$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9af2ec58-1602-3195-a985-8e4e8bb8c0ad.roa File: 9af2ec58-1602-3195-a985-8e4e8bb8c0ad.roa (raw, json) Hash identifier: 2vITAgSRn7VLejJfiAJMT1248IpXnJz7a43z5AIk6h0= Subject key identifier: AE:FD:DF:0F:80:CA:28:C0:53:D4:89:67:53:1C:72:47:FE:EF:77:1B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D7CCFDE078836F0CDD101F900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9af2ec58-1602-3195-a985-8e4e8bb8c0ad.roa Signing time: Mon 13 Apr 2026 01:00:24 +0000 ROA not before: Mon 13 Apr 2026 01:00:24 +0000 ROA not after: Sun 12 Jul 2026 01:00:24 +0000 asID: 40676 IP address blocks: 23.27.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7c:cf:de:07:88:36:f0:cd:d1:01:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 13 01:00:24 2026 GMT Not After : Jul 12 01:00:24 2026 GMT Subject: CN=3b089e4c-bda6-489c-9b4a-7f1b72f5eae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:07:25:98:3e:ac:e9:3b:55:67:65:da:a9: a2:9b:d6:bd:19:d6:e2:c2:29:df:0b:58:02:e5:ea: 0c:a2:8a:80:71:44:36:98:e5:03:af:37:16:12:a2: 06:b6:e7:ed:34:a2:fc:e8:eb:68:7c:a1:74:db:de: b5:02:7c:35:63:9e:24:ac:6e:1a:f9:19:c6:19:0a: 88:40:ef:15:39:9f:89:a3:7b:b4:52:b4:ea:08:e6: 5c:0c:11:62:60:17:70:fb:bd:20:51:67:32:1f:ea: fc:42:8e:61:6c:8c:13:6f:4c:26:5d:7c:aa:ac:45: 15:78:13:43:a8:a1:af:fc:79:8d:73:23:3b:1b:85: 4f:6b:58:b6:0f:f1:72:aa:93:fc:29:e2:c8:0a:08: 2e:8d:c7:b5:b5:22:87:ec:33:be:a6:ef:b8:47:c7: 64:ab:71:34:bd:1a:9a:13:20:74:da:6e:d6:b9:ee: 7d:23:50:cb:3b:0b:24:f0:b5:20:4a:72:f4:7d:e2: 17:04:9d:17:6c:6f:5e:9a:e8:d3:bf:45:16:1f:95: fe:4c:4a:eb:74:2f:ff:66:2e:4e:49:31:98:59:2e: 22:43:b8:db:ea:66:71:d6:21:3c:c4:84:b0:4f:5c: 99:de:c9:b3:87:7f:13:93:7f:08:57:d3:0b:b3:97: 79:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FD:DF:0F:80:CA:28:C0:53:D4:89:67:53:1C:72:47:FE:EF:77:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9af2ec58-1602-3195-a985-8e4e8bb8c0ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:03:c3:03:c9:1f:55:99:df:4a:4a:94:35:85:11:fd:a0:5a: b2:27:b5:ee:5b:24:f1:3c:cc:a9:24:26:10:78:a3:d2:c6:15: 66:55:f7:c6:fa:f9:55:7f:37:59:df:47:8d:72:4e:b5:90:1c: cc:8e:49:70:5d:82:6e:b3:f1:ac:64:a8:54:ab:42:10:12:45: d5:b0:de:4c:c7:2c:fe:76:b0:5c:a8:4d:1e:af:a7:a5:57:2d: 1b:ba:51:1e:60:74:92:1b:9a:f1:6a:55:7b:ae:ef:92:23:0e: b0:0e:45:45:04:97:17:33:e6:b0:6d:14:f0:c9:11:a9:25:0a: 52:40:18:cf:98:9b:90:60:c3:ca:b2:01:8e:dd:ec:25:46:58: d1:99:d5:55:a1:f6:2c:8c:ec:6a:a8:58:12:70:aa:01:fa:9f: 0e:73:0a:81:2f:ea:70:64:d6:42:a8:09:97:1c:77:99:5a:8f: 93:23:00:e9:1e:cd:4d:8a:14:3a:fe:75:ea:7c:24:e3:98:80: fc:b8:fc:73:2d:71:e4:7a:52:00:9f:d2:79:26:4c:3a:74:57: c1:01:c6:5c:2c:37:c5:57:30:a2:2a:25:bf:47:12:b7:da:7d: 39:d5:06:bf:d7:55:ec:38:e5:c0:05:38:b7:10:4a:c7:5d:1a: 9d:99:54:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE18z94HiDbwzdEB+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxMzAxMDAyNFoXDTI2MDcxMjAxMDAyNFowLzEtMCsGA1UEAxMk M2IwODllNGMtYmRhNi00ODljLTliNGEtN2YxYjcyZjVlYWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/cHJZg+rOk7VWdl2qmim9a9GdbiwinfC1gC 5eoMooqAcUQ2mOUDrzcWEqIGtuftNKL86OtofKF02961Anw1Y54krG4a+RnGGQqI QO8VOZ+Jo3u0UrTqCOZcDBFiYBdw+70gUWcyH+r8Qo5hbIwTb0wmXXyqrEUVeBND qKGv/HmNcyM7G4VPa1i2D/FyqpP8KeLICggujce1tSKH7DO+pu+4R8dkq3E0vRqa EyB02m7Wue59I1DLOwsk8LUgSnL0feIXBJ0XbG9emujTv0UWH5X+TErrdC//Zi5O STGYWS4iQ7jb6mZx1iE8xISwT1yZ3smzh38Tk38IV9MLs5d52QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK793w+AyijAU9SJZ1Mcckf+73cbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWFmMmVjNTgtMTYwMi0z MTk1LWE5ODUtOGU0ZThiYjhjMGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGADwwPJH1WZ30pKlDWFEf2gWrInte5bJPE8zKkkJhB4o9LGFWZV98b6 +VV/N1nfR41yTrWQHMyOSXBdgm6z8axkqFSrQhASRdWw3kzHLP52sFyoTR6vp6VX LRu6UR5gdJIbmvFqVXuu75IjDrAORUUElxcz5rBtFPDJEaklClJAGM+Ym5Bgw8qy AY7d7CVGWNGZ1VWh9iyM7GqoWBJwqgH6nw5zCoEv6nBk1kKoCZccd5laj5MjAOke zU2KFDr+dep8JOOYgPy4/HMtceR6UgCf0nkmTDp0V8EBxlwsN8VXMKIqJb9HErfa fTnVBr/XVew45cAFOLcQSsddGp2ZVFI= -----END CERTIFICATE-----Generated at Mon Apr 13 09:31:18 2026 by rpki-client