$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa File: 3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa (raw, json) Hash identifier: 6JZoQOlVdSuEu5BQI0lvqDX6LfTro5goY3e9y4UNUHM= Subject key identifier: D8:4E:34:FB:A1:D7:D6:00:2C:DC:CD:5C:6F:74:3C:57:F5:ED:BF:7F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75ACB9666717CB67ADA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 23.27.192.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5a:cb:96:66:71:7c:b6:7a:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=40caac64-cfa2-4a16-8cf1-0ddad71941dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bf:cb:6a:45:60:6a:ca:72:39:3f:eb:7d:09: ac:40:de:6a:4a:cd:06:fa:ca:d3:50:77:26:44:fa: 72:6c:64:7f:d0:a8:4b:03:8f:2b:18:86:8e:76:36: 6b:a7:8d:54:7a:70:25:67:43:eb:a1:36:83:f8:a7: 2c:ee:94:79:0f:24:b0:93:43:53:f7:9d:5f:be:04: 9e:1f:22:4b:58:ea:4d:b5:56:fd:1c:c4:44:84:e6: 71:b2:eb:48:cc:60:ac:d0:5f:a3:37:9d:c6:6f:02: af:b5:78:e2:26:fb:d1:0b:3b:d0:e4:b4:4f:65:d6: 19:8c:e5:cb:4e:5a:27:db:56:1c:a1:73:c8:3c:fe: c1:05:11:a4:97:14:a6:2a:ee:97:07:8a:44:d6:2c: 71:22:5c:4d:21:c0:a0:36:44:af:f7:5d:22:07:31: e3:2e:e4:ab:5f:5c:87:39:4b:55:09:53:5c:96:85: 8b:14:f7:23:b6:14:44:bd:3d:2e:fe:f1:e6:c8:af: 9e:ed:c9:2c:ab:ba:a8:0a:86:67:15:9a:41:99:6b: 59:01:3d:a6:8e:8f:86:c9:e9:80:b9:63:a7:16:62: f5:3b:37:00:03:85:22:13:05:86:c4:55:e8:f2:ef: 03:ef:20:b4:a0:31:8b:12:25:1a:a5:35:70:d5:18: 15:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:4E:34:FB:A1:D7:D6:00:2C:DC:CD:5C:6F:74:3C:57:F5:ED:BF:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a54be4a-4aec-3d04-8d38-bf312e991b1b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.192.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:e4:be:d7:5b:11:37:69:a9:97:f0:31:95:0e:64:84:68:6f: a2:81:71:95:90:4e:c5:8c:8f:ed:b1:0c:6a:16:57:3a:8c:7a: 9a:ba:ed:71:db:00:c3:48:dd:40:69:bc:8c:43:b5:03:f3:f3: a6:30:6b:c6:28:c1:bb:f9:b1:79:1d:d7:63:d5:32:22:9c:8c: dc:5d:65:70:61:b8:e5:8a:2f:e8:bc:81:e7:26:97:20:2f:f1: f1:3a:ec:62:cd:d6:b7:26:08:d3:bb:3e:83:fb:33:05:f5:67: 3d:16:c7:4f:bb:8b:68:a6:09:1e:56:d0:0a:cf:a5:e6:05:b8: ad:91:66:04:76:21:50:c5:f1:11:df:a1:a5:42:95:e7:c3:50: 77:27:94:4d:eb:19:2c:3e:ef:65:43:ca:ea:5e:09:e3:ef:e8: 7b:57:99:b8:ce:fc:fa:b4:07:c5:e2:da:85:ee:da:18:38:ad: 63:1b:fd:43:56:54:39:ff:38:e7:61:83:ca:52:00:2a:40:50: 69:1b:c4:1c:09:60:82:5c:c6:83:27:6b:b2:13:53:5b:d8:e9: 93:b4:9e:8e:f0:12:1d:91:57:81:3a:e6:82:0c:1e:7d:10:ea: 78:87:92:f4:a8:7d:1f:bd:f8:5a:57:e3:ef:da:81:c4:73:ed: a8:1c:bd:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1rLlmZxfLZ62oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDBjYWFjNjQtY2ZhMi00YTE2LThjZjEtMGRkYWQ3MTk0MWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL/LakVgaspyOT/rfQmsQN5qSs0G+srTUHcm RPpybGR/0KhLA48rGIaOdjZrp41UenAlZ0ProTaD+Kcs7pR5DySwk0NT951fvgSe HyJLWOpNtVb9HMREhOZxsutIzGCs0F+jN53GbwKvtXjiJvvRCzvQ5LRPZdYZjOXL Tlon21YcoXPIPP7BBRGklxSmKu6XB4pE1ixxIlxNIcCgNkSv910iBzHjLuSrX1yH OUtVCVNcloWLFPcjthREvT0u/vHmyK+e7cksq7qoCoZnFZpBmWtZAT2mjo+GyemA uWOnFmL1OzcAA4UiEwWGxFXo8u8D7yC0oDGLEiUapTVw1RgV/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhONPuh19YALNzNXG90PFf17b9/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2E1NGJlNGEtNGFlYy0z ZDA0LThkMzgtYmYzMTJlOTkxYjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvkvtdbETdpqZfwMZUOZIRob6KBcZWQTsWMj+2xDGoWVzqMepq67XHb AMNI3UBpvIxDtQPz86Ywa8Yowbv5sXkd12PVMiKcjNxdZXBhuOWKL+i8gecmlyAv 8fE67GLN1rcmCNO7PoP7MwX1Zz0Wx0+7i2imCR5W0ArPpeYFuK2RZgR2IVDF8RHf oaVClefDUHcnlE3rGSw+72VDyupeCePv6HtXmbjO/Pq0B8Xi2oXu2hg4rWMb/UNW VDn/OOdhg8pSACpAUGkbxBwJYIJcxoMna7ITU1vY6ZO0no7wEh2RV4E65oIMHn0Q 6niHkvSofR+9+FpX4+/agcRz7agcvW8= -----END CERTIFICATE-----Generated at Sat Oct 11 08:44:26 2025 by rpki-client