$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0dcae94-f21d-3bd9-91c9-ef47cd20e384.roa File: b0dcae94-f21d-3bd9-91c9-ef47cd20e384.roa (raw, json) Hash identifier: +wKT+q/qUQyuWbTsCEKR7VEnhfj/0Jq1RxybXJ+1uKE= Subject key identifier: 19:97:42:91:34:C4:C4:01:1C:31:BA:32:48:F9:11:75:B8:AC:BE:FA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D739D294EF6F7CA7FF21EA1C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0dcae94-f21d-3bd9-91c9-ef47cd20e384.roa Signing time: Thu 09 Apr 2026 17:56:12 +0000 ROA not before: Thu 09 Apr 2026 17:56:12 +0000 ROA not after: Wed 08 Jul 2026 17:56:12 +0000 asID: 3356 IP address blocks: 23.27.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:73:9d:29:4e:f6:f7:ca:7f:f2:1e:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 9 17:56:12 2026 GMT Not After : Jul 8 17:56:12 2026 GMT Subject: CN=fcc65e1d-efd6-47be-b857-38f5af685e0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f2:d7:07:06:6f:25:c3:6a:cc:51:20:7e:1c: 55:ce:db:98:ee:c9:1f:43:81:ba:92:48:57:bf:76: d0:44:f7:e8:88:93:66:53:25:82:d7:fb:b5:40:08: dd:93:0f:b2:39:12:09:d2:64:cc:6c:c6:f6:e9:12: 7a:2e:d0:20:6e:d0:06:8a:cc:02:e5:45:64:7c:61: 88:de:c4:02:f3:6e:92:9b:c4:ea:05:65:0c:c5:f1: 3d:b3:ac:50:5a:c9:fa:75:aa:46:44:cc:a0:ad:3a: 90:57:a8:e5:8a:07:47:1a:fd:68:b5:1e:ab:15:05: 83:35:b6:71:e5:b3:67:70:44:de:6d:d2:4c:62:00: 58:c7:0f:55:1f:1a:54:9b:a3:a2:db:75:4e:45:bf: cd:2b:3b:cf:b3:1c:93:c1:b8:cf:94:94:f4:01:88: 14:ae:2d:f1:fe:94:01:a1:1f:21:b6:88:ef:68:24: 8b:6a:f5:ed:b0:cd:ab:de:98:58:3a:f5:46:34:a1: ce:67:19:72:0e:35:16:71:82:d1:aa:90:72:1e:ba: f7:ce:ca:33:d0:6a:d4:33:65:e5:91:9f:3d:54:54: fe:4d:36:9c:4c:ae:a4:4b:9e:5e:fe:7a:a5:35:22: 53:dc:a9:fd:0e:21:1c:6f:06:5d:09:23:79:0a:bb: 82:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:97:42:91:34:C4:C4:01:1C:31:BA:32:48:F9:11:75:B8:AC:BE:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0dcae94-f21d-3bd9-91c9-ef47cd20e384.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:ea:9e:2a:44:0d:dd:3c:7c:3e:91:6b:43:c2:04:75:ae:44: 04:2c:51:09:65:e0:89:62:50:92:99:21:59:b6:46:0c:b2:72: 87:f1:6d:da:21:8a:1c:e7:56:35:ed:81:d1:fa:2b:3e:48:98: 24:dd:dd:7b:8e:23:3b:c9:1a:0f:9a:4a:f5:6d:64:43:24:5d: 67:d7:91:a4:c5:b2:9f:76:63:79:aa:a1:61:a6:99:2b:72:34: 1d:d3:b9:37:e5:19:d7:d7:2f:62:83:b2:b3:7e:2f:35:03:89: fe:88:cc:0a:fb:7a:a3:94:15:f4:8f:91:59:bb:3c:ca:1a:7c: ea:a4:11:49:28:62:48:12:e7:3e:4e:23:9c:3a:f1:4a:d3:22: 44:de:21:dd:fb:90:57:62:5f:0e:1a:c4:48:64:e3:2f:2b:59: 2b:fa:dd:ab:1a:7f:41:5e:c3:ab:9a:73:bb:19:a5:4a:a8:20: 68:82:92:3c:57:29:bb:90:1a:a7:49:09:9c:e1:48:81:55:63: 9f:4d:9e:f5:a1:e8:8b:89:96:48:e4:ee:8d:90:c6:6c:68:ae: e0:66:48:61:b1:7e:1b:ba:4f:c9:87:83:ff:52:03:08:49:a1: b4:20:a8:10:62:f6:9c:e3:de:0e:ba:88:3d:0a:e3:91:af:1e: b8:43:e2:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1znSlO9vfKf/IeocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQwOTE3NTYxMloXDTI2MDcwODE3NTYxMlowLzEtMCsGA1UEAxMk ZmNjNjVlMWQtZWZkNi00N2JlLWI4NTctMzhmNWFmNjg1ZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvLXBwZvJcNqzFEgfhxVztuY7skfQ4G6kkhX v3bQRPfoiJNmUyWC1/u1QAjdkw+yORIJ0mTMbMb26RJ6LtAgbtAGiswC5UVkfGGI 3sQC826Sm8TqBWUMxfE9s6xQWsn6dapGRMygrTqQV6jligdHGv1otR6rFQWDNbZx 5bNncETebdJMYgBYxw9VHxpUm6Oi23VORb/NKzvPsxyTwbjPlJT0AYgUri3x/pQB oR8htojvaCSLavXtsM2r3phYOvVGNKHOZxlyDjUWcYLRqpByHrr3zsoz0GrUM2Xl kZ89VFT+TTacTK6kS55e/nqlNSJT3Kn9DiEcbwZdCSN5CruCwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmXQpE0xMQBHDG6Mkj5EXW4rL76MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjBkY2FlOTQtZjIxZC0z YmQ5LTkxYzktZWY0N2NkMjBlMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxutMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTqnipEDd08fD6Ra0PCBHWuRAQsUQll4IliUJKZIVm2Rgyycofxbdoh ihznVjXtgdH6Kz5ImCTd3XuOIzvJGg+aSvVtZEMkXWfXkaTFsp92Y3mqoWGmmSty NB3TuTflGdfXL2KDsrN+LzUDif6IzAr7eqOUFfSPkVm7PMoafOqkEUkoYkgS5z5O I5w68UrTIkTeId37kFdiXw4axEhk4y8rWSv63asaf0Few6uac7sZpUqoIGiCkjxX KbuQGqdJCZzhSIFVY59NnvWh6IuJlkjk7o2QxmxoruBmSGGxfhu6T8mHg/9SAwhJ obQgqBBi9pzj3g66iD0K45GvHrhD4oQ= -----END CERTIFICATE-----Generated at Mon Apr 13 09:28:36 2026 by rpki-client