$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dba97076-307b-3c32-ab98-401709070e4e.roa File: dba97076-307b-3c32-ab98-401709070e4e.roa (raw, json) Hash identifier: f491I/jD1ec/icyoIfSdS7E2ZasAr8lNFAldQIPk+Pk= Subject key identifier: DC:15:1C:49:3A:E2:78:71:29:DA:84:1B:94:9D:73:52:4F:5A:C6:34 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EAFE6EBF23F0FE90C97DCD670 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dba97076-307b-3c32-ab98-401709070e4e.roa Signing time: Sat 01 Aug 2026 01:00:12 +0000 ROA not before: Sat 01 Aug 2026 01:00:12 +0000 ROA not after: Fri 30 Oct 2026 01:00:12 +0000 asID: 6762 IP address blocks: 23.27.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:af:e6:eb:f2:3f:0f:e9:0c:97:dc:d6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 1 01:00:12 2026 GMT Not After : Oct 30 01:00:12 2026 GMT Subject: CN=88f3c54c-cb45-46dd-84dd-e501720ee6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:77:78:73:2e:d2:d0:b7:c8:fd:d0:9e:dd:f3: 7a:fc:2a:53:9e:8f:1c:49:9e:25:53:c1:61:5e:2a: cc:3e:33:49:c5:4e:26:63:19:d8:b0:08:2b:fa:78: cf:bb:1e:7c:b3:75:64:93:00:db:be:62:40:97:7f: 24:3a:75:88:1c:43:ce:66:7c:26:4a:75:b8:22:d9: 07:e6:d6:36:51:77:b7:57:ce:9f:5a:40:74:46:0f: db:8a:b8:b4:18:d9:82:8a:d6:89:34:f1:59:5e:1d: 66:77:45:2f:e1:dd:08:87:aa:8a:9f:55:b9:69:20: 5b:c5:b5:a6:ff:6c:af:b0:5d:04:5e:75:c3:65:5f: cb:08:0b:d2:91:89:6f:1e:a8:91:43:ee:5e:1f:4a: 5c:bf:d7:2b:d2:b3:3c:f6:26:ac:a3:e7:36:30:12: d9:7b:64:ea:68:80:a5:bd:62:20:68:3a:aa:d4:85: 78:80:89:80:7a:31:fc:f2:0c:c1:00:d9:06:3c:62: e2:22:a4:95:cb:d1:c4:e7:9a:0e:bd:ee:fb:91:af: 72:e5:53:f1:ac:01:7e:cf:8a:8a:74:45:0d:80:81: 7c:25:54:cb:24:f0:f3:c7:c7:9c:8f:4f:ae:3f:35: 9d:16:64:83:0e:be:2c:b5:e4:81:30:0d:3f:7f:27: 77:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:15:1C:49:3A:E2:78:71:29:DA:84:1B:94:9D:73:52:4F:5A:C6:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dba97076-307b-3c32-ab98-401709070e4e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:27:f9:4b:93:3e:58:cd:c7:78:6f:fb:58:a4:27:df:4c:70: 74:11:de:f6:fe:ce:ae:32:e8:20:64:c6:7b:76:be:70:86:15: f8:01:46:11:85:45:7b:e1:ea:b1:c2:b0:0a:9b:84:99:a7:44: f7:c7:36:5f:1a:a1:9c:3e:81:4e:44:3a:dd:ce:90:0f:a1:5b: 29:21:1c:2d:e2:21:d3:7e:9f:22:8e:d8:ff:b0:1e:3f:07:52: 02:6e:6a:ce:d1:fb:53:d4:f9:05:01:a9:d2:18:e5:89:4f:5a: ef:53:f8:47:06:ce:c8:a6:57:3c:4c:d0:1f:46:f3:1b:06:b3: a9:59:96:99:05:a9:7f:c8:c5:99:22:dc:ba:b2:9e:46:c4:98: b3:15:76:6a:ae:e9:87:c9:e6:ce:c2:e8:ba:5a:02:7e:ec:85: 68:1b:ad:d1:21:e8:de:92:b7:58:76:38:68:ca:2a:ac:34:07: b9:ae:4f:06:a5:4e:1a:b7:fd:33:10:77:81:e8:6d:31:47:45: 8e:18:e4:c1:c7:75:5a:dc:10:fb:4d:a9:ac:fc:9b:29:60:26: 2e:02:3a:3b:b3:0a:57:f0:e2:73:86:c1:8a:fc:b6:32:60:f3: 76:b5:94:3d:40:34:99:50:7f:37:dc:19:51:12:b0:40:a7:33: 8d:b4:4a:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6v5uvyPw/pDJfc1nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgwMTAxMDAxMloXDTI2MTAzMDAxMDAxMlowLzEtMCsGA1UEAxMk ODhmM2M1NGMtY2I0NS00NmRkLTg0ZGQtZTUwMTcyMGVlNmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXd4cy7S0LfI/dCe3fN6/CpTno8cSZ4lU8Fh XirMPjNJxU4mYxnYsAgr+njPux58s3VkkwDbvmJAl38kOnWIHEPOZnwmSnW4ItkH 5tY2UXe3V86fWkB0Rg/biri0GNmCitaJNPFZXh1md0Uv4d0Ih6qKn1W5aSBbxbWm /2yvsF0EXnXDZV/LCAvSkYlvHqiRQ+5eH0pcv9cr0rM89iaso+c2MBLZe2TqaICl vWIgaDqq1IV4gImAejH88gzBANkGPGLiIqSVy9HE55oOve77ka9y5VPxrAF+z4qK dEUNgIF8JVTLJPDzx8ecj0+uPzWdFmSDDr4steSBMA0/fyd3PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwVHEk64nhxKdqEG5Sdc1JPWsY0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGJhOTcwNzYtMzA3Yi0z YzMyLWFiOTgtNDAxNzA5MDcwZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQn+UuTPljNx3hv+1ikJ99McHQR3vb+zq4y6CBkxnt2vnCGFfgBRhGF RXvh6rHCsAqbhJmnRPfHNl8aoZw+gU5EOt3OkA+hWykhHC3iIdN+nyKO2P+wHj8H UgJuas7R+1PU+QUBqdIY5YlPWu9T+EcGzsimVzxM0B9G8xsGs6lZlpkFqX/IxZki 3LqynkbEmLMVdmqu6YfJ5s7C6LpaAn7shWgbrdEh6N6St1h2OGjKKqw0B7muTwal Thq3/TMQd4HobTFHRY4Y5MHHdVrcEPtNqaz8mylgJi4COjuzClfw4nOGwYr8tjJg 83a1lD1ANJlQfzfcGVESsECnM420Sj0= -----END CERTIFICATE-----Generated at Sat Sep 5 01:13:43 2026 by rpki-client