$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6461e31c-c251-37d0-bb07-3f4fe8f6b569.roa File: 6461e31c-c251-37d0-bb07-3f4fe8f6b569.roa (raw, json) Hash identifier: uKWM2jzvQbDZtdzzDB9AYDVydy5uGrZJbFRyETII3U4= Subject key identifier: F5:1E:C1:2D:5D:F6:E5:F0:71:DF:88:89:AD:EC:96:CA:76:4D:1E:4F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D7315CE3F35A55956F4340 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6461e31c-c251-37d0-bb07-3f4fe8f6b569.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 11404 IP address blocks: 23.27.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:31:5c:e3:f3:5a:55:95:6f:43:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=35dccddf-ad08-4668-95b1-7f51f9b83634 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:05:c9:33:a2:b0:0d:eb:a2:0e:71:65:61:c2: 71:8c:df:c9:6b:ae:15:a7:65:79:52:c4:d2:04:0b: 0b:1a:7a:8d:12:59:7f:90:17:c3:f6:8f:6a:f4:73: c3:ab:bd:ac:bc:cb:c9:89:53:cf:8d:27:83:7a:48: e9:df:44:9f:d3:7f:20:c1:02:a5:f7:e6:b4:69:45: a4:65:37:78:13:09:6c:ab:fb:7d:d4:19:9c:42:1d: 77:78:29:e5:e2:74:b9:35:4f:1e:4f:ee:6a:25:71: f6:ce:ba:f9:e7:40:40:0c:1c:3d:0e:31:60:d0:f7: 22:f3:a1:6d:41:5b:c5:5b:92:3e:82:a7:2d:5b:a2: 1e:47:89:46:73:01:ff:59:3b:45:81:6a:bc:37:95: fd:f3:48:bb:46:8d:eb:2d:cf:98:33:ca:a5:f1:62: 87:82:c0:d4:87:a3:4a:a9:04:90:6a:b1:27:f7:b6: 8a:50:d7:99:a5:06:1f:30:1a:ae:9a:b4:96:30:29: 7f:e2:cc:66:c4:51:55:68:87:24:53:d7:b3:b5:02: 29:69:db:f6:32:c4:e2:70:cf:c8:ad:29:c0:00:29: 84:ea:0d:c6:82:3f:95:92:36:ba:34:da:3d:c5:27: c2:9f:5e:99:84:b1:31:d3:eb:ff:64:2a:04:a3:aa: cc:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1E:C1:2D:5D:F6:E5:F0:71:DF:88:89:AD:EC:96:CA:76:4D:1E:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6461e31c-c251-37d0-bb07-3f4fe8f6b569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0a:a7:b7:0e:0f:4e:99:ee:04:d5:8a:6a:30:b9:1b:4e:9e: 9b:ee:43:89:39:79:1a:01:b4:90:bf:e9:95:46:58:3f:cf:b3: 4a:52:f9:23:5d:db:05:09:b3:5b:cc:8f:dc:31:1c:5e:0b:15: b8:b0:f6:4f:4d:48:64:ac:7d:1f:55:69:3f:0b:a8:fd:b7:04: 3c:a1:16:0f:a1:ff:bd:04:7d:46:a9:e8:47:24:e8:e0:fc:cd: 6b:e2:96:33:98:c5:08:12:94:7a:9b:f2:bd:39:c0:25:39:54: b1:8c:80:0f:bd:e0:16:2d:1b:44:c0:40:14:49:6a:27:6c:e9: 33:64:bb:75:6f:41:ca:1d:c0:5f:47:48:3b:b5:e5:dd:9b:28: 2e:23:b3:ca:6d:54:e4:f2:c2:1c:d0:26:ef:89:5d:c2:39:9c: c4:24:a3:8e:07:4a:e9:bc:79:fb:10:4c:ac:cc:18:fc:75:b8: 19:54:be:93:9c:da:8d:1d:26:8a:bb:0e:00:45:9c:d9:29:07: ee:de:9c:c7:04:c1:41:b8:ab:8d:8d:0a:b8:ca:5a:38:30:65: 31:c3:16:16:7c:07:b5:d6:e5:85:61:e5:1a:0a:32:02:90:9c: 61:bb:16:c9:da:0f:a0:0e:72:70:26:08:99:fa:d6:43:90:1e: 2e:1f:b0:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zFc4/NaVZVvQ0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk MzVkY2NkZGYtYWQwOC00NjY4LTk1YjEtN2Y1MWY5YjgzNjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAXJM6KwDeuiDnFlYcJxjN/Ja64Vp2V5UsTS BAsLGnqNEll/kBfD9o9q9HPDq72svMvJiVPPjSeDekjp30Sf038gwQKl9+a0aUWk ZTd4Ewlsq/t91BmcQh13eCnl4nS5NU8eT+5qJXH2zrr550BADBw9DjFg0Pci86Ft QVvFW5I+gqctW6IeR4lGcwH/WTtFgWq8N5X980i7Ro3rLc+YM8ql8WKHgsDUh6NK qQSQarEn97aKUNeZpQYfMBqumrSWMCl/4sxmxFFVaIckU9eztQIpadv2MsTicM/I rSnAACmE6g3Ggj+Vkja6NNo9xSfCn16ZhLEx0+v/ZCoEo6rMmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUewS1d9uXwcd+Iia3slsp2TR5PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjQ2MWUzMWMtYzI1MS0z N2QwLWJiMDctM2Y0ZmU4ZjZiNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIKp7cOD06Z7gTVimowuRtOnpvuQ4k5eRoBtJC/6ZVGWD/Ps0pS+SNd 2wUJs1vMj9wxHF4LFbiw9k9NSGSsfR9VaT8LqP23BDyhFg+h/70EfUap6Eck6OD8 zWviljOYxQgSlHqb8r05wCU5VLGMgA+94BYtG0TAQBRJaids6TNku3VvQcodwF9H SDu15d2bKC4js8ptVOTywhzQJu+JXcI5nMQko44HSum8efsQTKzMGPx1uBlUvpOc 2o0dJoq7DgBFnNkpB+7enMcEwUG4q42NCrjKWjgwZTHDFhZ8B7XW5YVh5RoKMgKQ nGG7FsnaD6AOcnAmCJn61kOQHi4fsO4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:44:22 2025 by rpki-client