$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa File: 9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa (raw, json) Hash identifier: wM0Z2YJTRmbau12IzgjOS8/CexdGSdiBYq9l+XROO+Y= Subject key identifier: C4:47:62:0C:BC:1E:D0:47:1E:29:0A:76:9C:70:D1:93:8B:17:43:68 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F06729A48B7B3293D639140C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 2856 IP address blocks: 23.27.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9a:48:b7:b3:29:3d:63:91:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=0f1e13d4-2a52-489a-b646-661788877be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f7:c1:ba:2a:80:32:38:c3:d7:30:22:56:15: 4f:99:32:d7:b7:09:7e:42:b5:35:a9:4d:30:52:a5: 60:d0:33:6a:9d:97:41:88:16:c5:58:ef:d0:77:25: 26:2a:42:f7:26:c0:ad:da:e2:ea:4e:eb:c9:b4:90: f1:3f:ac:6d:05:fb:06:1b:16:1b:10:90:90:c4:90: cd:77:29:4a:b1:e8:ec:d6:4d:9f:f2:f8:ce:48:cd: ea:29:85:6e:e5:5a:cc:c6:74:66:2b:57:ae:ab:34: 1b:43:89:bd:da:57:0d:bf:7e:72:41:51:50:72:b6: 2f:f3:ae:cc:ac:27:bd:7c:02:e0:95:bf:c8:01:d4: 4e:65:ba:ce:d0:ce:b3:63:0b:d3:81:d9:7e:90:f9: 39:f0:ea:45:a7:04:cb:d2:01:6a:1e:aa:7b:fc:29: b3:8c:c4:54:43:67:85:f9:f1:3c:32:a8:9a:8d:7d: 73:d8:43:f5:62:f5:96:d7:6f:fa:89:a8:a6:4c:8d: 06:c5:7f:e5:63:3c:f0:f1:7b:79:f3:c6:b2:30:0e: c3:53:1c:14:73:0e:78:3f:58:a5:ca:47:f0:fa:46: 3b:bb:10:1c:2e:a1:9f:45:ad:5a:d7:8b:16:68:2d: 3a:0b:46:1d:94:79:73:de:ee:a5:d8:83:be:34:e9: 13:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:47:62:0C:BC:1E:D0:47:1E:29:0A:76:9C:70:D1:93:8B:17:43:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9c9ec827-482c-38d7-87a0-e10ed6b1229a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:12:4c:bb:e1:ac:e9:2a:52:d5:cf:70:41:c6:da:7d:cf:58: 40:8c:2f:f0:42:d0:76:01:64:64:56:b4:4a:d4:c3:c4:70:1f: 5c:b9:31:6e:36:36:e6:08:9a:9e:19:c2:e9:0c:15:38:50:1f: 90:98:30:ba:26:08:f6:e5:ff:89:81:65:5d:03:0a:61:87:77: 9a:9a:20:f9:5f:79:15:ab:f2:03:f0:f8:fd:13:de:d4:8e:9c: a2:bf:3f:6c:f9:56:79:2f:a6:44:ba:0c:1e:95:84:35:74:68: 4c:41:13:9c:b0:33:dc:05:fb:f6:7e:2f:83:10:53:1a:30:85: e0:f6:8d:17:9b:3f:3e:b9:76:5d:75:6b:68:28:f0:40:1e:ee: 23:8c:33:5c:85:e2:36:29:ff:53:44:c8:aa:84:43:fc:f1:22: 39:1f:ad:a6:83:3a:3c:d2:d5:ed:a1:7d:2e:3b:0f:0a:17:04: 06:a6:db:5b:82:73:79:8a:5b:72:30:96:68:cd:07:ab:44:0f: 54:3c:2c:8c:bb:55:10:9b:a2:61:ea:2b:ec:fd:da:fe:ce:e3: 58:3f:bc:2b:b5:8d:1d:73:4d:2b:03:de:bd:56:0b:aa:64:de: d7:60:da:67:ae:ac:59:9a:ba:b8:7d:68:8e:24:04:7e:40:39: ef:55:2b:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GcppIt7MpPWORQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk MGYxZTEzZDQtMmE1Mi00ODlhLWI2NDYtNjYxNzg4ODc3YmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPfBuiqAMjjD1zAiVhVPmTLXtwl+QrU1qU0w UqVg0DNqnZdBiBbFWO/QdyUmKkL3JsCt2uLqTuvJtJDxP6xtBfsGGxYbEJCQxJDN dylKsejs1k2f8vjOSM3qKYVu5VrMxnRmK1euqzQbQ4m92lcNv35yQVFQcrYv867M rCe9fALglb/IAdROZbrO0M6zYwvTgdl+kPk58OpFpwTL0gFqHqp7/CmzjMRUQ2eF +fE8MqiajX1z2EP1YvWW12/6iaimTI0GxX/lYzzw8Xt588ayMA7DUxwUcw54P1il ykfw+kY7uxAcLqGfRa1a14sWaC06C0YdlHlz3u6l2IO+NOkTLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRHYgy8HtBHHikKdpxw0ZOLF0NoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWM5ZWM4MjctNDgyYy0z OGQ3LTg3YTAtZTEwZWQ2YjEyMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgSTLvhrOkqUtXPcEHG2n3PWECML/BC0HYBZGRWtErUw8RwH1y5MW42 NuYImp4ZwukMFThQH5CYMLomCPbl/4mBZV0DCmGHd5qaIPlfeRWr8gPw+P0T3tSO nKK/P2z5VnkvpkS6DB6VhDV0aExBE5ywM9wF+/Z+L4MQUxowheD2jRebPz65dl11 a2go8EAe7iOMM1yF4jYp/1NEyKqEQ/zxIjkfraaDOjzS1e2hfS47DwoXBAam21uC c3mKW3IwlmjNB6tED1Q8LIy7VRCbomHqK+z92v7O41g/vCu1jR1zTSsD3r1WC6pk 3tdg2meurFmaurh9aI4kBH5AOe9VK2A= -----END CERTIFICATE-----Generated at Tue Sep 22 12:21:08 2026 by rpki-client