$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6efb7b67-2837-3a65-a7a4-08464c08505e.roa File: 6efb7b67-2837-3a65-a7a4-08464c08505e.roa (raw, json) Hash identifier: QPXeaZYt3KxGbdbyJHCsHAckdNUANBiAk8zQPrICiRs= Subject key identifier: 62:EE:E2:A6:15:28:74:51:AB:75:39:51:85:29:FB:48:2E:AB:AC:4C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F549D4AA2568C594254B53700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6efb7b67-2837-3a65-a7a4-08464c08505e.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 149440 IP address blocks: 23.27.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4a:a2:56:8c:59:42:54:b5:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8a78f25e-847d-4585-b4e2-f445d990a25d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8f:ba:38:45:5b:57:a0:60:9b:9e:4d:59:57: 15:26:78:70:c4:73:98:e2:53:4d:81:10:83:e3:bf: 86:d0:7d:19:4a:f8:4b:09:c3:94:ba:75:9d:f9:bb: d4:bc:75:79:d4:03:5c:ef:43:cc:c7:42:80:b8:0d: b8:07:05:ad:55:10:66:20:9b:65:64:bb:1a:4a:b4: ac:7e:a0:44:70:71:6a:08:e2:80:00:01:00:1a:90: 38:48:9a:48:5b:d9:10:18:53:88:9f:59:c6:ad:45: 76:f6:c8:8b:06:72:0d:a0:fd:99:76:52:04:bf:4c: eb:51:d8:de:2d:9e:21:5c:d4:bf:2b:87:e9:0c:7b: 24:50:f0:5d:d4:83:ec:a1:9d:2d:a6:66:1c:ac:55: 2b:75:cc:50:41:15:6a:f8:c0:b1:10:f1:f5:6b:af: 65:33:dc:3f:74:1f:f2:4a:48:f3:42:21:6d:7f:4d: e4:e9:d2:b1:68:ce:33:e4:ad:ef:94:3b:e9:e1:a7: c2:8b:46:44:46:00:e0:58:37:5c:ea:7c:b0:38:b2: 24:4f:6d:88:25:3d:f2:a2:7d:f6:dc:cb:22:d0:e0: f4:80:23:e7:aa:c3:3f:b3:16:57:f6:1b:e8:09:e1: 4f:50:42:ac:72:a8:75:73:c1:c3:6d:8b:a9:d1:84: 34:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:EE:E2:A6:15:28:74:51:AB:75:39:51:85:29:FB:48:2E:AB:AC:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6efb7b67-2837-3a65-a7a4-08464c08505e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:59:7b:6d:50:34:32:db:6b:72:1d:ce:68:69:c9:83:d8:fc: 15:07:47:05:d2:01:a9:73:9d:57:a9:66:2c:a8:3a:51:e7:f3: 29:45:58:5e:6c:c8:5b:a9:b6:be:07:11:a0:3c:fb:3a:65:ca: 55:a4:a3:41:86:b4:45:2e:4b:a7:8a:bf:61:49:60:39:73:ab: e3:7a:0a:6a:d4:85:bf:ea:fd:6e:f5:c6:c6:55:7a:c5:bf:0f: f3:cc:1d:ad:96:26:1d:b8:12:c8:12:a4:a4:33:5f:33:03:a5: dd:71:3a:4a:76:02:36:34:87:af:53:d3:41:d7:f7:b8:8b:21: f5:df:c0:fa:d9:09:eb:07:b7:53:09:de:e5:e6:da:f4:28:62: 59:36:fe:af:6e:89:99:93:de:cd:ac:b8:92:3c:76:c5:45:32: 71:04:de:11:9a:a4:2f:d9:d5:45:85:a7:ef:d4:85:0e:1b:13: 05:cd:55:33:22:e7:02:03:2a:91:39:b4:84:22:d7:f9:89:e0: 5c:e5:2e:40:52:82:50:6e:70:14:65:c5:07:4c:fa:64:25:85: 92:e9:33:4e:68:8a:1e:1b:63:92:15:d3:8d:a3:1b:de:d0:00: 25:9c:75:9a:95:d9:62:d6:06:43:62:76:36:02:fb:6b:03:b8: 99:a5:27:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnUqiVoxZQlS1NwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGE3OGYyNWUtODQ3ZC00NTg1LWI0ZTItZjQ0NWQ5OTBhMjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4+6OEVbV6Bgm55NWVcVJnhwxHOY4lNNgRCD 47+G0H0ZSvhLCcOUunWd+bvUvHV51ANc70PMx0KAuA24BwWtVRBmIJtlZLsaSrSs fqBEcHFqCOKAAAEAGpA4SJpIW9kQGFOIn1nGrUV29siLBnINoP2ZdlIEv0zrUdje LZ4hXNS/K4fpDHskUPBd1IPsoZ0tpmYcrFUrdcxQQRVq+MCxEPH1a69lM9w/dB/y SkjzQiFtf03k6dKxaM4z5K3vlDvp4afCi0ZERgDgWDdc6nywOLIkT22IJT3yon32 3Msi0OD0gCPnqsM/sxZX9hvoCeFPUEKscqh1c8HDbYup0YQ0bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLu4qYVKHRRq3U5UYUp+0guq6xMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmVmYjdiNjctMjgzNy0z YTY1LWE3YTQtMDg0NjRjMDg1MDVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRZe21QNDLba3IdzmhpyYPY/BUHRwXSAalznVepZiyoOlHn8ylFWF5s yFuptr4HEaA8+zplylWko0GGtEUuS6eKv2FJYDlzq+N6CmrUhb/q/W71xsZVesW/ D/PMHa2WJh24EsgSpKQzXzMDpd1xOkp2AjY0h69T00HX97iLIfXfwPrZCesHt1MJ 3uXm2vQoYlk2/q9uiZmT3s2suJI8dsVFMnEE3hGapC/Z1UWFp+/UhQ4bEwXNVTMi 5wIDKpE5tIQi1/mJ4FzlLkBSglBucBRlxQdM+mQlhZLpM05oih4bY5IV042jG97Q ACWcdZqV2WLWBkNidjYC+2sDuJmlJ3w= -----END CERTIFICATE-----Generated at Wed Oct 14 04:06:34 2026 by rpki-client