$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81fe0a9c-b5ed-3ec8-9388-d63919634ea1.roa File: 81fe0a9c-b5ed-3ec8-9388-d63919634ea1.roa (raw, json) Hash identifier: omesa5+rkocDxA87CETjrn6TokEIOlIgzpEFlraVsFA= Subject key identifier: B6:BC:AF:A3:D0:B7:82:6F:80:D7:65:5E:77:06:48:9D:11:02:29:ED Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D735F31A864C07924B6900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81fe0a9c-b5ed-3ec8-9388-d63919634ea1.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 10557 IP address blocks: 23.27.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:35:f3:1a:86:4c:07:92:4b:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=3b20affb-6ef3-43e4-9863-1bba1f7a1e4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:0d:2e:12:36:22:db:e1:d5:eb:dd:75:8c:88: 79:e9:76:e4:d9:06:25:61:07:8c:f7:02:3e:2a:cb: a0:02:37:0a:2a:f6:be:62:23:91:92:3f:ab:e2:90: 15:1e:89:39:aa:8b:90:b7:7a:58:eb:16:37:c7:46: cc:fc:28:6b:1b:a1:db:78:55:a1:40:9a:50:1d:b4: a6:1a:56:05:29:6c:af:49:c4:e0:3f:97:91:85:8c: ce:26:c1:4b:56:0e:e6:64:15:4d:2b:92:d0:e7:a7: c3:82:95:15:21:a8:65:77:00:70:df:cf:5c:cd:59: 20:72:a1:35:08:6d:a7:9d:00:73:3d:36:6c:22:ec: 36:b2:a5:68:d3:bc:36:0a:df:a9:1a:4e:b3:e1:11: 41:d2:10:05:2a:71:d8:c5:ae:59:d5:c7:99:ed:72: 93:2f:08:87:e4:ed:b0:e2:24:37:34:db:e9:67:a8: b2:60:5b:04:ce:53:a3:27:6d:e4:33:98:db:c1:94: 09:a1:d5:9b:6a:64:aa:ca:36:84:a8:5a:2c:17:61: 30:3a:35:a2:15:f9:6d:26:41:2b:54:b5:9e:1f:44: a5:67:f1:9a:2c:aa:ba:a8:b5:5d:56:c1:e7:1d:b9: 3f:05:3f:cc:57:98:15:5f:f1:b6:84:31:e0:fc:cc: d4:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:BC:AF:A3:D0:B7:82:6F:80:D7:65:5E:77:06:48:9D:11:02:29:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/81fe0a9c-b5ed-3ec8-9388-d63919634ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:70:3e:23:9b:7c:c5:7b:72:a5:87:b9:cd:5a:f3:9d:3b:86: 3f:05:c8:5f:85:7c:7b:72:80:08:70:6a:d3:9b:06:90:04:33: d5:f1:6a:b6:6c:43:1d:4b:67:e3:0d:43:ef:c8:68:58:1b:be: fa:a0:18:e2:fa:9c:e7:ef:25:3b:ca:a6:c7:31:56:d4:a9:d2: c3:71:08:f3:18:37:6f:a7:69:ac:63:2e:75:7c:7d:86:bf:d2: 65:d8:f0:55:88:5a:b5:1a:e6:f4:64:1b:54:ca:f1:e6:e6:bd: 44:63:53:ec:59:ec:2b:0b:cb:e0:ac:7b:84:16:84:fb:8d:d3: e9:c6:cb:86:17:7f:59:03:a6:1b:23:2c:c1:36:6e:8d:3b:2f: 2f:5a:7b:1a:dd:2c:88:1b:00:61:04:c4:07:7d:3c:cb:88:41: 43:94:1b:40:d3:58:e0:bd:86:a7:37:68:19:b0:86:10:62:e2: f3:cd:92:0e:5f:94:b5:ab:2a:71:9a:18:67:6d:b6:93:2b:b1: de:a9:3d:6b:f6:3c:93:c6:c6:db:c3:81:8b:d6:4c:a9:ae:e8: d9:50:63:6f:0e:c3:91:11:82:d0:48:a3:8a:38:4b:96:04:ec: e8:77:58:d8:01:23:45:93:4c:9e:9f:34:2e:35:9a:bb:60:52: 0d:c3:bf:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zXzGoZMB5JLaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk M2IyMGFmZmItNmVmMy00M2U0LTk4NjMtMWJiYTFmN2ExZTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApw0uEjYi2+HV6911jIh56Xbk2QYlYQeM9wI+ KsugAjcKKva+YiORkj+r4pAVHok5qouQt3pY6xY3x0bM/ChrG6HbeFWhQJpQHbSm GlYFKWyvScTgP5eRhYzOJsFLVg7mZBVNK5LQ56fDgpUVIahldwBw389czVkgcqE1 CG2nnQBzPTZsIuw2sqVo07w2Ct+pGk6z4RFB0hAFKnHYxa5Z1ceZ7XKTLwiH5O2w 4iQ3NNvpZ6iyYFsEzlOjJ23kM5jbwZQJodWbamSqyjaEqFosF2EwOjWiFfltJkEr VLWeH0SlZ/GaLKq6qLVdVsHnHbk/BT/MV5gVX/G2hDHg/MzU9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLa8r6PQt4JvgNdlXncGSJ0RAintMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODFmZTBhOWMtYjVlZC0z ZWM4LTkzODgtZDYzOTE5NjM0ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1wPiObfMV7cqWHuc1a8507hj8FyF+FfHtygAhwatObBpAEM9XxarZs Qx1LZ+MNQ+/IaFgbvvqgGOL6nOfvJTvKpscxVtSp0sNxCPMYN2+naaxjLnV8fYa/ 0mXY8FWIWrUa5vRkG1TK8ebmvURjU+xZ7CsLy+Cse4QWhPuN0+nGy4YXf1kDphsj LME2bo07Ly9aexrdLIgbAGEExAd9PMuIQUOUG0DTWOC9hqc3aBmwhhBi4vPNkg5f lLWrKnGaGGdttpMrsd6pPWv2PJPGxtvDgYvWTKmu6NlQY28Ow5ERgtBIo4o4S5YE 7Oh3WNgBI0WTTJ6fNC41mrtgUg3DvxQ= -----END CERTIFICATE-----Generated at Sat Oct 11 08:44:16 2025 by rpki-client