$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa File: f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa (raw, json) Hash identifier: M6Ee8lkpz/nJMusop7VeNA2MVIESKYWU5SRvQOmOWbQ= Subject key identifier: 43:53:92:D0:24:E4:05:AC:31:9F:0A:D8:F9:1E:B0:06:F1:FB:D0:6F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D7358FDC6C87E8B17B2220 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 149440 IP address blocks: 23.27.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:35:8f:dc:6c:87:e8:b1:7b:22:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=5af84825-3e72-430c-9799-6d88bf8093cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:99:58:03:0b:7b:50:96:4f:00:21:08:18:fa: 5c:5c:16:52:83:07:c9:83:20:f4:31:ad:41:0b:a6: 7e:af:43:9c:72:dd:da:55:f2:64:63:2b:ef:5b:e5: 01:2b:8e:62:23:76:b0:f7:a4:0b:40:1e:d6:e7:f5: 51:7f:83:14:25:b2:c1:3d:37:7d:64:e7:75:ba:10: 18:eb:71:ee:db:b5:e1:5f:88:a1:03:4f:4e:b9:93: c6:bf:6c:cb:26:4f:21:64:82:9f:4c:e6:eb:ec:70: 82:9f:71:02:67:c7:a6:ec:82:f2:28:f9:49:95:b7: cc:cc:cb:15:f1:45:e9:41:e2:c0:e7:73:37:f6:61: 9e:34:e3:e5:a5:5f:92:59:33:15:ca:36:94:21:41: ca:78:a7:ee:3f:5f:3a:a6:21:5f:85:dc:e0:bf:31: cf:a8:65:36:8b:56:04:2a:63:f9:b3:93:99:4f:34: ac:6f:bd:f6:7b:d8:7a:fa:98:ed:e9:29:2e:da:67: b7:34:d7:22:de:c0:69:a2:46:f0:a3:4d:6c:7c:06: 42:02:1c:b8:d3:14:6e:6f:e4:68:1e:f3:57:01:6f: 0e:98:95:f0:e6:20:e1:7b:cb:b0:5b:c5:9a:d2:24: b3:ad:d3:9b:e4:84:e2:a0:42:95:84:a5:fd:f2:8f: 57:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:53:92:D0:24:E4:05:AC:31:9F:0A:D8:F9:1E:B0:06:F1:FB:D0:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:23:b0:7d:a4:54:5e:fd:41:e2:e5:21:5f:3f:35:7b:28:53: 95:79:61:9e:e6:bf:c3:f4:29:78:80:cc:01:72:95:3d:b4:67: b6:01:ae:75:cb:40:f4:3e:14:81:45:1d:0e:00:93:b7:38:3f: 08:6d:a8:c5:28:45:9a:86:1a:cb:42:2e:c8:04:dc:96:b8:ce: 13:fa:b8:5c:17:be:25:f5:5d:36:04:85:c8:1a:05:ed:4b:f5: a4:6f:7d:d7:87:0f:83:a2:02:78:d4:7a:30:bb:90:f6:46:1d: 4b:c1:a0:1f:b8:f1:66:e6:48:86:eb:a7:a4:25:a1:40:33:52: de:d4:cc:a0:75:05:14:0f:c3:0f:b5:6d:7b:3a:5b:d1:06:6a: c2:bc:c4:9c:d6:10:4b:49:74:22:0b:ae:0d:2d:77:a7:e4:d6: 0d:6e:94:4d:25:5d:56:f0:c1:60:87:7a:ac:aa:a3:a4:b9:a9: 92:b0:31:78:b6:93:7d:2f:61:ad:9f:2e:b4:ce:52:8a:7b:9b: 30:9c:10:78:0e:8b:f8:b6:4e:9d:32:4b:db:41:55:eb:1c:b1: 0e:50:67:3f:40:c9:c9:66:96:b2:d8:7d:e1:c2:8c:eb:2e:b2: 70:91:33:6a:40:f8:c9:26:b4:fe:3d:40:d9:d3:fe:18:01:fe: a2:d7:69:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zWP3GyH6LF7IiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NWFmODQ4MjUtM2U3Mi00MzBjLTk3OTktNmQ4OGJmODA5M2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1plYAwt7UJZPACEIGPpcXBZSgwfJgyD0Ma1B C6Z+r0Occt3aVfJkYyvvW+UBK45iI3aw96QLQB7W5/VRf4MUJbLBPTd9ZOd1uhAY 63Hu27XhX4ihA09OuZPGv2zLJk8hZIKfTObr7HCCn3ECZ8em7ILyKPlJlbfMzMsV 8UXpQeLA53M39mGeNOPlpV+SWTMVyjaUIUHKeKfuP186piFfhdzgvzHPqGU2i1YE KmP5s5OZTzSsb732e9h6+pjt6Sku2me3NNci3sBpokbwo01sfAZCAhy40xRub+Ro HvNXAW8OmJXw5iDhe8uwW8Wa0iSzrdOb5ITioEKVhKX98o9XPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENTktAk5AWsMZ8K2PkesAbx+9BvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjEwY2UxYzEtMTJiMy0z NzFhLTkxMWItNWRjNDdjMWM0NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAjsH2kVF79QeLlIV8/NXsoU5V5YZ7mv8P0KXiAzAFylT20Z7YBrnXL QPQ+FIFFHQ4Ak7c4PwhtqMUoRZqGGstCLsgE3Ja4zhP6uFwXviX1XTYEhcgaBe1L 9aRvfdeHD4OiAnjUejC7kPZGHUvBoB+48WbmSIbrp6QloUAzUt7UzKB1BRQPww+1 bXs6W9EGasK8xJzWEEtJdCILrg0td6fk1g1ulE0lXVbwwWCHeqyqo6S5qZKwMXi2 k30vYa2fLrTOUop7mzCcEHgOi/i2Tp0yS9tBVescsQ5QZz9AyclmlrLYfeHCjOsu snCRM2pA+MkmtP49QNnT/hgB/qLXacU= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:45 2025 by rpki-client