$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81c4d779-2ac9-3082-a287-a41a59eafa05.roa File: 81c4d779-2ac9-3082-a287-a41a59eafa05.roa (raw, json) Hash identifier: i8pQFIy35nb8KAUWOFlREus0dk82DBNJbWm2LT73oRU= Subject key identifier: 2E:30:C3:A2:8D:FC:D2:79:AD:58:FF:E7:51:48:97:9B:5E:BB:B8:0D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2E5C47EB4CFB238DA9C79B80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81c4d779-2ac9-3082-a287-a41a59eafa05.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 214238 IP address blocks: 23.27.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:47:eb:4c:fb:23:8d:a9:c7:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=38c5e87c-9823-4a97-af1f-dbbf4b242d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:55:42:76:93:80:a1:be:16:2a:7f:7e:46:4d: ba:b9:32:48:79:96:f2:20:3d:29:53:47:bc:93:4c: 1f:c4:ce:6c:2d:72:3c:26:91:c2:14:36:31:87:2f: 3d:2b:c0:52:29:c7:7a:31:b4:7e:8b:05:f9:13:22: 6d:9b:0a:58:9a:36:a5:d8:42:26:d8:1b:89:6a:04: f1:05:a5:5d:b2:f6:ab:dc:84:84:be:6e:cc:77:e8: f2:17:27:c1:db:60:db:c7:49:fc:78:c0:fe:fb:75: fc:2d:60:5b:f0:d7:58:d4:4e:56:13:50:ea:af:0a: 45:ac:dd:cd:38:de:d5:40:ef:e9:f9:e1:56:25:d1: d0:01:05:0b:8e:f8:dd:d2:4a:93:f6:0d:70:c2:b0: c9:42:5b:bf:20:a4:e3:c9:df:6e:ff:77:53:7a:4b: 52:79:5a:1f:71:87:59:c7:94:2c:d4:3a:a0:59:5f: 70:f5:67:ad:bc:32:d0:c4:2a:02:b8:2b:62:9b:30: e2:87:dc:84:4a:a7:13:2f:71:ba:78:8d:80:9e:23: cf:2c:8d:da:72:71:a0:45:4a:f2:62:1e:a1:65:96: 7c:b4:dc:29:9d:a2:eb:9d:3e:97:aa:e5:3e:37:77: c7:db:11:7a:dd:30:3b:34:e7:99:ce:64:af:35:e7: c5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:30:C3:A2:8D:FC:D2:79:AD:58:FF:E7:51:48:97:9B:5E:BB:B8:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81c4d779-2ac9-3082-a287-a41a59eafa05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:8e:c1:ef:6f:11:1d:ec:db:de:dd:ff:a3:f6:5f:14:17:18: 1a:3a:00:8d:e7:6b:0d:e2:38:d6:d0:72:a5:09:f4:e4:58:d2: 86:ce:2d:be:8a:b3:d9:17:a5:a7:50:28:a3:71:a0:09:0c:1b: 1e:16:89:56:81:83:63:4a:0a:96:a4:bf:4c:b2:6a:d8:9c:85: 44:a2:eb:05:65:01:9b:58:7a:f6:e3:6b:32:56:33:79:c7:28: a7:ba:89:b8:d4:24:c7:35:c4:b4:55:57:7b:52:a6:0d:39:fb: 72:54:53:6a:6e:32:b2:c0:bb:46:4c:cd:cf:16:82:ad:27:1b: 56:cc:65:53:1c:09:d7:a7:d5:0a:65:f5:46:87:a8:19:9e:06: 8a:2e:7f:ea:47:00:75:70:2d:49:77:fb:f9:fe:bf:f8:ed:47: 5d:e3:83:8e:56:a4:15:b1:58:a8:e3:8e:f0:aa:11:2e:25:0a: ef:99:de:9d:2b:9f:73:e8:d7:d0:cc:c2:fa:66:e8:dd:cd:8d: a8:c3:2d:85:86:80:b7:cc:79:67:84:df:3c:b9:d8:cd:5b:a8: 44:d4:b3:3d:f0:ff:df:5d:3b:7b:b5:04:fe:02:1f:0a:fa:d1: 3c:66:d5:5c:11:ce:4f:6f:b5:72:bb:f6:c6:1f:35:d7:47:a0: f0:10:ed:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXEfrTPsjjanHm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk MzhjNWU4N2MtOTgyMy00YTk3LWFmMWYtZGJiZjRiMjQyZDc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1VCdpOAob4WKn9+Rk26uTJIeZbyID0pU0e8 k0wfxM5sLXI8JpHCFDYxhy89K8BSKcd6MbR+iwX5EyJtmwpYmjal2EIm2BuJagTx BaVdsvar3ISEvm7Md+jyFyfB22Dbx0n8eMD++3X8LWBb8NdY1E5WE1DqrwpFrN3N ON7VQO/p+eFWJdHQAQULjvjd0kqT9g1wwrDJQlu/IKTjyd9u/3dTektSeVofcYdZ x5Qs1DqgWV9w9WetvDLQxCoCuCtimzDih9yESqcTL3G6eI2AniPPLI3acnGgRUry Yh6hZZZ8tNwpnaLrnT6XquU+N3fH2xF63TA7NOeZzmSvNefFXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC4ww6KN/NJ5rVj/51FIl5teu7gNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODFjNGQ3NzktMmFjOS0z MDgyLWEyODctYTQxYTU5ZWFmYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmOwe9vER3s297d/6P2XxQXGBo6AI3naw3iONbQcqUJ9ORY0obOLb6K s9kXpadQKKNxoAkMGx4WiVaBg2NKCpakv0yyatichUSi6wVlAZtYevbjazJWM3nH KKe6ibjUJMc1xLRVV3tSpg05+3JUU2puMrLAu0ZMzc8Wgq0nG1bMZVMcCden1Qpl 9UaHqBmeBoouf+pHAHVwLUl3+/n+v/jtR13jg45WpBWxWKjjjvCqES4lCu+Z3p0r n3Po19DMwvpm6N3NjajDLYWGgLfMeWeE3zy52M1bqETUsz3w/99dO3u1BP4CHwr6 0Txm1VwRzk9vtXK79sYfNddHoPAQ7YE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:56 2025 by rpki-client