$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1e57db43-a98c-3c7d-8905-09fb54e6712a.roa File: 1e57db43-a98c-3c7d-8905-09fb54e6712a.roa (raw, json) Hash identifier: +Ny9HbN2kVhLDMl3zlRxCJy+plbZYdsBZCFli7c4qdM= Subject key identifier: 67:F3:FC:5C:28:77:64:67:91:A0:3A:C6:40:9E:42:E2:CA:76:20:D2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CB05CC9CA41D5692359B5C5D0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1e57db43-a98c-3c7d-8905-09fb54e6712a.roa Signing time: Thu 29 Jan 2026 19:23:52 +0000 ROA not before: Thu 29 Jan 2026 19:23:52 +0000 ROA not after: Wed 29 Apr 2026 18:23:52 +0000 asID: 32613 IP address blocks: 23.27.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b0:5c:c9:ca:41:d5:69:23:59:b5:c5:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 19:23:52 2026 GMT Not After : Apr 29 18:23:52 2026 GMT Subject: CN=13a91b8a-afc7-468b-9d1e-56060e715604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:04:8d:c9:68:90:18:0e:1f:43:fa:c3:9e:6c: 2d:48:94:2b:ac:c9:11:26:58:77:cd:f0:c4:1d:fa: d9:04:1e:8c:9b:72:c1:18:a1:a9:de:52:46:66:7d: aa:f0:b0:18:6b:70:92:c9:c2:87:5a:19:75:03:4f: 0b:6d:6c:ab:0d:f3:29:3b:25:b9:22:5f:cf:bb:5a: cd:35:a5:bd:1c:60:a8:f4:64:8f:b2:43:75:9f:c7: 1c:a7:8e:e2:71:da:ad:4e:23:f1:2a:92:a1:bc:70: aa:ea:d0:4a:51:be:1f:40:12:55:25:42:4c:e3:7e: d6:f9:a7:b7:0a:45:16:aa:1c:56:3b:bd:c3:93:6d: 9e:ab:34:8c:ee:42:69:c9:70:b6:cd:8a:07:35:c5: 8a:04:a8:09:b9:10:be:07:25:c9:57:18:39:66:6f: d8:e2:bd:d8:21:02:06:71:8b:24:aa:f9:8c:1e:67: ae:ef:52:3b:c2:8d:a7:2b:99:e8:bb:09:ed:3b:1b: ca:35:7b:75:e2:09:7b:54:31:57:b6:f0:e6:6a:8d: 9e:65:54:9b:3c:ed:8e:0a:a7:ae:eb:2a:4b:67:e6: c3:01:e1:9a:a2:70:5b:54:88:99:59:e4:75:12:11: ce:ff:c1:f9:58:10:be:f6:73:d9:02:b2:27:4b:d0: b3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:F3:FC:5C:28:77:64:67:91:A0:3A:C6:40:9E:42:E2:CA:76:20:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1e57db43-a98c-3c7d-8905-09fb54e6712a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:d2:b5:12:61:ab:1c:a6:cd:47:74:57:5f:b6:6b:e7:a2:09: c1:6e:df:55:55:c6:63:1f:9b:7b:32:d0:07:bd:25:3c:ce:d6: 37:a6:fb:f6:08:c7:84:97:f5:23:ef:00:e8:cd:7d:59:4c:cf: 08:83:a9:8a:27:12:b1:d1:28:45:ed:bc:3f:e2:9f:04:4d:96: 6f:a8:ad:8c:dd:9f:f3:0f:f8:eb:27:69:5d:11:a5:9b:80:80: 71:59:c1:fc:29:8d:09:66:20:3e:04:90:2b:48:e8:cd:e4:85: e1:bf:42:47:76:ec:ae:78:4d:be:e3:3a:fd:5d:8a:c1:c4:3d: 51:fb:6d:bc:c0:32:d3:b6:d3:1d:90:1e:0b:11:60:72:de:31: 97:68:92:f9:8f:c0:81:b3:4f:c2:71:c7:61:96:63:00:6c:48: 9e:5c:38:65:82:af:b5:d9:d8:5f:f1:a4:d4:ac:2f:4b:19:af: 06:12:f2:a8:0e:d6:4d:3e:2b:fb:4c:a9:07:cc:83:81:d7:e6: 2e:df:ee:79:1d:2f:9a:b4:d2:7d:d4:e9:eb:75:d8:8d:ae:09: 2b:9e:f8:13:18:ae:a3:1c:85:21:3d:f2:b6:78:42:3e:63:3e: c0:6a:7c:71:3a:b1:6f:14:9c:99:26:9a:bb:53:59:6f:56:65: 18:b8:32:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEywXMnKQdVpI1m1xdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEyOTE5MjM1MloXDTI2MDQyOTE4MjM1MlowLzEtMCsGA1UEAxMk MTNhOTFiOGEtYWZjNy00NjhiLTlkMWUtNTYwNjBlNzE1NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQSNyWiQGA4fQ/rDnmwtSJQrrMkRJlh3zfDE HfrZBB6Mm3LBGKGp3lJGZn2q8LAYa3CSycKHWhl1A08LbWyrDfMpOyW5Il/Pu1rN NaW9HGCo9GSPskN1n8ccp47icdqtTiPxKpKhvHCq6tBKUb4fQBJVJUJM437W+ae3 CkUWqhxWO73Dk22eqzSM7kJpyXC2zYoHNcWKBKgJuRC+ByXJVxg5Zm/Y4r3YIQIG cYskqvmMHmeu71I7wo2nK5nouwntOxvKNXt14gl7VDFXtvDmao2eZVSbPO2OCqeu 6ypLZ+bDAeGaonBbVIiZWeR1EhHO/8H5WBC+9nPZArInS9CzjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfz/Fwod2RnkaA6xkCeQuLKdiDSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWU1N2RiNDMtYTk4Yy0z YzdkLTg5MDUtMDlmYjU0ZTY3MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvStRJhqxymzUd0V1+2a+eiCcFu31VVxmMfm3sy0Ae9JTzO1jem+/YI x4SX9SPvAOjNfVlMzwiDqYonErHRKEXtvD/inwRNlm+orYzdn/MP+OsnaV0RpZuA gHFZwfwpjQlmID4EkCtI6M3kheG/Qkd27K54Tb7jOv1disHEPVH7bbzAMtO20x2Q HgsRYHLeMZdokvmPwIGzT8Jxx2GWYwBsSJ5cOGWCr7XZ2F/xpNSsL0sZrwYS8qgO 1k0+K/tMqQfMg4HX5i7f7nkdL5q00n3U6et12I2uCSue+BMYrqMchSE98rZ4Qj5j PsBqfHE6sW8UnJkmmrtTWW9WZRi4Moc= -----END CERTIFICATE-----Generated at Thu Feb 26 10:34:45 2026 by rpki-client