$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b3acf0-78e9-3d17-9958-7af71bbec206.roa File: a2b3acf0-78e9-3d17-9958-7af71bbec206.roa (raw, json) Hash identifier: R8kYbZcbSWvo4viKUfAKh+XA2grUEYCl9IpbHklgKnM= Subject key identifier: C7:E2:E1:E7:C8:22:F5:6C:C1:6C:52:2E:97:F7:63:74:A0:38:A9:51 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CB3EC5D12642A742A2DBC9740 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b3acf0-78e9-3d17-9958-7af71bbec206.roa Signing time: Sat 31 Jan 2026 02:00:32 +0000 ROA not before: Sat 31 Jan 2026 02:00:32 +0000 ROA not after: Fri 01 May 2026 01:00:32 +0000 asID: 212669 IP address blocks: 23.27.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b3:ec:5d:12:64:2a:74:2a:2d:bc:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 31 02:00:32 2026 GMT Not After : May 1 01:00:32 2026 GMT Subject: CN=c91a3560-0840-41e9-9e75-52bbe9d3b124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:3a:e7:b0:05:47:ca:58:8f:b6:54:a5:a7:50: f6:95:71:86:d8:5d:07:57:aa:d1:c4:57:82:6c:18: c4:58:95:67:4e:25:97:80:5e:63:19:a2:db:9b:90: 07:a6:4a:51:ef:80:f9:bb:8b:55:4a:a7:f1:c3:54: 86:23:db:39:de:72:e5:0c:77:31:05:42:8b:05:0c: 3a:21:79:42:2f:cc:b5:ac:e0:d8:92:d7:87:15:a4: 59:99:88:2e:ba:9a:51:49:6f:ed:35:f6:a6:d5:13: 77:04:bf:80:0b:1e:91:ef:2c:e1:ec:c3:87:48:9c: 10:56:91:a2:60:34:08:37:3d:cc:a7:aa:65:20:6e: 0c:b6:92:a4:3a:e3:7e:7c:94:65:7d:c8:9b:c3:49: a9:dc:b4:b4:81:50:44:96:eb:94:73:3d:0d:ff:49: 48:e4:2a:a0:35:d4:2b:4b:cf:b9:0b:8c:09:1c:72: 1f:57:4a:ef:ba:5d:72:47:c4:55:66:a1:29:a0:85: f3:0e:ef:55:24:ee:20:a9:06:c2:db:27:4f:42:c0: d0:b5:89:af:f7:59:93:6a:dd:9d:d0:77:97:91:20: e7:16:b5:c2:a9:2f:62:5f:7b:56:72:bd:98:61:02: 76:2f:fa:5b:4d:02:66:aa:8b:83:24:8a:50:10:74: fc:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E2:E1:E7:C8:22:F5:6C:C1:6C:52:2E:97:F7:63:74:A0:38:A9:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b3acf0-78e9-3d17-9958-7af71bbec206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:35:f0:98:70:88:c0:98:2c:59:4b:e0:a8:3f:13:09:25:d9: ee:d3:37:82:22:ea:39:5a:16:9b:a4:85:6a:38:14:96:b5:21: c8:f9:48:09:4d:58:36:70:d0:21:34:c5:0c:41:6f:08:d9:a3: 7d:41:45:b6:4e:83:44:42:49:4c:7f:9e:44:bc:2b:99:e2:72: db:7d:88:92:a2:7a:9d:f0:0a:56:22:25:32:cd:6b:04:c2:2f: 36:18:c8:f5:14:e6:46:05:b2:04:56:ee:ac:e9:10:89:48:34: 87:32:4c:e5:ea:86:78:91:68:c6:03:3f:1d:a3:21:bd:3d:02: 75:2d:3d:2f:e6:b5:9d:a0:25:95:b9:21:86:59:d1:ea:27:7d: ff:0c:8e:a8:9a:df:40:a9:ca:8c:24:91:c2:58:d2:31:a5:be: 6a:f7:45:ae:d7:3e:48:49:94:83:7e:44:47:8a:29:0a:b6:48: b0:99:18:44:83:4c:08:37:d5:45:9e:f5:63:2f:c7:90:10:fd: b8:87:6e:0e:0c:89:d6:80:85:96:c2:4f:a4:4f:ad:c2:40:60: 60:4c:54:29:0e:5b:ab:73:c8:02:0d:39:aa:60:c2:e9:a5:f6: bb:a6:88:d1:10:8c:0e:bd:5f:48:de:f4:af:f6:fb:83:af:f6: 3a:06:d3:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyz7F0SZCp0Ki28l0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEzMTAyMDAzMloXDTI2MDUwMTAxMDAzMlowLzEtMCsGA1UEAxMk YzkxYTM1NjAtMDg0MC00MWU5LTllNzUtNTJiYmU5ZDNiMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDrnsAVHyliPtlSlp1D2lXGG2F0HV6rRxFeC bBjEWJVnTiWXgF5jGaLbm5AHpkpR74D5u4tVSqfxw1SGI9s53nLlDHcxBUKLBQw6 IXlCL8y1rODYkteHFaRZmYguuppRSW/tNfam1RN3BL+ACx6R7yzh7MOHSJwQVpGi YDQINz3Mp6plIG4MtpKkOuN+fJRlfcibw0mp3LS0gVBEluuUcz0N/0lI5CqgNdQr S8+5C4wJHHIfV0rvul1yR8RVZqEpoIXzDu9VJO4gqQbC2ydPQsDQtYmv91mTat2d 0HeXkSDnFrXCqS9iX3tWcr2YYQJ2L/pbTQJmqouDJIpQEHT8BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMfi4efIIvVswWxSLpf3Y3SgOKlRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTJiM2FjZjAtNzhlOS0z ZDE3LTk5NTgtN2FmNzFiYmVjMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG418JhwiMCYLFlL4Kg/Ewkl2e7TN4Ii6jlaFpukhWo4FJa1Icj5SAlN WDZw0CE0xQxBbwjZo31BRbZOg0RCSUx/nkS8K5nictt9iJKiep3wClYiJTLNawTC LzYYyPUU5kYFsgRW7qzpEIlINIcyTOXqhniRaMYDPx2jIb09AnUtPS/mtZ2gJZW5 IYZZ0eonff8Mjqia30CpyowkkcJY0jGlvmr3Ra7XPkhJlIN+REeKKQq2SLCZGESD TAg31UWe9WMvx5AQ/biHbg4MidaAhZbCT6RPrcJAYGBMVCkOW6tzyAINOapgwuml 9rumiNEQjA69X0je9K/2+4Ov9joG0y0= -----END CERTIFICATE-----Generated at Thu Feb 26 09:28:11 2026 by rpki-client