$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa File: ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa (raw, json) Hash identifier: wBcReHh0iGVFOet4FTmmiISqx2lyPpaSPO8PbiDeyAM= Subject key identifier: AC:8D:0E:3E:0B:6A:DB:42:02:6E:B3:1C:A5:5E:F3:A7:FD:4F:AB:B3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4BAC62EB0C3D32A94B6FA240 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa Signing time: Wed 24 Sep 2025 01:00:31 +0000 ROA not before: Wed 24 Sep 2025 01:00:31 +0000 ROA not after: Tue 23 Dec 2025 02:00:31 +0000 asID: 11404 IP address blocks: 23.27.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4b:ac:62:eb:0c:3d:32:a9:4b:6f:a2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 24 01:00:31 2025 GMT Not After : Dec 23 02:00:31 2025 GMT Subject: CN=4768e9d8-4603-4664-959e-6f0e9a93e4b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:5e:6f:b9:29:30:8d:4e:f1:b4:83:31:b4:1b: 9c:a0:41:06:54:1e:df:2e:1f:20:3c:8e:38:36:0b: 77:ad:7c:e4:52:90:e8:78:84:51:66:4c:89:85:36: 90:ed:05:23:da:e3:30:be:dd:35:65:64:55:46:1c: 13:ba:2f:86:44:72:0f:27:7a:fa:f3:17:1e:71:cd: 39:0e:cc:44:af:7c:29:4c:e5:77:3e:25:71:1a:0f: bc:91:36:1c:94:29:41:85:7e:77:27:ad:71:b1:c4: 56:ef:14:35:58:cc:70:99:00:9c:af:95:47:33:c0: 75:0d:51:08:e9:58:a8:fb:32:da:3a:90:97:4c:a6: 31:b0:c1:23:09:56:fc:a4:89:30:bf:e0:2b:ef:d5: e3:e5:b0:be:ed:c4:c3:86:9b:89:9f:81:53:40:8b: db:75:c6:01:07:96:a9:92:b5:2d:62:ef:3b:49:c6: be:ab:87:ce:30:e7:0d:61:06:53:cf:72:35:4e:23: b4:4e:1a:cf:8d:2e:4f:c9:44:5b:b1:8f:4d:19:96: cb:9f:6a:29:da:dd:ba:80:b4:66:da:2d:12:03:e0: be:4a:e1:1b:aa:db:74:df:c1:26:09:33:af:01:d0: 2b:39:b3:52:75:35:d7:d0:b1:58:9a:f8:ce:1c:ed: e1:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8D:0E:3E:0B:6A:DB:42:02:6E:B3:1C:A5:5E:F3:A7:FD:4F:AB:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:eb:d8:9c:38:a0:27:ce:6d:90:53:92:81:fd:e8:f5:14:65: 95:ec:00:41:96:d1:97:55:82:26:c0:bb:76:2a:09:3e:e9:58: 92:10:9d:ed:37:6c:43:fe:18:85:cb:0a:49:6b:64:96:2e:f3: f8:d1:f2:2f:87:8a:05:f9:62:b0:7d:0f:15:f4:9d:c8:4c:63: 77:af:8a:8c:c9:52:d5:23:ef:a2:34:b7:36:6d:d2:7e:4b:f2: 83:5b:08:45:59:a6:89:6b:b3:57:51:cf:a9:a3:94:f4:8d:7c: f0:ec:47:f3:a9:cf:ff:ff:d0:e5:da:76:2a:63:07:cf:76:c7: 3a:77:5a:6a:3c:58:d4:b5:bd:12:ea:09:60:3f:ce:56:35:9f: 77:45:25:cb:2d:d0:36:72:8f:ff:22:ca:47:9b:e1:05:39:4c: 04:84:52:fb:60:ff:8b:22:c9:79:25:ac:df:71:ae:64:3b:eb: 74:6a:aa:d7:94:c8:e1:0f:0c:68:fb:d0:60:89:9a:d1:a5:36: 2b:fe:dd:1b:3d:8d:da:8a:d5:86:6c:31:7b:d0:6a:e9:42:d8: 92:39:5f:cf:eb:4a:3e:6c:46:36:9c:ab:65:f1:41:e2:d3:5d: 2d:74:69:c1:73:e3:4f:e3:19:0e:2b:1a:12:1a:be:0f:38:a1: 19:cc:78:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtLrGLrDD0yqUtvokAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNDAxMDAzMVoXDTI1MTIyMzAyMDAzMVowLzEtMCsGA1UEAxMk NDc2OGU5ZDgtNDYwMy00NjY0LTk1OWUtNmYwZTlhOTNlNGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwF5vuSkwjU7xtIMxtBucoEEGVB7fLh8gPI44 Ngt3rXzkUpDoeIRRZkyJhTaQ7QUj2uMwvt01ZWRVRhwTui+GRHIPJ3r68xcecc05 DsxEr3wpTOV3PiVxGg+8kTYclClBhX53J61xscRW7xQ1WMxwmQCcr5VHM8B1DVEI 6Vio+zLaOpCXTKYxsMEjCVb8pIkwv+Ar79Xj5bC+7cTDhpuJn4FTQIvbdcYBB5ap krUtYu87Sca+q4fOMOcNYQZTz3I1TiO0ThrPjS5PyURbsY9NGZbLn2op2t26gLRm 2i0SA+C+SuEbqtt038EmCTOvAdArObNSdTXX0LFYmvjOHO3hVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKyNDj4LattCAm6zHKVe86f9T6uzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmE3YWU4ZDItOGMzNy0z NTlkLTkzZGQtYTJlODZiNmI0MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDr2Jw4oCfObZBTkoH96PUUZZXsAEGW0ZdVgibAu3YqCT7pWJIQne03 bEP+GIXLCklrZJYu8/jR8i+HigX5YrB9DxX0nchMY3eviozJUtUj76I0tzZt0n5L 8oNbCEVZpolrs1dRz6mjlPSNfPDsR/Opz///0OXadipjB892xzp3Wmo8WNS1vRLq CWA/zlY1n3dFJcst0DZyj/8iykeb4QU5TASEUvtg/4siyXklrN9xrmQ763RqqteU yOEPDGj70GCJmtGlNiv+3Rs9jdqK1YZsMXvQaulC2JI5X8/rSj5sRjacq2XxQeLT XS10acFz40/jGQ4rGhIavg84oRnMeGY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:45 2025 by rpki-client