$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/667bc0c4-e111-3fa7-8ea1-442ecbc050a6.roa File: 667bc0c4-e111-3fa7-8ea1-442ecbc050a6.roa (raw, json) Hash identifier: a+KBu0naYpeTEVF/4D47lFJ5JYyBZhr8yB8bxD1OlyE= Subject key identifier: 09:91:D4:2C:26:F0:38:14:16:F5:61:B2:0D:53:32:57:24:3C:33:53 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772CB7581CCA473CE54BB8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/667bc0c4-e111-3fa7-8ea1-442ecbc050a6.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 23.27.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2c:b7:58:1c:ca:47:3c:e5:4b:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=92a9061b-70cc-49bc-992c-2b7f70e3b19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2c:91:8d:dd:81:00:7e:4e:bc:a6:00:ea:15: a3:2c:67:53:8b:0c:fd:13:b4:2b:b6:49:03:b1:90: e6:29:13:a7:cc:da:06:f1:3c:32:ac:b9:eb:08:25: 06:48:ee:58:1d:5b:e7:49:4b:0b:80:60:66:15:f3: 35:ad:1e:b6:b0:e7:cc:bf:dd:84:6c:e9:63:2e:4a: 21:4f:8b:a0:7d:90:14:08:88:5a:8c:5e:d6:a0:95: 45:88:b2:9a:97:d4:2f:1d:f6:58:b1:6c:9c:e6:cb: 3d:84:4f:8f:7a:7e:1d:39:32:01:9a:e8:4e:f1:e7: 7d:34:6b:05:79:26:20:63:87:12:1a:f7:61:39:9e: 97:b1:45:14:f8:80:0a:46:7b:5e:75:23:7b:38:6a: e3:a1:ce:1a:36:0e:93:b5:99:7c:7d:89:83:de:37: e2:99:3e:0b:93:ac:5c:ad:76:82:f2:70:c2:60:d1: 06:91:bc:03:ab:05:33:e2:ce:24:e1:5c:f1:76:50: 38:5f:e6:7b:ca:ee:73:1f:2a:45:07:9a:93:2c:13: f8:77:be:01:e1:02:3e:23:ba:4d:3e:39:63:50:00: 4c:6e:a7:c8:f0:53:27:cb:9f:68:54:5c:52:a8:1a: c2:88:f6:5f:97:7e:42:d9:f7:b7:c5:b8:a5:3b:e4: d7:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:91:D4:2C:26:F0:38:14:16:F5:61:B2:0D:53:32:57:24:3C:33:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/667bc0c4-e111-3fa7-8ea1-442ecbc050a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:5c:84:2c:95:de:94:8c:5a:de:82:89:92:8d:84:33:db:c3: a5:77:7a:18:fc:7a:25:1f:89:98:1b:8a:ab:b9:19:74:51:9e: c7:08:a6:c9:39:5b:8b:66:b3:57:0c:a8:d2:31:52:a2:78:87: c2:ac:f5:b2:3e:59:14:da:8e:49:2b:be:5f:70:91:50:87:ad: 38:9b:a7:9d:34:a1:93:e0:bb:6e:74:78:e2:dc:39:b0:68:dc: aa:fb:2c:53:a5:92:51:46:06:95:1d:0f:1b:fa:19:2a:36:40: 0a:00:e1:b3:19:c5:9c:08:1a:34:de:51:03:40:1f:04:51:2a: 4a:8c:54:ed:8e:a9:c0:d7:34:c7:6b:a2:cf:fd:da:df:1e:16: 40:08:de:f3:81:47:be:75:8b:c4:7c:cb:f4:06:d2:5f:74:77: 74:2c:a1:f5:c3:4f:de:7b:05:95:82:b0:ec:66:99:95:47:6b: 4d:28:e3:fa:c0:6f:22:12:4a:70:48:ed:01:ee:df:af:bd:ea: 9f:4b:53:fc:a9:43:28:ed:1c:53:62:e6:de:f2:90:c7:69:4a: 87:18:36:6e:01:cc:43:da:b9:a9:9e:24:15:83:cd:b6:ac:38: a9:de:8e:3f:51:bb:d9:08:3d:4d:6f:de:81:b1:1f:b1:ea:cf: cd:86:66:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyy3WBzKRzzlS7gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OTJhOTA2MWItNzBjYy00OWJjLTk5MmMtMmI3ZjcwZTNiMTliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yyRjd2BAH5OvKYA6hWjLGdTiwz9E7QrtkkD sZDmKROnzNoG8TwyrLnrCCUGSO5YHVvnSUsLgGBmFfM1rR62sOfMv92EbOljLkoh T4ugfZAUCIhajF7WoJVFiLKal9QvHfZYsWyc5ss9hE+Pen4dOTIBmuhO8ed9NGsF eSYgY4cSGvdhOZ6XsUUU+IAKRntedSN7OGrjoc4aNg6TtZl8fYmD3jfimT4Lk6xc rXaC8nDCYNEGkbwDqwUz4s4k4VzxdlA4X+Z7yu5zHypFB5qTLBP4d74B4QI+I7pN PjljUABMbqfI8FMny59oVFxSqBrCiPZfl35C2fe3xbilO+TX/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmR1Cwm8DgUFvVhsg1TMlckPDNTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjY3YmMwYzQtZTExMS0z ZmE3LThlYTEtNDQyZWNiYzA1MGE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxufMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBchCyV3pSMWt6CiZKNhDPbw6V3ehj8eiUfiZgbiqu5GXRRnscIpsk5 W4tms1cMqNIxUqJ4h8Ks9bI+WRTajkkrvl9wkVCHrTibp500oZPgu250eOLcObBo 3Kr7LFOlklFGBpUdDxv6GSo2QAoA4bMZxZwIGjTeUQNAHwRRKkqMVO2OqcDXNMdr os/92t8eFkAI3vOBR751i8R8y/QG0l90d3QsofXDT957BZWCsOxmmZVHa00o4/rA byISSnBI7QHu36+96p9LU/ypQyjtHFNi5t7ykMdpSocYNm4BzEPauameJBWDzbas OKnejj9Ru9kIPU1v3oGxH7Hqz82GZu0= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:32 2025 by rpki-client