$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27dec6af-ac74-31f4-9fe6-30e656287cdb.roa File: 27dec6af-ac74-31f4-9fe6-30e656287cdb.roa (raw, json) Hash identifier: /ILGM+ZPBiGErKFp1bnsuywn2Qc/5w+/O3w+V5YCuw4= Subject key identifier: 74:45:73:FC:EE:A9:A1:E3:1D:B9:22:F1:7A:44:D1:F1:A5:0D:85:C8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4985C3EB0D04C65E9580EE80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27dec6af-ac74-31f4-9fe6-30e656287cdb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3257 IP address blocks: 23.27.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:c3:eb:0d:04:c6:5e:95:80:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=97f9858c-ba34-4f4d-a618-3c5ef4bb8d2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:be:ff:1c:06:e6:86:d4:c5:f8:32:bb:da:b8: 2b:94:d2:30:98:a6:59:f0:b2:d5:ea:ef:bf:d5:63: bf:c0:9f:8f:be:8f:c8:4d:99:fb:54:03:01:66:43: 54:a3:cb:c5:a3:af:7b:0d:d7:40:9e:a5:ad:71:0c: 22:c9:cc:be:c5:0c:e0:66:8e:b7:a0:80:59:dd:e0: 30:30:6c:f5:dd:74:ea:2f:12:1b:8c:a2:91:5d:34: fd:34:42:ae:18:0e:3e:21:ae:ee:f8:e3:7c:e1:f3: a1:e7:75:a3:92:ba:65:f3:19:88:a5:0a:f5:5b:19: 70:ae:d1:fe:e2:ea:48:d1:49:18:8a:cf:48:4d:45: 30:32:6e:97:31:8b:7e:df:3c:fc:f2:c8:87:ec:0e: ff:04:a9:1e:da:89:62:a8:68:53:94:fb:0e:7b:03: 89:b9:8e:b7:dd:98:bc:0e:d0:47:57:64:ca:80:7b: d8:18:ab:f3:09:fa:c4:51:fa:12:8e:f9:bd:67:ef: ae:32:34:2f:ca:f1:59:a5:e1:c8:55:87:4a:90:88: 15:ea:49:f3:bc:00:24:e4:8e:1d:c5:eb:17:a0:8f: 5d:2f:81:8b:4f:9c:d2:6b:2c:ed:1c:3c:c8:a2:62: ad:d7:d7:54:91:ed:ea:4c:34:c2:b8:8d:3d:e1:c9: d1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:73:FC:EE:A9:A1:E3:1D:B9:22:F1:7A:44:D1:F1:A5:0D:85:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27dec6af-ac74-31f4-9fe6-30e656287cdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:4e:70:12:32:a4:7e:89:55:a1:17:8a:95:2a:2d:84:29:1a: 99:55:d6:bd:b6:74:de:02:2f:ba:33:f8:dc:91:ee:96:4f:23: 14:9a:b2:f4:04:74:d9:cd:88:53:8d:24:e7:99:cc:fc:76:ef: aa:bb:03:48:e5:48:fd:7b:35:83:a0:d3:f3:41:e5:1f:f3:fa: e3:6f:30:bd:f1:a4:7e:54:ba:44:7d:ac:05:f8:f2:8d:ea:05: fe:30:0b:53:e1:65:0d:4a:b9:bc:67:20:14:d2:e3:37:62:14: ff:a4:1c:3b:6a:1c:db:f1:7d:fb:14:7a:38:bf:02:26:0d:8e: eb:dc:11:f7:35:0a:31:64:a7:2d:9f:42:0d:4b:aa:22:22:39: a0:ce:d7:5f:66:b9:64:96:0d:71:f1:89:72:43:6a:e8:f0:ba: e0:db:4c:66:28:6c:25:04:39:c9:9c:04:55:00:23:27:4d:51: 9a:b0:84:2a:e0:80:2a:8b:9f:6d:da:af:46:08:1f:dc:03:7d: 4c:81:92:7b:89:7b:ed:62:82:f3:f8:94:0e:e1:26:e2:92:3d: a6:1a:03:d4:3b:cd:0c:18:44:da:6a:4b:d7:2b:43:2c:b9:86: 3e:0f:69:70:33:df:c7:f3:99:1f:ca:fc:30:df:7b:52:b7:01: 6e:a3:7b:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhcPrDQTGXpWA7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTdmOTg1OGMtYmEzNC00ZjRkLWE2MTgtM2M1ZWY0YmI4ZDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkb7/HAbmhtTF+DK72rgrlNIwmKZZ8LLV6u+/ 1WO/wJ+Pvo/ITZn7VAMBZkNUo8vFo697DddAnqWtcQwiycy+xQzgZo63oIBZ3eAw MGz13XTqLxIbjKKRXTT9NEKuGA4+Ia7u+ON84fOh53Wjkrpl8xmIpQr1WxlwrtH+ 4upI0UkYis9ITUUwMm6XMYt+3zz88siH7A7/BKke2oliqGhTlPsOewOJuY633Zi8 DtBHV2TKgHvYGKvzCfrEUfoSjvm9Z++uMjQvyvFZpeHIVYdKkIgV6knzvAAk5I4d xesXoI9dL4GLT5zSayztHDzIomKt19dUke3qTDTCuI094cnRUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRFc/zuqaHjHbki8XpE0fGlDYXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjdkZWM2YWYtYWM3NC0z MWY0LTlmZTYtMzBlNjU2Mjg3Y2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVOcBIypH6JVaEXipUqLYQpGplV1r22dN4CL7oz+NyR7pZPIxSasvQE dNnNiFONJOeZzPx276q7A0jlSP17NYOg0/NB5R/z+uNvML3xpH5UukR9rAX48o3q Bf4wC1PhZQ1KubxnIBTS4zdiFP+kHDtqHNvxffsUeji/AiYNjuvcEfc1CjFkpy2f Qg1LqiIiOaDO119muWSWDXHxiXJDaujwuuDbTGYobCUEOcmcBFUAIydNUZqwhCrg gCqLn23ar0YIH9wDfUyBknuJe+1igvP4lA7hJuKSPaYaA9Q7zQwYRNpqS9crQyy5 hj4PaXAz38fzmR/K/DDfe1K3AW6je1E= -----END CERTIFICATE-----Generated at Tue Oct 13 05:58:25 2026 by rpki-client