$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/806c538d-c6c9-34fd-8418-9946741e8796.roa File: 806c538d-c6c9-34fd-8418-9946741e8796.roa (raw, json) Hash identifier: q30gtLPbwzMXuUgJkqSQ22xm1g5g8ZsCkPm21knfhaE= Subject key identifier: 49:DE:AF:1E:5A:54:3F:66:3B:ED:4C:53:58:E9:33:3F:F3:97:09:89 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FB9B1C373C39C4C80300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/806c538d-c6c9-34fd-8418-9946741e8796.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 23.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fb:9b:1c:37:3c:39:c4:c8:03:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=1c09024f-5ded-4f3b-bff2-38a2c87bbc74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:af:8e:cc:1d:9c:a0:aa:25:6c:f7:e6:12: 41:c5:1c:69:fd:02:11:ea:65:d4:52:63:36:9a:44: 80:ac:27:6e:3f:0d:1a:0e:30:8f:6e:d3:a9:5d:14: ce:b0:4c:38:29:2c:3a:16:93:d2:ac:06:f4:5b:c7: 92:a5:46:ed:9f:f6:7f:de:52:6c:47:e7:91:54:ae: 2b:25:5c:d5:8a:1d:75:ab:8f:70:57:43:64:36:08: c3:52:7c:cd:b9:82:7f:bf:dd:10:8b:dd:67:42:4c: c3:38:d8:a1:87:ee:cf:93:b6:3e:5e:e3:83:48:cc: 28:c4:0f:35:04:df:43:f5:f5:3f:80:1e:76:72:1b: 66:0a:d1:5a:96:e1:21:67:9e:d1:af:cf:23:c7:2e: b2:17:35:77:00:20:0b:81:7b:88:69:c2:37:4d:a2: 1e:49:d5:fd:ef:4d:bc:a8:29:9d:1d:1d:c0:0f:ad: c3:f4:a2:01:54:3c:25:64:7d:e8:f4:3f:17:22:56: 04:46:cf:1e:a8:bc:94:af:75:01:e5:51:42:9e:eb: 1a:f9:a7:3b:0e:5d:ac:da:f2:2b:5e:77:c5:92:fa: 5a:10:a4:30:72:ec:1a:7d:4a:d8:eb:92:b4:ce:f2: 74:60:6c:7d:af:c5:aa:f3:76:a1:f4:99:9f:f4:34: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DE:AF:1E:5A:54:3F:66:3B:ED:4C:53:58:E9:33:3F:F3:97:09:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/806c538d-c6c9-34fd-8418-9946741e8796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:d0:f4:19:55:f3:83:d6:65:82:e4:87:d9:7e:c1:e4:49:49: b4:29:b9:46:8e:d3:c7:a7:87:c3:a4:1e:1f:7f:08:08:03:94: 15:06:d8:f6:57:bc:c5:d4:b3:e3:e4:53:10:fa:8c:01:cc:76: 2a:29:9c:cc:c7:88:f7:b8:24:d7:00:07:fe:39:0e:a2:51:62: f8:1c:07:f1:78:fb:67:15:a0:03:11:f2:75:b5:68:d3:fa:e0: 71:3c:5f:28:15:06:eb:0c:8c:28:ef:f9:41:d5:12:75:40:12: 58:92:c2:76:f8:66:73:38:9e:0a:4b:44:45:1d:f0:48:8f:d0: 78:c1:b8:cd:c8:5b:e2:c1:8d:14:14:b8:2d:5e:0c:0c:f7:23: 59:5b:81:52:55:44:6d:42:d4:d0:17:13:d2:72:13:36:ad:3e: c0:fb:59:ba:93:55:a3:52:15:81:36:36:cc:b3:aa:2c:19:b2: 46:53:5e:ba:05:ac:6e:64:e0:35:8f:ab:f3:e7:93:53:19:74: e0:91:d1:3d:bb:d7:0a:b0:e6:ef:82:22:1e:fc:0e:34:29:c1: 2f:bb:11:4b:d9:b6:fd:1e:f9:92:c2:03:b8:0f:19:be:8a:b1: f0:ca:ed:da:57:00:3d:77:a1:82:45:7f:98:ec:a9:6e:25:13: 21:1c:39:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/ubHDc8OcTIAwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk MWMwOTAyNGYtNWRlZC00ZjNiLWJmZjItMzhhMmM4N2JiYzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMavjswdnKCqJWz35hJBxRxp/QIR6mXUUmM2 mkSArCduPw0aDjCPbtOpXRTOsEw4KSw6FpPSrAb0W8eSpUbtn/Z/3lJsR+eRVK4r JVzVih11q49wV0NkNgjDUnzNuYJ/v90Qi91nQkzDONihh+7Pk7Y+XuODSMwoxA81 BN9D9fU/gB52chtmCtFaluEhZ57Rr88jxy6yFzV3ACALgXuIacI3TaIeSdX97028 qCmdHR3AD63D9KIBVDwlZH3o9D8XIlYERs8eqLyUr3UB5VFCnusa+ac7Dl2s2vIr XnfFkvpaEKQwcuwafUrY65K0zvJ0YGx9r8Wq83ah9Jmf9DRAsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnerx5aVD9mO+1MU1jpMz/zlwmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODA2YzUzOGQtYzZjOS0z NGZkLTg0MTgtOTk0Njc0MWU4Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7Q9BlV84PWZYLkh9l+weRJSbQpuUaO08enh8OkHh9/CAgDlBUG2PZX vMXUs+PkUxD6jAHMdiopnMzHiPe4JNcAB/45DqJRYvgcB/F4+2cVoAMR8nW1aNP6 4HE8XygVBusMjCjv+UHVEnVAEliSwnb4ZnM4ngpLREUd8EiP0HjBuM3IW+LBjRQU uC1eDAz3I1lbgVJVRG1C1NAXE9JyEzatPsD7WbqTVaNSFYE2NsyzqiwZskZTXroF rG5k4DWPq/Pnk1MZdOCR0T271wqw5u+CIh78DjQpwS+7EUvZtv0e+ZLCA7gPGb6K sfDK7dpXAD13oYJFf5jsqW4lEyEcOQo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:55 2025 by rpki-client