$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa File: 38b2a508-a156-3570-af47-e4798b36d921.roa (raw, json) Hash identifier: B69kAjf2AvrKSypnjonpLtlgi7lnsAsxMM9qHspgiN4= Subject key identifier: F1:4D:E8:93:1B:D7:5C:AB:BB:3B:7B:08:85:32:10:38:89:58:3B:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EA7996B550C60FC0CE55D2C00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 212238 IP address blocks: 23.27.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:99:6b:55:0c:60:fc:0c:e5:5d:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=5937b6ab-46f2-4c69-a885-cf571ff83a29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:30:b4:ac:54:eb:96:a7:4e:0f:d7:8a:ab:0c: 16:f9:b3:90:01:c6:0d:45:ff:ea:43:f9:5d:03:37: bb:6b:c6:56:36:91:75:52:ce:aa:f0:19:7f:f6:64: 9d:6a:43:dd:aa:38:ba:4b:6b:75:ff:9c:34:92:7e: 74:62:14:2a:6a:83:62:3d:9e:b9:e4:b0:39:c7:00: f4:4c:b7:a3:98:9c:bc:0f:4f:d1:2c:29:5e:a9:3e: 67:36:c2:4d:c6:bf:cd:d0:ec:e7:72:3b:4d:37:97: b4:e2:4b:42:f5:68:7c:24:d4:85:42:90:42:b5:39: fd:69:8f:3a:55:d3:84:4b:ae:9e:65:a9:c4:29:69: 88:ee:2a:0c:56:6e:bd:98:6b:b2:16:9e:d7:99:de: 1f:fa:4d:ec:71:92:08:0f:ca:91:8d:91:b6:43:60: 53:ab:26:ec:3d:12:bf:16:ce:dd:e1:6b:1c:14:06: ef:53:b7:75:be:65:e9:24:a5:d9:a2:53:64:16:6a: 73:09:57:27:a4:32:c6:54:30:3f:fb:e8:29:60:3a: 07:c0:5a:7b:f9:22:50:f8:e1:6a:2f:d1:c7:c0:ba: bb:de:78:1e:cc:ab:57:7d:c9:aa:44:ab:90:9d:7d: 9d:44:fe:d5:eb:09:59:0a:63:59:a1:9b:2f:c9:f9: b1:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4D:E8:93:1B:D7:5C:AB:BB:3B:7B:08:85:32:10:38:89:58:3B:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:1b:2a:0a:dc:6f:ee:6a:5c:51:6d:ac:3d:26:94:d3:2c:98: ea:6a:b6:9b:56:86:c8:b0:31:03:be:48:2e:14:3d:95:34:74: de:07:eb:75:11:0d:15:ab:c8:20:85:7f:2c:9c:19:28:97:84: 86:dc:3c:aa:99:f9:31:ba:3b:0f:98:be:13:22:20:9d:da:3a: a1:ce:06:11:8c:e5:07:d9:ca:ae:fd:3a:d1:4b:44:54:a3:e7: fe:dc:d6:1f:5d:b4:21:96:0d:fe:b9:01:31:0d:78:cc:b3:1c: 3d:21:31:27:59:97:df:e5:f2:63:5f:2e:59:f5:d6:97:4c:85: a4:de:1e:aa:ad:f0:4b:93:af:35:58:ac:a0:1d:19:75:8f:02: 33:3e:92:aa:89:cb:4b:b1:a1:46:f6:51:5a:9e:90:39:03:5f: 26:e0:c3:9a:0a:5a:86:de:9f:12:b4:18:66:90:b4:e6:e9:ae: ac:bb:dd:20:90:d6:d8:84:7d:7c:16:51:65:eb:88:a9:0a:55: db:b6:64:d0:f7:ef:06:42:74:27:c9:f0:5f:af:c3:00:e5:d7: 82:ad:d7:6d:eb:26:63:5f:fd:71:95:aa:9b:8d:ad:6f:48:29: a8:41:9f:81:6b:fa:6a:84:0d:43:fa:a4:cb:1c:0e:72:60:b0: 1a:e5:c5:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmWtVDGD8DOVdLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NTkzN2I2YWItNDZmMi00YzY5LWE4ODUtY2Y1NzFmZjgzYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzC0rFTrlqdOD9eKqwwW+bOQAcYNRf/qQ/ld Aze7a8ZWNpF1Us6q8Bl/9mSdakPdqji6S2t1/5w0kn50YhQqaoNiPZ655LA5xwD0 TLejmJy8D0/RLCleqT5nNsJNxr/N0OzncjtNN5e04ktC9Wh8JNSFQpBCtTn9aY86 VdOES66eZanEKWmI7ioMVm69mGuyFp7Xmd4f+k3scZIID8qRjZG2Q2BTqybsPRK/ Fs7d4WscFAbvU7d1vmXpJKXZolNkFmpzCVcnpDLGVDA/++gpYDoHwFp7+SJQ+OFq L9HHwLq73ngezKtXfcmqRKuQnX2dRP7V6wlZCmNZoZsvyfmxVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFN6JMb11yruzt7CIUyEDiJWDsHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzhiMmE1MDgtYTE1Ni0z NTcwLWFmNDctZTQ3OThiMzZkOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEbKgrcb+5qXFFtrD0mlNMsmOpqtptWhsiwMQO+SC4UPZU0dN4H63UR DRWryCCFfyycGSiXhIbcPKqZ+TG6Ow+YvhMiIJ3aOqHOBhGM5QfZyq79OtFLRFSj 5/7c1h9dtCGWDf65ATENeMyzHD0hMSdZl9/l8mNfLln11pdMhaTeHqqt8EuTrzVY rKAdGXWPAjM+kqqJy0uxoUb2UVqekDkDXybgw5oKWobenxK0GGaQtObprqy73SCQ 1tiEfXwWUWXriKkKVdu2ZND37wZCdCfJ8F+vwwDl14Kt123rJmNf/XGVqpuNrW9I KahBn4Fr+mqEDUP6pMscDnJgsBrlxYY= -----END CERTIFICATE-----Generated at Thu Aug 27 16:07:28 2026 by rpki-client