$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76de0fbc-37b1-3589-a2e5-e473f632d79b.roa File: 76de0fbc-37b1-3589-a2e5-e473f632d79b.roa (raw, json) Hash identifier: RoCzo1ioZDyzYPgYbyHzFlrFAFWqdpe2yu+0Xc6ZiYk= Subject key identifier: 23:38:9F:20:51:70:19:CF:4C:AA:05:52:23:41:5A:C9:91:71:E9:D7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EFF77806611447D37C45C4980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76de0fbc-37b1-3589-a2e5-e473f632d79b.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 40676 IP address blocks: 23.27.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:80:66:11:44:7d:37:c4:5c:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=2b018b4c-ed7b-4ba5-962d-74d5dcaa0e05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cd:4a:f1:20:52:7a:77:e7:d2:cb:dd:ac:cf: 57:f3:b7:5b:a5:4a:d3:96:60:47:77:be:d8:fe:c0: de:d1:c1:a6:bc:ac:35:c9:a9:27:d0:e2:95:fd:bc: 88:a9:55:f2:31:ca:de:c0:9d:8a:c4:5b:00:3a:6f: 0f:ca:33:b8:d7:9e:2f:7b:cf:9a:ea:bf:78:70:03: 38:63:71:84:eb:ec:cb:cb:4b:59:cb:c7:07:57:ef: ae:ef:52:0b:f8:29:6f:28:57:83:77:9e:c6:e9:c1: d9:04:78:2f:5a:7f:37:7d:08:d8:cd:0d:97:7a:16: ae:b8:c5:cc:85:10:e9:0d:e2:3f:6b:8a:6a:55:e5: af:ea:f5:60:84:3e:cd:dc:e6:92:17:2d:90:94:ee: 71:b9:6f:da:63:47:42:c3:90:ec:bc:46:be:06:07: a9:fe:5b:01:84:68:22:12:0d:0b:5b:38:59:54:6b: 14:e5:3c:2c:66:c4:d5:89:7a:35:ec:a0:d4:03:35: 42:9d:c0:08:9d:30:7e:f9:b9:a2:d2:b9:04:64:c2: ef:b1:5f:39:07:cb:4e:bc:16:25:33:6d:9f:d8:93: 7b:ac:e0:60:38:5e:ee:70:d2:a8:c2:cc:03:90:7b: 01:5e:1a:50:17:59:4e:24:b9:26:d9:af:4c:2c:a8: 97:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:38:9F:20:51:70:19:CF:4C:AA:05:52:23:41:5A:C9:91:71:E9:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/76de0fbc-37b1-3589-a2e5-e473f632d79b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d7:67:48:0f:d0:7e:ac:60:f5:44:77:a8:2f:41:02:54:d4: da:6d:f1:15:08:32:c3:07:55:5a:40:27:d5:bf:ea:c6:60:7c: 92:73:62:65:70:16:52:c2:3b:0a:2d:10:c6:34:c0:c8:bd:d4: a8:eb:13:95:67:30:f6:9e:ef:cf:14:75:f2:62:da:cf:e6:2d: 1c:4b:a1:9d:da:a3:39:77:36:15:50:5f:0c:cf:8c:88:cf:34: 6c:9b:84:ee:1d:af:b5:84:62:99:8f:47:e6:da:03:91:b9:64: 3a:9b:70:38:61:fb:af:19:04:5e:12:9c:75:44:1d:a9:3b:1c: 84:2d:8a:f9:4e:eb:7f:0e:5e:ab:d8:3e:6a:5f:7b:2a:61:6a: b7:76:f9:97:ab:d9:ab:66:39:f0:27:4f:05:77:48:5f:a3:25: 98:a5:07:b2:f6:c7:a3:df:7f:f2:bc:df:f3:04:09:98:00:51: fe:73:ad:0a:8f:c2:f2:5c:4b:27:a0:28:8b:46:4f:2d:ca:50: 41:dc:40:c7:0e:07:4a:db:2a:64:fc:6c:1f:42:29:d7:b1:f9: 22:15:ef:b7:cd:44:c3:31:a0:f1:22:4d:07:52:5f:7e:f1:ee: d5:14:08:69:ca:55:69:be:32:4e:28:92:28:51:f1:b2:97:06: 52:5a:a4:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d4BmEUR9N8RcSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MmIwMThiNGMtZWQ3Yi00YmE1LTk2MmQtNzRkNWRjYWEwZTA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj81K8SBSenfn0svdrM9X87dbpUrTlmBHd77Y /sDe0cGmvKw1yakn0OKV/byIqVXyMcrewJ2KxFsAOm8PyjO4154ve8+a6r94cAM4 Y3GE6+zLy0tZy8cHV++u71IL+ClvKFeDd57G6cHZBHgvWn83fQjYzQ2XehauuMXM hRDpDeI/a4pqVeWv6vVghD7N3OaSFy2QlO5xuW/aY0dCw5DsvEa+Bgep/lsBhGgi Eg0LWzhZVGsU5TwsZsTViXo17KDUAzVCncAInTB++bmi0rkEZMLvsV85B8tOvBYl M22f2JN7rOBgOF7ucNKowswDkHsBXhpQF1lOJLkm2a9MLKiXfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCM4nyBRcBnPTKoFUiNBWsmRcenXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzZkZTBmYmMtMzdiMS0z NTg5LWEyZTUtZTQ3M2Y2MzJkNzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTXZ0gP0H6sYPVEd6gvQQJU1Npt8RUIMsMHVVpAJ9W/6sZgfJJzYmVw FlLCOwotEMY0wMi91KjrE5VnMPae788UdfJi2s/mLRxLoZ3aozl3NhVQXwzPjIjP NGybhO4dr7WEYpmPR+baA5G5ZDqbcDhh+68ZBF4SnHVEHak7HIQtivlO638OXqvY Pmpfeyphard2+Zer2atmOfAnTwV3SF+jJZilB7L2x6Pff/K83/MECZgAUf5zrQqP wvJcSyegKItGTy3KUEHcQMcOB0rbKmT8bB9CKdex+SIV77fNRMMxoPEiTQdSX37x 7tUUCGnKVWm+Mk4okihR8bKXBlJapKY= -----END CERTIFICATE-----Generated at Sun Sep 20 19:40:45 2026 by rpki-client