$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0cf82b96-be6a-3ff1-b50a-725382b0e22a.roa File: 0cf82b96-be6a-3ff1-b50a-725382b0e22a.roa (raw, json) Hash identifier: fyOL4KmKYwEpb59FuK3BRXioSWu/ivYEKMkGpcPvk24= Subject key identifier: 7F:0A:50:7E:71:77:87:32:B0:A4:66:6B:87:5B:7F:59:B5:CF:33:04 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B84E79A9F63D7B13CAA048700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0cf82b96-be6a-3ff1-b50a-725382b0e22a.roa Signing time: Tue 14 Oct 2025 13:00:37 +0000 ROA not before: Tue 14 Oct 2025 13:00:37 +0000 ROA not after: Mon 12 Jan 2026 14:00:37 +0000 asID: 149440 IP address blocks: 23.27.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:84:e7:9a:9f:63:d7:b1:3c:aa:04:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 14 13:00:37 2025 GMT Not After : Jan 12 14:00:37 2026 GMT Subject: CN=79f4cd37-8747-4929-9228-689c6d13072a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b4:8a:9a:d9:b0:74:db:aa:b4:f8:dc:11:a4: 64:ee:fd:5d:9f:4b:75:8f:dd:c7:ac:af:9f:cf:72: 24:f6:ac:b8:f1:f1:48:3c:c7:7f:26:2d:26:f8:37: b6:7b:f4:39:a7:68:64:5e:40:ed:d9:a0:93:f4:ad: 9b:3e:98:2a:aa:d8:a3:69:94:7b:e3:30:ad:7c:8b: e0:ad:06:a9:f9:8e:f0:1e:f7:41:e0:c2:e4:fe:41: bf:f4:19:47:9a:aa:34:76:f6:f8:d2:07:57:c4:73: b0:23:38:5e:6d:b1:93:52:30:3f:6f:24:d5:c5:c5: 92:5b:3e:34:2c:40:a3:c7:8b:ee:71:39:c2:9c:85: ca:83:8e:42:3b:51:47:64:83:bc:74:c3:b2:76:cd: c3:6d:91:d5:b8:d8:07:55:be:3a:34:06:8e:16:09: e1:a7:68:68:2e:a8:ad:39:ce:1b:fc:c1:36:9c:1a: 4d:d7:61:cc:43:ad:f4:eb:8f:dc:9b:b8:78:2e:e1: 06:85:0a:21:ea:c4:4a:dd:e7:02:58:d5:6a:12:29: c0:9b:c6:68:ac:d6:b8:a1:34:1a:a9:e1:d8:62:f4: f6:62:29:0f:19:8b:da:71:85:f7:73:04:36:3f:b3: ab:f9:c7:43:04:97:8b:a7:73:5d:ed:7e:89:0e:29: fb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0A:50:7E:71:77:87:32:B0:A4:66:6B:87:5B:7F:59:B5:CF:33:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0cf82b96-be6a-3ff1-b50a-725382b0e22a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:39:c3:97:8e:25:2e:69:23:13:cf:fb:2a:74:9e:ea:49:7f: 58:eb:fb:62:6a:f6:d9:a4:5b:5c:d8:5a:8d:06:67:f5:09:7b: 5c:5e:ec:d7:1a:3e:96:92:10:c1:6f:7f:bd:30:cb:44:cf:74: 88:bd:3d:fd:cf:2f:dd:9c:10:38:34:5e:47:9b:19:ac:2e:52: 34:e2:4f:a6:8b:55:f3:47:1d:88:f4:40:ee:a0:fe:3b:9e:4a: c5:de:0c:4b:5f:af:c4:b5:08:23:04:7d:3d:6b:69:4f:91:d4: f3:09:4e:b7:81:65:86:3a:77:d2:b8:30:d7:87:63:ce:67:62: 7b:32:d5:73:f4:53:94:12:f2:6e:53:09:1c:3d:05:10:4d:91: 93:0b:11:bc:6b:82:69:2a:42:44:af:18:83:2a:74:7d:7b:96: 37:ae:81:6b:4d:cb:0d:4c:32:5d:88:bd:25:fa:2c:1e:b0:16: 5a:16:33:60:37:4d:eb:9d:53:8b:92:07:ef:a0:ab:f5:d5:a3: 24:b5:5e:7f:47:84:2e:ba:1e:3d:2e:1e:f0:eb:d6:6b:5a:f1: 85:32:40:36:96:e1:a9:01:3b:93:05:10:06:a8:f9:61:d4:57: 7f:5d:9e:d2:d9:eb:df:52:27:04:3c:11:a5:5d:db:5e:62:d0: 6e:be:ef:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuE55qfY9exPKoEhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxNDEzMDAzN1oXDTI2MDExMjE0MDAzN1owLzEtMCsGA1UEAxMk NzlmNGNkMzctODc0Ny00OTI5LTkyMjgtNjg5YzZkMTMwNzJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7SKmtmwdNuqtPjcEaRk7v1dn0t1j93HrK+f z3Ik9qy48fFIPMd/Ji0m+De2e/Q5p2hkXkDt2aCT9K2bPpgqqtijaZR74zCtfIvg rQap+Y7wHvdB4MLk/kG/9BlHmqo0dvb40gdXxHOwIzhebbGTUjA/byTVxcWSWz40 LECjx4vucTnCnIXKg45CO1FHZIO8dMOyds3DbZHVuNgHVb46NAaOFgnhp2hoLqit Oc4b/ME2nBpN12HMQ63064/cm7h4LuEGhQoh6sRK3ecCWNVqEinAm8ZorNa4oTQa qeHYYvT2YikPGYvacYX3cwQ2P7Or+cdDBJeLp3Nd7X6JDin7EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH8KUH5xd4cysKRma4dbf1m1zzMEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGNmODJiOTYtYmU2YS0z ZmYxLWI1MGEtNzI1MzgyYjBlMjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHI5w5eOJS5pIxPP+yp0nupJf1jr+2Jq9tmkW1zYWo0GZ/UJe1xe7Nca PpaSEMFvf70wy0TPdIi9Pf3PL92cEDg0XkebGawuUjTiT6aLVfNHHYj0QO6g/jue SsXeDEtfr8S1CCMEfT1raU+R1PMJTreBZYY6d9K4MNeHY85nYnsy1XP0U5QS8m5T CRw9BRBNkZMLEbxrgmkqQkSvGIMqdH17ljeugWtNyw1MMl2IvSX6LB6wFloWM2A3 TeudU4uSB++gq/XVoyS1Xn9HhC66Hj0uHvDr1mta8YUyQDaW4akBO5MFEAao+WHU V39dntLZ699SJwQ8EaVd215i0G6+73U= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:54 2025 by rpki-client