:28:ea: 60:b7:d7:70:12:f5:d0:96:ce:cd:12:17:a6:5f:e0: 4b:e9:5d:a0:65:79:cd:04:7a:c8:8e:9e:0c:cf:0e: 09:22:33:d9:f0:6e:9b:5d:ff:81:ba:9a:8c:4a:12: 8f:f5:e7:49:46:d5:6e:42:a6:bc:3e:66:55:01:ad: de:92:f7:7c:fb:94:96:4b:03:5f:c7:a7:27:f6:5c: e1:1c:ad:3c:cd:bb:c9:f6:51:84:d0:8a:df:b2:91: 2c:33:ac:2f:11:ce:3a:0c:21:68:77:e1:c9:b8:7d: af:ff:eb:b8:a5:32:80:2a:fa:0f:a4:4c:31:b8:af: 28:f4:5b:e3:04:91:0b:4c:a6:9d:2e:72:fe:4c:6e: 5e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:93:F9:BA:07:D9:4E:44:81:9C:D7:9E:1E:0E:45:9C:2F:01:A3:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef667c44-82a2-3e2f-b7d1-952257dd7cff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f7:ca:d6:0d:6b:d8:c2:da:d2:3f:bd:2b:44:8b:bc:ae:28: 8b:fb:77:9a:58:99:5d:07:72:15:da:46:5a:11:4e:11:3d:d4: a4:fb:a2:4f:64:a0:42:71:44:25:0c:13:d7:81:36:43:fc:f9: 59:6a:aa:19:67:ef:20:c2:fd:fb:ce:07:d3:d0:1c:15:cb:6e: af:5b:0f:05:a7:77:a2:4b:5c:e5:19:30:27:65:5c:02:06:ad: 1c:a3:ce:b8:f9:7d:9e:14:73:52:35:ed:97:bc:2d:b0:f3:3a: c7:61:2f:9b:af:95:2c:f1:52:c8:f7:18:9f:4a:27:a4:77:98: 75:da:24:ac:5e:da:04:38:2a:a7:c0:7f:43:0b:fa:84:73:04: bf:e0:e9:dc:f6:0a:a3:23:4e:0e:b5:8f:ae:06:44:a6:62:d9: 4f:9d:1f:a3:b2:9a:49:f0:34:1a:f7:2b:12:32:e4:f2:e4:26: ca:22:5a:6d:68:74:95:15:33:cb:ab:9e:fd:51:92:a7:c8:75: 78:a3:3d:ad:13:91:7f:cc:ed:1f:a0:bb:c4:44:af:d8:0d:d0: bd:10:fc:a1:8e:c8:71:e4:32:95:58:df:88:7c:40:1d:0c:55: 89:70:cf:95:76:72:9a:ab:dc:61:03:60:d8:c4:3f:7f:49:07: 73:26:0c:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcpqkW+ng/2s7YIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk N2M2MDdkOWQtYTQ2NS00MGQzLTg0NzItZTQ1MmIyMmIxNTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gqbIsEqK6st+h/GwictBZOg5hC5SuUpGpSr vOJpB89XB2ff0/1UPyelUQYzPxuk2MD75kvHj5S3Uv5NmP3UlbLEwI4IsDFqp8Gl 8MEeR8JeqJGKrI/HldxrnbEEHUOdxNbxVkKL5UQ30fdMLK/uvPKjxBBDKOpgt9dw EvXQls7NEhemX+BL6V2gZXnNBHrIjp4Mzw4JIjPZ8G6bXf+BupqMShKP9edJRtVu Qqa8PmZVAa3ekvd8+5SWSwNfx6cn9lzhHK08zbvJ9lGE0IrfspEsM6wvEc46DCFo d+HJuH2v/+u4pTKAKvoPpEwxuK8o9FvjBJELTKadLnL+TG5ekwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCaT+boH2U5EgZzXnh4ORZwvAaOdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWY2NjdjNDQtODJhMi0z ZTJmLWI3ZDEtOTUyMjU3ZGQ3Y2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKL3ytYNa9jC2tI/vStEi7yuKIv7d5pYmV0HchXaRloRThE91KT7ok9k oEJxRCUME9eBNkP8+Vlqqhln7yDC/fvOB9PQHBXLbq9bDwWnd6JLXOUZMCdlXAIG rRyjzrj5fZ4Uc1I17Ze8LbDzOsdhL5uvlSzxUsj3GJ9KJ6R3mHXaJKxe2gQ4KqfA f0ML+oRzBL/g6dz2CqMjTg61j64GRKZi2U+dH6OymknwNBr3KxIy5PLkJsoiWm1o dJUVM8urnv1RkqfIdXijPa0TkX/M7R+gu8REr9gN0L0Q/KGOyHHkMpVY34h8QB0M VYlwz5V2cpqr3GEDYNjEP39JB3MmDCY= -----END CERTIFICATE-----Generated at Thu Sep 24 08:57:55 2026 by rpki-client