$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa File: 3d106c9d-da57-3ede-87a0-891616fb58f5.roa (raw, json) Hash identifier: ZyAHilhBIva0S0qJIx9OBJcSlbpKil5FHg++I2UQgmI= Subject key identifier: 23:15:86:0C:B1:8B:92:8F:72:8C:8B:3F:55:A7:26:39:A2:D0:B5:88 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CA9C080182221FEB02584 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 23.27.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:a9:c0:80:18:22:21:fe:b0:25:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=7c475de6-e19b-4f5b-bc98-d1e84b1654fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:37:43:90:3c:df:b8:7e:c4:c9:de:cc:e2: 4a:c7:0d:42:b4:81:a9:54:00:1c:35:78:45:04:8e: 5a:5f:8b:47:7d:7b:ff:82:86:dc:5c:d1:e5:64:06: 69:c2:bd:57:e4:ad:c5:bb:39:7e:7c:d7:a0:a1:3b: 75:c5:87:f6:69:c1:2e:7b:09:a8:c4:81:e0:16:f9: e3:2c:e7:72:c4:82:f4:f7:27:a8:f1:6a:ed:f8:45: ea:c5:2f:15:88:da:56:7b:65:3d:1c:d8:dd:c5:d2: 3b:f1:39:66:d9:de:17:e4:08:47:46:79:11:ef:b5: e1:3c:5c:64:03:d3:0e:20:f0:e0:d0:0c:6a:d5:3e: d2:5f:94:2c:e9:c6:76:44:31:7b:a0:a8:23:c8:45: 08:61:a8:2c:8a:c1:4f:17:9c:39:24:de:7a:f4:9e: f4:dd:ea:2a:1c:05:29:53:15:0e:9d:1d:99:7d:fd: 71:3c:d5:7f:58:d1:28:0a:06:01:28:30:17:b7:f2: d3:4d:6a:78:51:42:22:91:5a:0f:f1:22:a8:5b:f7: bc:11:17:9d:c6:b2:e8:88:64:fe:c7:a5:d6:56:e9: 32:22:c6:d4:de:63:80:03:79:12:54:17:ab:7e:fd: 2b:e4:ae:e3:8d:7d:4a:68:ee:5d:27:c6:a6:be:59: 2b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:15:86:0C:B1:8B:92:8F:72:8C:8B:3F:55:A7:26:39:A2:D0:B5:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:bd:a7:1b:60:7a:fd:09:42:db:eb:d4:83:42:65:cd:2b:58: 5b:12:41:ca:d1:50:b2:cc:c6:51:f3:80:fe:56:6b:42:11:c8: 56:ab:d0:27:73:be:6c:eb:f4:c5:44:bc:8e:7f:51:c0:82:15: eb:2f:05:0d:7d:d9:62:82:2c:b0:9f:13:77:89:3e:e4:a8:08: 03:d8:56:cf:13:93:1a:78:79:a5:3b:b7:c2:a6:40:4d:aa:63: 23:53:97:91:08:f7:09:be:d4:f9:17:36:1a:51:cb:a0:55:5d: 79:04:2d:73:36:9f:bc:2f:23:75:1f:53:ea:48:13:1a:a3:80: ad:61:8f:f5:a5:ae:b2:a0:45:8f:44:b1:c1:47:fc:e1:5e:e3: 19:06:44:70:8b:97:3c:66:86:57:5f:de:15:50:f8:78:41:59: 85:e2:d8:7e:ca:c4:2d:96:6c:a3:6f:33:cd:01:f4:f5:c9:5c: 5e:27:24:c2:6f:73:23:42:c4:45:35:b1:a5:27:92:9d:61:6d: 6c:f3:ba:21:b7:3a:28:c1:22:30:73:cc:62:e7:60:a8:6f:d8: e9:29:39:4d:18:8e:c1:fc:46:3e:09:93:6d:0e:e8:1e:75:fb: aa:9b:81:e7:1c:07:a6:43:27:f8:d1:46:6a:67:30:ed:42:b1: 36:93:75:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKnAgBgiIf6wJYQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk N2M0NzVkZTYtZTE5Yi00ZjViLWJjOTgtZDFlODRiMTY1NGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOg3Q5A837h+xMnezOJKxw1CtIGpVAAcNXhF BI5aX4tHfXv/gobcXNHlZAZpwr1X5K3Fuzl+fNegoTt1xYf2acEuewmoxIHgFvnj LOdyxIL09yeo8Wrt+EXqxS8ViNpWe2U9HNjdxdI78Tlm2d4X5AhHRnkR77XhPFxk A9MOIPDg0Axq1T7SX5Qs6cZ2RDF7oKgjyEUIYagsisFPF5w5JN569J703eoqHAUp UxUOnR2Zff1xPNV/WNEoCgYBKDAXt/LTTWp4UUIikVoP8SKoW/e8ERedxrLoiGT+ x6XWVukyIsbU3mOAA3kSVBerfv0r5K7jjX1KaO5dJ8amvlkrXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMVhgyxi5KPcoyLP1WnJjmi0LWIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2QxMDZjOWQtZGE1Ny0z ZWRlLTg3YTAtODkxNjE2ZmI1OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACO9pxtgev0JQtvr1INCZc0rWFsSQcrRULLMxlHzgP5Wa0IRyFar0Cdz vmzr9MVEvI5/UcCCFesvBQ192WKCLLCfE3eJPuSoCAPYVs8Tkxp4eaU7t8KmQE2q YyNTl5EI9wm+1PkXNhpRy6BVXXkELXM2n7wvI3UfU+pIExqjgK1hj/WlrrKgRY9E scFH/OFe4xkGRHCLlzxmhldf3hVQ+HhBWYXi2H7KxC2WbKNvM80B9PXJXF4nJMJv cyNCxEU1saUnkp1hbWzzuiG3OijBIjBzzGLnYKhv2OkpOU0YjsH8Rj4Jk20O6B51 +6qbgeccB6ZDJ/jRRmpnMO1CsTaTdcM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:58 2025 by rpki-client