$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4b3f242e-24dd-37ee-ad70-666e48122346.roa File: 4b3f242e-24dd-37ee-ad70-666e48122346.roa (raw, json) Hash identifier: 8eNj13jFR0EfxIb0sAoreKmLtbThuzzTBtaHWYyLBxY= Subject key identifier: 92:B6:05:26:27:96:3F:5A:A7:33:B3:B6:FF:A3:D9:12:E2:20:FC:B3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E3F2E06D4C77E6B292C00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4b3f242e-24dd-37ee-ad70-666e48122346.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212238 IP address blocks: 23.27.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:3f:2e:06:d4:c7:7e:6b:29:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=42e6c04c-b01b-4db1-b89b-38cd0c0d8899 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:66:61:ee:48:d1:af:ea:c1:cb:8e:58:5d:f4: 13:72:64:84:ee:cf:20:11:58:82:77:e1:2c:0c:43: 50:f2:dd:ce:cd:83:14:79:5d:07:aa:b6:f6:ab:27: ea:c2:53:47:f5:eb:ed:ee:ec:90:cc:20:e5:fa:90: 9e:de:d2:20:38:85:0a:0d:55:b7:96:72:0b:20:51: 38:64:4c:9d:1f:76:2d:c9:7c:de:e1:f1:41:4c:fe: fc:10:ab:bd:94:83:42:52:39:64:a6:b9:71:96:fb: b3:b5:82:18:24:47:a2:e8:93:57:bc:91:e0:34:cc: 78:c3:c9:75:47:9c:3b:9c:63:5f:9a:2b:e2:15:65: 9b:18:bd:e4:d4:10:ca:13:84:38:6f:47:0d:df:5d: 86:51:f6:84:1b:9d:e3:de:03:5f:b6:b2:6c:65:de: 2c:97:28:8e:98:04:10:0d:68:dd:15:63:64:8e:5e: 88:07:c8:e2:80:94:50:05:79:5c:8f:4b:f7:71:8c: d4:19:91:5e:34:90:e6:25:3a:25:50:64:e9:71:58: ed:11:3b:72:80:ff:e6:5c:6c:a0:c1:7e:dc:ce:77: 29:f8:54:7d:7a:de:1c:15:b7:b2:c8:12:bf:a1:1c: e7:de:b2:1b:2a:0f:f6:1d:2d:ad:3a:fa:50:ec:36: 95:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B6:05:26:27:96:3F:5A:A7:33:B3:B6:FF:A3:D9:12:E2:20:FC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4b3f242e-24dd-37ee-ad70-666e48122346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:79:b4:3e:17:2a:36:bf:b5:a5:d1:2e:e6:a2:b3:70:61:c4: d7:d1:90:a0:6c:d3:24:e8:48:eb:9a:e7:b2:92:7f:e2:4e:61: 35:33:c2:06:17:0f:d4:d3:e0:28:8a:9d:0d:19:3a:80:f6:c6: de:5b:40:7a:1f:97:1f:a8:91:16:fc:25:bf:54:49:f0:ee:c2: b5:28:d7:29:21:7b:02:98:80:39:45:78:2b:19:b9:b6:7b:1c: c7:d3:e2:67:9d:29:bf:3a:93:84:ef:6a:3a:b7:97:5e:3f:7a: 0e:42:7a:8e:b2:f0:04:48:d8:b5:6f:6c:f9:15:bb:d4:c7:7c: 6f:38:0a:63:45:c8:9a:20:19:b7:d2:3f:b0:13:12:03:e8:60: f0:9f:8a:86:aa:4f:e3:e2:38:34:2d:41:f2:44:14:fb:f5:7f: 63:6f:c5:97:df:3b:e3:3c:e7:2b:0f:db:6d:2d:97:ac:11:81: f9:b8:e4:21:65:96:0b:ca:19:e3:1b:7a:62:54:ab:4e:96:bf: 5b:25:dc:32:a9:41:28:de:45:0d:2d:4f:a6:96:8d:d5:f0:fc: 36:d8:ae:08:24:c3:1e:60:14:63:fa:67:37:af:56:8e:8c:da: fa:0a:55:8b:f5:4e:4f:8d:00:ec:d9:25:5f:53:e7:8f:e3:1d: 89:b9:80:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfj8uBtTHfmspLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDJlNmMwNGMtYjAxYi00ZGIxLWI4OWItMzhjZDBjMGQ4ODk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmZh7kjRr+rBy45YXfQTcmSE7s8gEViCd+Es DENQ8t3OzYMUeV0Hqrb2qyfqwlNH9evt7uyQzCDl+pCe3tIgOIUKDVW3lnILIFE4 ZEydH3YtyXze4fFBTP78EKu9lINCUjlkprlxlvuztYIYJEei6JNXvJHgNMx4w8l1 R5w7nGNfmiviFWWbGL3k1BDKE4Q4b0cN312GUfaEG53j3gNftrJsZd4slyiOmAQQ DWjdFWNkjl6IB8jigJRQBXlcj0v3cYzUGZFeNJDmJTolUGTpcVjtETtygP/mXGyg wX7czncp+FR9et4cFbeyyBK/oRzn3rIbKg/2HS2tOvpQ7DaV7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJK2BSYnlj9apzOztv+j2RLiIPyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGIzZjI0MmUtMjRkZC0z N2VlLWFkNzAtNjY2ZTQ4MTIyMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABN5tD4XKja/taXRLuais3BhxNfRkKBs0yToSOua57KSf+JOYTUzwgYX D9TT4CiKnQ0ZOoD2xt5bQHoflx+okRb8Jb9USfDuwrUo1ykhewKYgDlFeCsZubZ7 HMfT4medKb86k4Tvajq3l14/eg5Ceo6y8ARI2LVvbPkVu9THfG84CmNFyJogGbfS P7ATEgPoYPCfioaqT+PiODQtQfJEFPv1f2NvxZffO+M85ysP220tl6wRgfm45CFl lgvKGeMbemJUq06Wv1sl3DKpQSjeRQ0tT6aWjdXw/DbYrggkwx5gFGP6ZzevVo6M 2voKVYv1Tk+NAOzZJV9T54/jHYm5gDg= -----END CERTIFICATE-----Generated at Sun Oct 18 11:29:35 2026 by rpki-client