$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa File: 522a063a-4db5-3fce-b6c8-b147d68cbdda.roa (raw, json) Hash identifier: wjl3by/xO6JJKA81TL3/bglbzusMglnsZmjMuimv6Dg= Subject key identifier: D6:5E:00:97:1A:10:41:9F:C4:32:0B:CD:78:ED:47:48:E4:30:0A:84 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6367440595A555D5ECFD1200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa Signing time: Thu 02 Oct 2025 13:00:40 +0000 ROA not before: Thu 02 Oct 2025 13:00:40 +0000 ROA not after: Wed 31 Dec 2025 14:00:40 +0000 asID: 400402 IP address blocks: 23.27.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:63:67:44:05:95:a5:55:d5:ec:fd:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 2 13:00:40 2025 GMT Not After : Dec 31 14:00:40 2025 GMT Subject: CN=0ab6e965-a16b-4da7-ad01-b3c28239d191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bd:1f:d9:b6:40:64:f6:b8:80:85:8e:d1:b3: 27:e3:e8:3b:83:3a:9f:08:16:43:94:e4:cd:f4:2a: ae:2e:ae:1a:6f:76:62:0a:02:e6:05:72:a1:9e:61: 13:14:e4:0f:8c:9c:b6:38:1e:94:f2:91:dd:e8:9f: 00:08:06:fe:cd:e4:67:ee:d4:a3:89:c9:89:4d:13: c4:64:15:eb:0a:07:4d:22:80:ef:45:ae:90:e2:91: 55:85:e1:63:3a:e5:7b:d8:77:1b:f7:28:74:a4:d6: cf:8a:18:4b:89:46:85:e2:32:b2:5c:3c:50:45:59: 03:9f:64:e3:00:62:cd:d3:c1:06:67:0e:31:d1:3e: 13:b6:a7:4d:31:e5:71:72:ea:e8:36:48:d2:7f:b7: 74:ae:c8:f0:ac:57:e2:e0:19:f3:61:31:2b:8d:ea: 22:13:13:e0:33:7b:83:d4:46:55:bf:0f:fc:ba:e1: 40:0c:35:c5:f5:1f:03:2b:c9:04:15:72:6d:7c:1c: c4:73:55:76:e3:d8:fb:09:40:69:95:c5:fe:cf:94: 96:12:de:47:4e:d0:e0:fb:05:5a:2f:34:e4:13:56: 5e:d7:d9:9f:80:cc:5d:8c:69:14:f7:c5:25:5d:3c: 02:71:2e:a8:96:2e:fc:a0:39:59:97:88:5e:75:ba: 0a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:5E:00:97:1A:10:41:9F:C4:32:0B:CD:78:ED:47:48:E4:30:0A:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/522a063a-4db5-3fce-b6c8-b147d68cbdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7f:d0:b2:7e:f8:ec:32:44:78:49:40:25:4e:e6:94:cc:02: 95:ae:a2:2f:7b:eb:70:bd:43:89:48:24:e2:95:86:f8:99:f0: 08:08:a2:0f:75:10:2f:89:eb:6b:c9:c9:6c:60:5d:81:d9:d7: a2:81:17:21:4d:0c:00:aa:b7:9c:77:1d:07:56:46:1a:50:fc: cd:75:5a:9a:c4:20:79:cb:61:9b:67:d7:3e:6a:7c:1b:f6:00: 36:dc:21:6a:56:e9:7f:82:7d:c5:0c:01:81:a2:6c:3b:c8:0e: 66:f0:67:64:3a:99:75:1f:6e:06:6f:61:fe:ac:4b:1f:43:80: 2a:26:35:2b:5f:9b:f9:c4:f9:4e:4f:a8:4f:c6:7d:e6:56:96: 72:70:28:4e:19:68:e1:43:c1:73:b6:35:1e:9f:7f:72:fc:46: 84:03:73:82:6a:10:b1:7e:ce:ca:11:1f:38:53:f7:77:ae:e2: dc:2f:76:f6:09:39:b5:db:4c:11:a2:2f:c7:d7:50:87:73:51: e5:cd:14:3d:8a:cb:57:4f:e1:64:c3:38:5d:86:74:bb:dc:3d: e2:c5:8a:a9:49:72:47:8e:01:4b:91:9a:cc:a3:82:b5:5e:ce: 24:4b:22:43:9f:66:29:7b:81:dc:10:91:80:98:23:20:51:0a: 10:33:a5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtjZ0QFlaVV1ez9EgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwMjEzMDA0MFoXDTI1MTIzMTE0MDA0MFowLzEtMCsGA1UEAxMk MGFiNmU5NjUtYTE2Yi00ZGE3LWFkMDEtYjNjMjgyMzlkMTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAor0f2bZAZPa4gIWO0bMn4+g7gzqfCBZDlOTN 9CquLq4ab3ZiCgLmBXKhnmETFOQPjJy2OB6U8pHd6J8ACAb+zeRn7tSjicmJTRPE ZBXrCgdNIoDvRa6Q4pFVheFjOuV72Hcb9yh0pNbPihhLiUaF4jKyXDxQRVkDn2Tj AGLN08EGZw4x0T4TtqdNMeVxcuroNkjSf7d0rsjwrFfi4BnzYTErjeoiExPgM3uD 1EZVvw/8uuFADDXF9R8DK8kEFXJtfBzEc1V249j7CUBplcX+z5SWEt5HTtDg+wVa LzTkE1Ze19mfgMxdjGkU98UlXTwCcS6oli78oDlZl4hedboK6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZeAJcaEEGfxDILzXjtR0jkMAqEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTIyYTA2M2EtNGRiNS0z ZmNlLWI2YzgtYjE0N2Q2OGNiZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBFxtgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp/0LJ++OwyRHhJQCVO5pTMApWuoi9763C9Q4lIJOKVhviZ8AgIog91 EC+J62vJyWxgXYHZ16KBFyFNDACqt5x3HQdWRhpQ/M11WprEIHnLYZtn1z5qfBv2 ADbcIWpW6X+CfcUMAYGibDvIDmbwZ2Q6mXUfbgZvYf6sSx9DgComNStfm/nE+U5P qE/GfeZWlnJwKE4ZaOFDwXO2NR6ff3L8RoQDc4JqELF+zsoRHzhT93eu4twvdvYJ ObXbTBGiL8fXUIdzUeXNFD2Ky1dP4WTDOF2GdLvcPeLFiqlJckeOAUuRmsyjgrVe ziRLIkOfZil7gdwQkYCYIyBRChAzpVw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:53 2025 by rpki-client