$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa File: 38b2a508-a156-3570-af47-e4798b36d921.roa (raw, json) Hash identifier: mT3uDVcxhfM0OJ3XkhMAFPbiUCUcO1Du64i/6+V7uxE= Subject key identifier: 18:2E:BF:82:E7:7E:63:51:46:9F:90:FC:D7:71:3E:7B:2B:B2:79:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DFBD61A181DAE020C8BD65180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 212238 IP address blocks: 23.27.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d6:1a:18:1d:ae:02:0c:8b:d6:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=cc6a28ad-1b12-4434-8d01-338d33570897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8d:a2:c0:31:8a:ba:af:3f:59:3e:8d:e8:cb: 12:81:b3:41:58:88:d0:bb:58:2d:55:7e:e1:11:c8: e5:48:fa:19:bd:d5:11:60:ae:72:78:2a:d9:7e:5d: 5f:fb:92:88:ee:25:c5:93:01:61:7f:92:69:1e:e8: 94:30:4a:15:fb:69:50:eb:b3:12:7b:15:48:98:67: be:1e:74:c2:31:66:24:fd:5b:1a:c9:d6:69:ff:89: 6a:38:19:c6:ae:b8:10:f9:68:61:a9:af:b5:dd:44: da:b0:ac:58:ab:e1:c0:ae:fb:fa:86:72:5e:dd:f9: ce:ea:4b:3d:52:e2:8b:88:65:1b:c9:bc:38:eb:5a: 2a:b9:d6:13:ad:76:5a:49:b3:40:08:fd:1d:e1:95: 49:64:9f:6e:9c:26:5b:c1:7b:76:05:01:cc:b5:61: 36:45:a9:81:af:11:6c:54:09:05:82:b4:7b:9f:9a: e4:99:6d:32:5b:c6:dc:46:06:cd:1a:91:80:46:18: 2b:b1:f8:de:fe:a8:22:74:c4:9e:3e:9e:66:45:9c: f2:70:a8:6a:66:57:1d:45:5c:6f:c0:74:70:81:85: 99:53:00:bd:a6:43:86:7c:e8:00:2e:e0:7c:6d:b7: 3d:d3:ac:08:ef:eb:30:98:47:8b:5e:28:2e:a6:c5: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:2E:BF:82:E7:7E:63:51:46:9F:90:FC:D7:71:3E:7B:2B:B2:79:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:79:b6:99:7e:93:6a:55:e9:31:a9:3e:9e:10:e5:b9:0f:cc: 9f:80:f1:52:40:fa:b5:cf:d5:dd:fa:7e:ad:e7:00:2d:2d:a5: 50:38:e7:80:28:67:24:31:c1:7f:d4:98:03:e2:d7:7d:cd:60: 6e:af:62:0a:c3:17:7f:18:ef:e4:59:c5:b8:2a:4b:16:77:52: 61:1f:e9:e7:62:05:6e:80:bc:91:f0:ce:a5:8b:59:ed:58:89: 4a:6c:46:e0:67:0e:53:b2:b8:d0:f1:3b:9c:1a:7d:93:66:29: 7e:76:dd:bf:6c:78:de:4e:cf:e2:97:92:d1:2b:5b:22:b6:bd: ec:73:ee:63:2f:92:55:64:3c:d0:04:1e:ba:7b:17:aa:52:e5: e4:d9:79:eb:2d:e9:81:4a:81:fc:22:a3:cc:82:80:fd:81:60: 27:f2:0b:d0:98:39:42:37:c5:bc:c0:db:9f:2a:a3:8d:07:4c: 41:00:76:fe:a0:51:42:17:ea:e0:f6:28:df:4f:ec:65:e2:82: fe:c6:7d:66:34:e3:19:39:65:3b:28:33:cf:15:ae:1c:b0:4a: e1:4f:c0:b0:5d:eb:19:49:d1:6e:de:bd:a8:d6:a6:5b:e7:ef: 44:28:d0:2f:36:d2:62:1c:22:cb:78:d6:42:09:3b:59:1c:fa: 61:35:89:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371hoYHa4CDIvWUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk Y2M2YTI4YWQtMWIxMi00NDM0LThkMDEtMzM4ZDMzNTcwODk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtI2iwDGKuq8/WT6N6MsSgbNBWIjQu1gtVX7h EcjlSPoZvdURYK5yeCrZfl1f+5KI7iXFkwFhf5JpHuiUMEoV+2lQ67MSexVImGe+ HnTCMWYk/VsaydZp/4lqOBnGrrgQ+Whhqa+13UTasKxYq+HArvv6hnJe3fnO6ks9 UuKLiGUbybw461oqudYTrXZaSbNACP0d4ZVJZJ9unCZbwXt2BQHMtWE2RamBrxFs VAkFgrR7n5rkmW0yW8bcRgbNGpGARhgrsfje/qgidMSePp5mRZzycKhqZlcdRVxv wHRwgYWZUwC9pkOGfOgALuB8bbc906wI7+swmEeLXigupsW9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBguv4LnfmNRRp+Q/NdxPnsrsnkgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzhiMmE1MDgtYTE1Ni0z NTcwLWFmNDctZTQ3OThiMzZkOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF5tpl+k2pV6TGpPp4Q5bkPzJ+A8VJA+rXP1d36fq3nAC0tpVA454Ao ZyQxwX/UmAPi133NYG6vYgrDF38Y7+RZxbgqSxZ3UmEf6ediBW6AvJHwzqWLWe1Y iUpsRuBnDlOyuNDxO5wafZNmKX523b9seN5Oz+KXktErWyK2vexz7mMvklVkPNAE Hrp7F6pS5eTZeest6YFKgfwio8yCgP2BYCfyC9CYOUI3xbzA258qo40HTEEAdv6g UUIX6uD2KN9P7GXigv7GfWY04xk5ZTsoM88VrhywSuFPwLBd6xlJ0W7evajWplvn 70Qo0C820mIcIst41kIJO1kc+mE1iWU= -----END CERTIFICATE-----Generated at Thu May 28 17:14:21 2026 by rpki-client