$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b654e1a-7932-3f14-985e-9f04ca1864a7.roa File: 8b654e1a-7932-3f14-985e-9f04ca1864a7.roa (raw, json) Hash identifier: kZCfYJ5Am3hKKGiWvmzY7R05VTjx1wLGSRY6hlJoor8= Subject key identifier: AE:77:9E:B8:06:24:28:F4:46:E2:04:0F:BD:80:03:F1:87:D8:2F:B3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D735E1B9374C27411EA700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b654e1a-7932-3f14-985e-9f04ca1864a7.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 149440 IP address blocks: 23.27.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:35:e1:b9:37:4c:27:41:1e:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=578f9277-7f75-4e57-976b-73845b9fa1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:92:76:20:ef:7e:72:6d:23:b5:a3:1f:cf:e6: b6:74:a9:02:df:d2:3a:f8:d7:e1:18:7d:7d:84:be: bf:8f:52:21:71:64:a2:41:0c:7c:88:a6:39:aa:ac: 5a:a5:ab:2c:96:45:b0:0b:a4:95:83:6a:1c:0d:ae: 06:a8:67:01:9c:12:e9:b7:26:58:b4:18:65:90:2a: 26:c5:25:a7:ea:90:6b:a1:a4:23:e1:03:c6:9d:bf: ed:e7:a2:aa:ea:07:ee:8a:03:97:50:b9:0f:14:d7: be:09:ea:f1:af:65:bf:c6:90:47:40:28:a9:df:a0: ce:6d:2d:4e:df:04:83:94:25:d7:eb:b2:e8:40:89: 2e:bf:f5:38:55:39:af:79:a4:87:a9:d4:16:49:41: f8:a3:38:ea:b4:27:a5:a2:c9:0b:81:ad:ce:f0:06: 0f:19:c2:cd:1d:4a:3c:f6:ee:4a:aa:b6:50:b1:5e: a4:63:03:c8:a2:20:b1:d2:74:1a:d5:02:77:0a:5b: a6:3d:7b:7a:a3:9b:5f:37:a7:73:8c:f5:44:64:22: 48:fc:0d:a4:67:91:99:a7:a5:2f:d9:69:71:ec:d8: 38:0e:2f:dd:6d:ae:7d:23:6e:47:9c:94:33:e8:e4: 9a:d4:29:6e:8e:24:08:d2:31:60:5b:0b:20:aa:86: 11:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:77:9E:B8:06:24:28:F4:46:E2:04:0F:BD:80:03:F1:87:D8:2F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b654e1a-7932-3f14-985e-9f04ca1864a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:6c:ab:b7:4b:6a:53:ab:77:34:55:41:71:72:a5:f7:4c:63: 77:9f:59:32:89:44:85:0e:ae:c1:17:bd:4d:52:80:a2:e8:4d: f2:8d:ab:cb:31:cb:4f:0e:3d:14:6b:80:7a:cf:4a:1b:0e:a0: 43:57:27:17:96:fb:c1:32:fa:8d:9c:c2:ac:14:d1:0b:de:0e: 42:a5:4e:f3:84:00:ec:6d:71:a6:07:70:20:04:b5:16:9f:a7: 7b:b7:ad:ae:ba:ea:bd:cb:81:18:94:7f:d9:03:be:29:98:03: 5b:83:17:2d:5a:c5:f8:c9:6a:3e:7f:70:ef:a1:64:c6:61:17: 8a:06:62:04:8f:a6:de:38:5e:e3:5c:7a:13:b7:46:10:76:77: 1c:4e:2f:3f:07:13:2c:a9:70:24:ef:2d:e3:0a:78:25:7e:20: f9:3c:48:2f:75:30:4d:c1:ae:4c:ca:3c:6c:61:fc:c7:6c:be: f9:c0:c6:f0:da:d0:16:32:51:56:a8:f3:55:22:fb:47:c2:e7: f4:1f:ed:6e:61:2c:ce:d9:cc:7d:38:22:45:e9:17:4c:48:45: f7:9b:1d:fc:27:13:eb:7d:72:d5:d9:dd:93:63:f1:64:f1:b8: 14:c7:54:bc:8c:fa:f3:a9:cf:4b:d5:5b:38:cb:4c:06:f6:7e: 5c:8f:43:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zXhuTdMJ0EepwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NTc4ZjkyNzctN2Y3NS00ZTU3LTk3NmItNzM4NDViOWZhMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZJ2IO9+cm0jtaMfz+a2dKkC39I6+NfhGH19 hL6/j1IhcWSiQQx8iKY5qqxapasslkWwC6SVg2ocDa4GqGcBnBLptyZYtBhlkCom xSWn6pBroaQj4QPGnb/t56Kq6gfuigOXULkPFNe+Cerxr2W/xpBHQCip36DObS1O 3wSDlCXX67LoQIkuv/U4VTmveaSHqdQWSUH4ozjqtCeloskLga3O8AYPGcLNHUo8 9u5KqrZQsV6kYwPIoiCx0nQa1QJ3ClumPXt6o5tfN6dzjPVEZCJI/A2kZ5GZp6Uv 2Wlx7Ng4Di/dba59I25HnJQz6OSa1ClujiQI0jFgWwsgqoYR9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK53nrgGJCj0RuIED72AA/GH2C+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGI2NTRlMWEtNzkzMi0z ZjE0LTk4NWUtOWYwNGNhMTg2NGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADRsq7dLalOrdzRVQXFypfdMY3efWTKJRIUOrsEXvU1SgKLoTfKNq8sx y08OPRRrgHrPShsOoENXJxeW+8Ey+o2cwqwU0QveDkKlTvOEAOxtcaYHcCAEtRaf p3u3ra666r3LgRiUf9kDvimYA1uDFy1axfjJaj5/cO+hZMZhF4oGYgSPpt44XuNc ehO3RhB2dxxOLz8HEyypcCTvLeMKeCV+IPk8SC91ME3BrkzKPGxh/MdsvvnAxvDa 0BYyUVao81Ui+0fC5/Qf7W5hLM7ZzH04IkXpF0xIRfebHfwnE+t9ctXZ3ZNj8WTx uBTHVLyM+vOpz0vVWzjLTAb2flyPQzI= -----END CERTIFICATE-----Generated at Tue Nov 4 21:42:03 2025 by rpki-client