$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa File: 38b2a508-a156-3570-af47-e4798b36d921.roa (raw, json) Hash identifier: /NGdUx/R+Y0inuhRCtFmnkztVM7IeHjAPxrDa4fLaiQ= Subject key identifier: 15:40:6E:BC:B9:09:6F:23:57:77:3B:C8:D4:AF:99:1E:00:20:35:BB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B5B0757FE85E63E9389063900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa Signing time: Mon 29 Sep 2025 13:00:41 +0000 ROA not before: Mon 29 Sep 2025 13:00:41 +0000 ROA not after: Sun 28 Dec 2025 14:00:41 +0000 asID: 212238 IP address blocks: 23.27.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5b:07:57:fe:85:e6:3e:93:89:06:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 29 13:00:41 2025 GMT Not After : Dec 28 14:00:41 2025 GMT Subject: CN=9dd196ee-320b-43a7-9835-c1f8274dafae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2e:95:94:f2:fe:24:52:71:0c:d7:b7:47:e3: 7f:5e:4e:c4:47:72:25:81:ea:cd:01:6d:3f:12:bd: a7:58:5d:9a:25:10:c1:cb:cf:db:16:4b:dd:d9:dd: b8:76:dc:c1:ff:7b:e2:f3:da:ad:fb:bd:7e:b5:40: e9:a4:ed:da:de:1b:a1:16:40:7b:bb:93:2c:41:97: 7a:20:07:5d:7c:40:69:58:c7:b1:85:7b:41:0e:40: 15:0b:c0:35:40:3e:be:1d:8c:bb:8b:3c:b8:5e:29: 6a:b5:06:34:1f:f3:d0:ca:c9:ca:e6:3d:36:98:88: 9d:bf:35:a0:5f:73:56:2f:1a:38:df:13:f1:c1:91: c2:2d:e6:bf:fc:61:be:a8:10:c7:20:90:4c:a0:e0: bb:3d:ac:05:ef:94:c5:f8:42:74:44:11:23:f5:9f: 7c:a1:f1:2e:9c:c2:d6:d5:f8:c5:91:47:f1:2c:46: f8:d5:64:8d:d8:1c:32:20:f2:69:64:a7:bf:49:48: 71:f1:7c:a0:8e:c1:43:a3:1e:ac:3f:13:20:51:f3: b2:d2:57:43:25:83:93:3c:2e:96:b4:0e:9b:a3:63: aa:5f:12:24:8c:63:db:a9:d8:c6:8b:0b:d5:f2:7c: 8b:75:83:a4:b0:fa:57:00:17:82:91:40:a5:2a:34: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:40:6E:BC:B9:09:6F:23:57:77:3B:C8:D4:AF:99:1E:00:20:35:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:a1:cb:02:6f:b1:0e:ef:b6:98:96:62:cf:e9:32:f1:ef:ec: 05:40:fd:06:a7:4e:1a:83:01:0d:ab:55:30:c8:be:0d:71:8e: 53:02:76:66:66:fd:79:84:2f:fc:da:b1:71:9f:cb:c1:ce:36: ab:fa:17:27:6e:39:2f:dc:8c:86:66:ac:06:b6:07:c2:64:45: a8:ab:69:db:d4:21:6f:b4:b6:0d:a1:9e:51:89:ad:ac:a4:c0: 0a:a7:42:a6:4e:24:70:38:fe:2f:89:4a:2d:19:26:f1:90:8e: 93:10:43:df:22:71:d8:72:d7:01:e5:0c:38:91:f0:72:09:9b: 14:9b:ff:4e:98:af:b8:55:0e:7a:8d:23:ed:8a:59:b7:ae:6b: 11:be:66:5b:d3:14:6d:19:3f:74:9b:18:aa:b8:05:7b:08:0b: 16:2c:5a:42:21:8d:d3:d4:d5:da:b6:e5:d9:f8:06:5c:ca:a6: a8:a7:b3:14:8f:7e:9d:d8:b6:9c:34:78:cd:39:1a:59:6f:d8: 26:9a:9a:b4:55:1f:c6:56:08:fd:b7:cb:b5:99:a5:ba:83:4e: ad:f0:5b:a6:ee:ae:71:9b:fd:e1:e8:e5:15:d1:7e:70:28:f3: 45:45:54:a2:53:17:7c:20:e3:04:5e:c1:7d:2d:15:17:70:18: 49:4b:6c:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtbB1f+heY+k4kGOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyOTEzMDA0MVoXDTI1MTIyODE0MDA0MVowLzEtMCsGA1UEAxMk OWRkMTk2ZWUtMzIwYi00M2E3LTk4MzUtYzFmODI3NGRhZmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoS6VlPL+JFJxDNe3R+N/Xk7ER3IlgerNAW0/ Er2nWF2aJRDBy8/bFkvd2d24dtzB/3vi89qt+71+tUDppO3a3huhFkB7u5MsQZd6 IAddfEBpWMexhXtBDkAVC8A1QD6+HYy7izy4XilqtQY0H/PQysnK5j02mIidvzWg X3NWLxo43xPxwZHCLea//GG+qBDHIJBMoOC7PawF75TF+EJ0RBEj9Z98ofEunMLW 1fjFkUfxLEb41WSN2BwyIPJpZKe/SUhx8XygjsFDox6sPxMgUfOy0ldDJYOTPC6W tA6bo2OqXxIkjGPbqdjGiwvV8nyLdYOksPpXABeCkUClKjR2PQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVAbry5CW8jV3c7yNSvmR4AIDW7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzhiMmE1MDgtYTE1Ni0z NTcwLWFmNDctZTQ3OThiMzZkOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKChywJvsQ7vtpiWYs/pMvHv7AVA/QanThqDAQ2rVTDIvg1xjlMCdmZm /XmEL/zasXGfy8HONqv6FyduOS/cjIZmrAa2B8JkRairadvUIW+0tg2hnlGJrayk wAqnQqZOJHA4/i+JSi0ZJvGQjpMQQ98icdhy1wHlDDiR8HIJmxSb/06Yr7hVDnqN I+2KWbeuaxG+ZlvTFG0ZP3SbGKq4BXsICxYsWkIhjdPU1dq25dn4BlzKpqinsxSP fp3Ytpw0eM05Gllv2CaamrRVH8ZWCP23y7WZpbqDTq3wW6burnGb/eHo5RXRfnAo 80VFVKJTF3wg4wRewX0tFRdwGElLbKY= -----END CERTIFICATE-----Generated at Tue Nov 4 23:41:38 2025 by rpki-client