$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa File: 8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa (raw, json) Hash identifier: 3PACMVPm59DoRcPax0um9Yfmw65vc9YpAmPHTHd9pWc= Subject key identifier: 09:B3:05:46:9E:17:9A:4C:92:54:F1:69:8C:22:01:BB:C2:A6:90:9A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B583C9987831B1DF101A35300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa Signing time: Sun 28 Sep 2025 13:00:41 +0000 ROA not before: Sun 28 Sep 2025 13:00:41 +0000 ROA not after: Sat 27 Dec 2025 14:00:41 +0000 asID: 209854 IP address blocks: 23.27.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:58:3c:99:87:83:1b:1d:f1:01:a3:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 13:00:41 2025 GMT Not After : Dec 27 14:00:41 2025 GMT Subject: CN=c9b2f0b0-90b8-46a6-9a2d-75b869bd2b54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4d:2e:66:8e:3f:5c:77:5a:2a:6a:fb:06:be: 84:2f:67:e7:84:f5:c4:7f:cf:98:e2:20:ca:df:db: 48:0e:14:59:99:a1:dd:46:07:4b:b4:c2:d0:27:bf: 68:be:43:8e:46:de:75:f2:54:33:72:e0:30:cb:5d: 24:74:3d:52:03:1b:64:d1:59:5d:83:a5:14:0c:1e: a0:e0:fc:f8:2c:75:85:e6:d8:08:19:7b:0e:62:fc: 4e:87:26:73:73:a0:44:08:96:aa:06:06:5c:e0:17: c8:31:62:a9:66:d3:a5:e7:d9:7f:62:6a:ca:50:2c: 4d:7c:49:a5:f7:25:18:93:cf:b2:13:20:eb:e2:61: d1:5e:d8:e3:7f:39:9c:2b:ae:ad:5e:e7:dc:3d:45: b9:2e:89:44:a0:08:97:ed:7d:ad:77:43:9b:4d:de: 6b:13:cd:6b:4c:3a:47:af:4f:a9:72:15:c4:f8:8d: ae:8d:7b:50:cc:ae:0e:32:59:a4:81:a8:6f:23:17: a1:03:a0:63:6b:6b:bc:5c:1b:c3:f9:22:92:41:11: 17:7f:e3:46:0b:38:1e:45:5f:0a:ca:73:6b:5a:5d: bd:ab:f5:65:95:fc:c7:c8:52:54:0d:5f:ce:52:d7: c9:14:ef:ca:84:ef:be:7e:d3:c5:c9:9b:f1:f5:6a: 05:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B3:05:46:9E:17:9A:4C:92:54:F1:69:8C:22:01:BB:C2:A6:90:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:14:06:46:81:3c:f1:14:b6:66:7d:40:c4:c6:fa:b9:7f:26: a5:b9:ef:06:a1:fa:29:aa:ab:c3:f8:92:46:fd:16:04:b4:5a: 73:01:ab:a1:29:69:1f:e7:56:78:8f:54:41:7e:f1:93:bd:85: 38:08:6d:89:83:6b:70:30:8e:9a:8f:0e:95:9a:a9:65:bc:83: e2:39:d0:b9:eb:46:b0:44:9e:ce:cc:b7:84:83:59:ab:b3:96: c7:40:8d:3a:30:22:74:2e:68:d5:b6:58:f6:1f:3b:25:08:aa: 41:96:3e:f6:96:06:42:da:83:3c:8a:97:49:f9:bb:ec:ab:bb: e3:f7:23:ed:cc:15:a5:9b:22:49:e8:12:94:4c:81:e2:84:7e: 38:03:c7:bb:ec:42:12:64:11:74:d5:0b:49:94:b3:e7:3f:f8: 0c:d0:68:60:91:6d:ec:ef:e4:f3:85:42:db:8c:91:de:58:22: ff:be:3f:00:77:73:0e:db:2a:79:35:bd:65:74:bc:ca:80:19: d3:ae:5e:f3:37:a8:4b:b4:0c:b1:f1:f8:60:df:f6:e1:e1:e8: 98:04:4b:6b:89:c8:bc:37:fd:4c:c0:d9:a0:9a:9c:98:90:c4: 5d:e6:83:da:7a:df:37:c1:ae:99:2f:37:ac:e5:f0:88:50:34: a5:e2:59:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtYPJmHgxsd8QGjUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODEzMDA0MVoXDTI1MTIyNzE0MDA0MVowLzEtMCsGA1UEAxMk YzliMmYwYjAtOTBiOC00NmE2LTlhMmQtNzViODY5YmQyYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmk0uZo4/XHdaKmr7Br6EL2fnhPXEf8+Y4iDK 39tIDhRZmaHdRgdLtMLQJ79ovkOORt518lQzcuAwy10kdD1SAxtk0Vldg6UUDB6g 4Pz4LHWF5tgIGXsOYvxOhyZzc6BECJaqBgZc4BfIMWKpZtOl59l/YmrKUCxNfEml 9yUYk8+yEyDr4mHRXtjjfzmcK66tXufcPUW5LolEoAiX7X2td0ObTd5rE81rTDpH r0+pchXE+I2ujXtQzK4OMlmkgahvIxehA6Bja2u8XBvD+SKSQREXf+NGCzgeRV8K ynNrWl29q/VllfzHyFJUDV/OUtfJFO/KhO++ftPFyZvx9WoFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmzBUaeF5pMklTxaYwiAbvCppCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODgyMmJiMWQtMmYyNC0z ZjRkLTllYzItNzQwOGY1MDNiOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0UBkaBPPEUtmZ9QMTG+rl/JqW57wah+imqq8P4kkb9FgS0WnMBq6Ep aR/nVniPVEF+8ZO9hTgIbYmDa3AwjpqPDpWaqWW8g+I50LnrRrBEns7Mt4SDWauz lsdAjTowInQuaNW2WPYfOyUIqkGWPvaWBkLagzyKl0n5u+yru+P3I+3MFaWbIkno EpRMgeKEfjgDx7vsQhJkEXTVC0mUs+c/+AzQaGCRbezv5POFQtuMkd5YIv++PwB3 cw7bKnk1vWV0vMqAGdOuXvM3qEu0DLHx+GDf9uHh6JgES2uJyLw3/UzA2aCanJiQ xF3mg9p63zfBrpkvN6zl8IhQNKXiWZ4= -----END CERTIFICATE-----Generated at Tue Nov 4 23:25:56 2025 by rpki-client