$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df4dc2dc-706e-32da-927c-df4a7d59c4f7.roa File: df4dc2dc-706e-32da-927c-df4a7d59c4f7.roa (raw, json) Hash identifier: onVCcfR54ApfhWei9JKWLS9XmbUZPgtUGqx6t27aD4Y= Subject key identifier: 92:59:60:AC:69:A9:EE:52:92:A6:25:FB:A3:BB:72:AC:E4:B5:40:6B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B5E48A9A2CE3B04A4F4E5EE80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df4dc2dc-706e-32da-927c-df4a7d59c4f7.roa Signing time: Tue 30 Sep 2025 17:00:05 +0000 ROA not before: Tue 30 Sep 2025 17:00:05 +0000 ROA not after: Mon 29 Dec 2025 18:00:05 +0000 asID: 7029 IP address blocks: 23.27.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:48:a9:a2:ce:3b:04:a4:f4:e5:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 30 17:00:05 2025 GMT Not After : Dec 29 18:00:05 2025 GMT Subject: CN=a402fb43-1eb6-448b-b4be-20335dc4eb9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:69:42:d4:35:6e:a8:52:6b:30:07:f6:15:3f: 29:d1:4c:62:a3:6e:11:71:89:f0:20:78:c3:71:bd: 1e:0e:cb:fa:74:ee:07:b4:a1:b9:ed:f2:2a:8f:da: e9:eb:7c:7d:71:b1:06:b4:53:d3:8f:c4:e3:35:3c: 93:b3:a2:ff:97:6c:16:49:f7:10:a3:45:f8:ff:13: a8:84:1f:69:36:0a:d7:af:98:72:1a:18:3c:0e:e3: 93:07:bb:01:0e:21:88:00:f5:b2:a7:e4:4b:34:b6: 8e:e6:1e:78:15:66:2b:cb:ce:8a:a7:02:2b:20:61: bd:9c:c7:15:bd:04:be:69:8a:a6:4d:aa:a5:04:7f: 95:a3:a7:da:0a:f1:e8:16:6c:27:51:b2:83:98:ef: af:f8:8d:bf:f3:8e:65:0f:6f:9d:30:c6:59:b3:19: de:07:ce:98:58:ea:c0:fd:ac:24:df:fd:92:ec:92: e6:02:26:f6:3c:77:b2:c7:65:6d:74:82:d4:8b:1c: c7:75:c8:3c:fe:4c:3b:81:3e:13:eb:f9:5f:fa:9b: e7:62:7c:66:1d:8f:42:a4:ff:7a:90:5e:ec:94:6a: 0c:be:3c:cb:e3:4c:0c:4e:08:f5:8a:64:d5:82:6d: 79:87:4a:c4:6b:ef:30:81:87:77:9b:ff:e4:b1:3f: d4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:59:60:AC:69:A9:EE:52:92:A6:25:FB:A3:BB:72:AC:E4:B5:40:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/df4dc2dc-706e-32da-927c-df4a7d59c4f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:2d:8b:42:7a:9f:9d:09:17:44:6b:35:a4:84:20:00:7f:3b: 81:af:31:3e:6f:e1:be:f1:70:df:83:9a:97:6a:cb:0f:7c:9a: f3:1d:83:3b:b6:75:41:a0:2b:8f:cc:2b:89:a9:d1:bd:6b:24: d3:ba:3a:86:da:45:9f:3a:19:69:c8:2f:cb:e0:16:d6:cd:a0: 62:27:28:b0:f0:70:7e:27:69:60:ff:60:2f:03:ae:d3:a9:e5: 7c:1e:bb:dd:3d:46:17:39:1b:c5:91:cb:07:8b:34:c2:a4:8a: 19:8d:f3:47:14:4a:2e:b7:30:fe:04:fa:d5:dd:02:bf:91:98: 9f:37:22:81:af:ca:2a:14:12:64:a7:60:9d:bb:c1:9f:a5:09: 2c:3e:57:b5:9d:f6:ef:3e:10:f0:62:f8:97:01:84:d8:f5:88: 90:4f:7a:8b:93:06:bb:3c:06:b8:5c:bb:cf:19:ce:89:66:9f: 01:47:1e:22:0b:9e:7a:db:84:fd:d6:b6:6f:d6:33:81:77:73: c9:6e:22:34:3c:a0:10:1b:b6:2e:16:01:a2:98:8b:5b:7b:32: 85:49:81:62:3e:2f:28:0a:26:e1:b9:56:1e:63:ff:be:a4:be: 81:78:d2:5d:e8:92:00:14:57:39:5f:71:57:7b:98:2e:30:54: 2a:d1:00:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEteSKmizjsEpPTl7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkzMDE3MDAwNVoXDTI1MTIyOTE4MDAwNVowLzEtMCsGA1UEAxMk YTQwMmZiNDMtMWViNi00NDhiLWI0YmUtMjAzMzVkYzRlYjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmlC1DVuqFJrMAf2FT8p0Uxio24RcYnwIHjD cb0eDsv6dO4HtKG57fIqj9rp63x9cbEGtFPTj8TjNTyTs6L/l2wWSfcQo0X4/xOo hB9pNgrXr5hyGhg8DuOTB7sBDiGIAPWyp+RLNLaO5h54FWYry86KpwIrIGG9nMcV vQS+aYqmTaqlBH+Vo6faCvHoFmwnUbKDmO+v+I2/845lD2+dMMZZsxneB86YWOrA /awk3/2S7JLmAib2PHeyx2VtdILUixzHdcg8/kw7gT4T6/lf+pvnYnxmHY9CpP96 kF7slGoMvjzL40wMTgj1imTVgm15h0rEa+8wgYd3m//ksT/UXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJJZYKxpqe5SkqYl+6O7cqzktUBrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGY0ZGMyZGMtNzA2ZS0z MmRhLTkyN2MtZGY0YTdkNTljNGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoti0J6n50JF0RrNaSEIAB/O4GvMT5v4b7xcN+Dmpdqyw98mvMdgzu2 dUGgK4/MK4mp0b1rJNO6OobaRZ86GWnIL8vgFtbNoGInKLDwcH4naWD/YC8DrtOp 5Xweu909Rhc5G8WRyweLNMKkihmN80cUSi63MP4E+tXdAr+RmJ83IoGvyioUEmSn YJ27wZ+lCSw+V7Wd9u8+EPBi+JcBhNj1iJBPeouTBrs8Brhcu88ZzolmnwFHHiIL nnrbhP3Wtm/WM4F3c8luIjQ8oBAbti4WAaKYi1t7MoVJgWI+LygKJuG5Vh5j/76k voF40l3okgAUVzlfcVd7mC4wVCrRANQ= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:08 2025 by rpki-client