$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa File: 5acb3e17-f281-32e2-88a7-24f1b9182943.roa (raw, json) Hash identifier: uCvGF08300cr43p4NuWUFnPP8/1kpUhckla4TOJR3v4= Subject key identifier: 85:18:C2:C9:54:31:9D:84:8E:A6:72:EA:23:5E:EE:17:36:04:39:89 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E4AEF53972E7C53DE64EEBF00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa Signing time: Thu 25 Jun 2026 21:00:12 +0000 ROA not before: Thu 25 Jun 2026 21:00:12 +0000 ROA not after: Wed 23 Sep 2026 21:00:12 +0000 asID: 149440 IP address blocks: 23.27.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4a:ef:53:97:2e:7c:53:de:64:ee:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 25 21:00:12 2026 GMT Not After : Sep 23 21:00:12 2026 GMT Subject: CN=119b3a11-3c12-4934-a017-45406a9c82af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:5f:4b:73:fe:d5:03:81:5c:00:37:a5:57:63: 15:d7:f2:e2:48:58:c3:b4:0e:9d:39:71:a5:54:12: c1:25:17:01:39:09:ee:48:28:0c:a6:b3:48:ac:e2: 9c:be:a5:a1:b2:b6:60:77:02:64:01:2c:5f:0d:2a: 65:32:71:31:4e:4b:b6:72:73:7b:c0:5e:ea:30:50: d8:c1:22:63:35:9d:93:3d:05:83:c3:66:4a:33:44: bc:62:ea:5c:f5:6d:75:94:e3:5d:52:7b:c0:0a:fa: 81:dd:4d:55:0c:a4:55:fe:19:14:93:2a:bb:09:bb: bd:78:64:d1:eb:ab:04:19:ad:8d:72:ba:a4:98:35: 04:1e:bb:af:da:19:68:99:ef:14:44:af:0b:6e:68: d5:df:fa:18:5e:fd:f6:15:e1:9e:ca:44:97:36:4d: 86:de:f8:a6:6c:3b:15:b5:4c:8e:df:b3:e2:c4:26: 42:87:17:00:f0:a3:cd:ae:84:a5:f3:2c:f3:1c:c5: e1:97:32:c9:5b:5f:49:b0:58:9d:ee:7e:10:57:46: d2:26:8d:c0:c0:ea:e0:58:75:25:92:55:fd:fa:9f: 69:8f:71:22:d9:e2:69:c1:03:64:c4:4e:86:55:60: 23:6e:55:f6:97:17:f6:f9:c0:db:49:3f:7e:23:51: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:C2:C9:54:31:9D:84:8E:A6:72:EA:23:5E:EE:17:36:04:39:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a4:46:27:23:79:3c:7d:df:42:ba:a2:e6:2f:fc:e8:c0:e1: 18:9d:8c:d1:f5:b9:91:31:12:ec:96:fb:f3:f9:c6:f4:db:f2: 98:05:38:e3:c1:19:b1:61:7a:aa:78:53:db:42:e4:0d:e9:ed: 4d:38:52:74:12:05:f6:d8:db:a7:5f:c0:c2:f1:d1:55:17:42: 86:8a:47:55:b4:da:01:91:0c:4c:dc:a4:94:02:85:1a:2d:13: 3d:a9:64:31:a6:98:fb:a5:1c:3f:1a:d8:de:5f:50:7a:65:b3: d2:c9:82:66:72:73:21:d5:30:0b:3d:80:f8:29:c4:55:9d:2b: f6:a8:28:80:d4:35:fd:7b:5c:a2:7b:7d:65:0b:cd:fa:07:89: df:75:ec:12:26:66:1d:f3:50:ec:03:f0:0c:24:2e:9c:3d:fb: b8:91:8c:f8:8c:37:83:82:40:bd:e1:93:b8:9b:7f:96:22:ad: db:e8:a3:b8:b0:f7:61:ad:f0:90:de:5a:9d:58:fc:54:27:58: 86:28:ad:af:a9:20:d2:d4:13:c5:f9:55:99:d2:84:04:ab:d1: eb:f8:58:0f:e1:38:d2:93:d9:67:e8:28:1f:30:eb:59:90:83: 6a:58:ed:09:71:a5:3c:3a:22:36:9b:b6:74:1b:33:4b:0d:03: 47:a9:64:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5K71OXLnxT3mTuvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDYyNTIxMDAxMloXDTI2MDkyMzIxMDAxMlowLzEtMCsGA1UEAxMk MTE5YjNhMTEtM2MxMi00OTM0LWEwMTctNDU0MDZhOWM4MmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1l9Lc/7VA4FcADelV2MV1/LiSFjDtA6dOXGl VBLBJRcBOQnuSCgMprNIrOKcvqWhsrZgdwJkASxfDSplMnExTku2cnN7wF7qMFDY wSJjNZ2TPQWDw2ZKM0S8Yupc9W11lONdUnvACvqB3U1VDKRV/hkUkyq7Cbu9eGTR 66sEGa2NcrqkmDUEHruv2hlome8URK8LbmjV3/oYXv32FeGeykSXNk2G3vimbDsV tUyO37PixCZChxcA8KPNroSl8yzzHMXhlzLJW19JsFid7n4QV0bSJo3AwOrgWHUl klX9+p9pj3Ei2eJpwQNkxE6GVWAjblX2lxf2+cDbST9+I1Gi5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUYwslUMZ2EjqZy6iNe7hc2BDmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWFjYjNlMTctZjI4MS0z MmUyLTg4YTctMjRmMWI5MTgyOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqkRicjeTx930K6ouYv/OjA4RidjNH1uZExEuyW+/P5xvTb8pgFOOPB GbFheqp4U9tC5A3p7U04UnQSBfbY26dfwMLx0VUXQoaKR1W02gGRDEzcpJQChRot Ez2pZDGmmPulHD8a2N5fUHpls9LJgmZycyHVMAs9gPgpxFWdK/aoKIDUNf17XKJ7 fWULzfoHid917BImZh3zUOwD8AwkLpw9+7iRjPiMN4OCQL3hk7ibf5Yirdvoo7iw 92Gt8JDeWp1Y/FQnWIYora+pINLUE8X5VZnShASr0ev4WA/hONKT2WfoKB8w61mQ g2pY7QlxpTw6IjabtnQbM0sNA0epZJc= -----END CERTIFICATE-----Generated at Mon Jul 13 12:54:17 2026 by rpki-client