$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ed49a8b-7deb-3640-945c-c9669df8d63c.roa File: 2ed49a8b-7deb-3640-945c-c9669df8d63c.roa (raw, json) Hash identifier: /jxKxhiCboisyKx4qAWqR8sacuk7gYyKHldVRJRrv48= Subject key identifier: 43:CB:A6:2B:CC:AA:43:80:F9:4D:66:CC:DF:36:DC:5C:6E:D9:C2:32 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B94422BDF187E779A6FE9E2C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ed49a8b-7deb-3640-945c-c9669df8d63c.roa Signing time: Mon 20 Oct 2025 01:00:31 +0000 ROA not before: Mon 20 Oct 2025 01:00:31 +0000 ROA not after: Sun 18 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 23.27.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:94:42:2b:df:18:7e:77:9a:6f:e9:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 20 01:00:31 2025 GMT Not After : Jan 18 02:00:31 2026 GMT Subject: CN=58f6fc14-59b8-4d50-a656-8480d3f37a45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:76:c5:eb:10:e4:51:ca:7d:66:41:51:26: 24:20:ea:e2:33:ec:b4:1a:c1:a1:9f:b2:56:d5:cb: 47:80:be:bd:47:d5:80:55:d8:54:74:ea:a1:e4:56: 1e:00:82:ba:97:9e:0f:4e:66:2a:b7:91:9d:1e:de: 15:5e:95:d1:5e:1f:64:a3:fe:51:87:45:a0:6f:0c: e7:a7:0c:c3:3a:79:df:5e:bd:65:4c:b0:7a:d0:83: c4:01:af:24:87:c2:73:cf:5e:ea:b9:d6:8e:fc:7d: 4b:84:48:95:59:2f:6b:36:f5:80:30:42:28:0e:87: eb:c5:75:16:a8:36:ce:72:a4:57:37:c1:21:b0:07: 4b:ce:36:6b:ff:90:62:5a:22:5c:00:42:68:b4:85: ef:37:85:9f:1a:75:8c:14:71:c4:e2:5c:1f:df:a0: ab:6d:51:b2:57:f9:76:30:d3:0a:cc:77:83:03:31: 88:e1:64:b1:45:db:72:90:2e:56:0f:06:57:11:8c: 83:7f:8d:0b:57:c0:65:4c:08:d0:f4:0c:27:7d:87: b7:62:87:80:1e:b7:b2:5e:65:91:9f:e6:d5:4b:07: 6e:43:1a:58:1a:05:34:6b:ac:9e:6c:54:6d:97:98: 25:28:42:cf:8d:67:17:3a:f4:3f:fb:1a:33:d4:7e: 60:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CB:A6:2B:CC:AA:43:80:F9:4D:66:CC:DF:36:DC:5C:6E:D9:C2:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ed49a8b-7deb-3640-945c-c9669df8d63c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:55:c9:37:3e:34:08:5f:e8:9e:0e:14:88:e6:2a:29:7c:4e: 5f:68:e3:31:ab:67:c4:dc:2e:68:68:4e:9e:f2:57:f9:9f:c1: ae:46:6c:23:f4:05:a7:51:12:a9:4c:19:63:95:b2:eb:5a:a9: 20:20:9d:d5:a9:32:d5:ee:0f:50:95:ee:5a:7c:a4:ba:09:16: e9:09:4f:98:bf:f7:f5:af:44:0f:04:01:b5:ea:94:51:4c:ce: 92:3d:85:9e:80:b5:a4:ba:c0:bc:08:93:c9:54:53:d7:aa:e5: 21:0d:2b:8f:87:76:3b:60:69:db:ba:24:90:df:13:dc:1b:2b: 4f:8e:ae:86:62:2f:da:31:a9:c8:1d:0b:71:dd:17:98:ce:c5: 7f:5b:ff:02:28:f9:9b:79:94:60:76:c6:98:e6:cc:63:2d:ce: 9a:35:c5:8e:44:aa:a0:a6:dc:10:6d:ce:0c:f8:06:17:f2:6c: cf:06:57:a3:01:bb:09:67:92:83:09:62:19:72:2b:0f:13:51: 10:92:16:3e:34:eb:09:b3:b5:59:57:43:02:af:6f:75:2f:02: 1a:6d:be:ed:c0:3f:bb:9e:a1:ec:97:0f:90:8c:21:1b:04:ae: aa:cb:69:bb:07:65:29:b1:a7:47:32:e4:23:0f:fc:ff:fd:bf: a3:53:b8:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuUQivfGH53mm/p4sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMDAxMDAzMVoXDTI2MDExODAyMDAzMVowLzEtMCsGA1UEAxMk NThmNmZjMTQtNTliOC00ZDUwLWE2NTYtODQ4MGQzZjM3YTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7l2xesQ5FHKfWZBUSYkIOriM+y0GsGhn7JW 1ctHgL69R9WAVdhUdOqh5FYeAIK6l54PTmYqt5GdHt4VXpXRXh9ko/5Rh0Wgbwzn pwzDOnnfXr1lTLB60IPEAa8kh8Jzz17qudaO/H1LhEiVWS9rNvWAMEIoDofrxXUW qDbOcqRXN8EhsAdLzjZr/5BiWiJcAEJotIXvN4WfGnWMFHHE4lwf36CrbVGyV/l2 MNMKzHeDAzGI4WSxRdtykC5WDwZXEYyDf40LV8BlTAjQ9AwnfYe3YoeAHreyXmWR n+bVSwduQxpYGgU0a6yebFRtl5glKELPjWcXOvQ/+xoz1H5gxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPLpivMqkOA+U1mzN823Fxu2cIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmVkNDlhOGItN2RlYi0z NjQwLTk0NWMtYzk2NjlkZjhkNjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBVyTc+NAhf6J4OFIjmKil8Tl9o4zGrZ8TcLmhoTp7yV/mfwa5GbCP0 BadREqlMGWOVsutaqSAgndWpMtXuD1CV7lp8pLoJFukJT5i/9/WvRA8EAbXqlFFM zpI9hZ6AtaS6wLwIk8lUU9eq5SENK4+Hdjtgadu6JJDfE9wbK0+OroZiL9oxqcgd C3HdF5jOxX9b/wIo+Zt5lGB2xpjmzGMtzpo1xY5EqqCm3BBtzgz4BhfybM8GV6MB uwlnkoMJYhlyKw8TURCSFj406wmztVlXQwKvb3UvAhptvu3AP7ueoeyXD5CMIRsE rqrLabsHZSmxp0cy5CMP/P/9v6NTuI8= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:33 2025 by rpki-client