$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b3acf0-78e9-3d17-9958-7af71bbec206.roa File: a2b3acf0-78e9-3d17-9958-7af71bbec206.roa (raw, json) Hash identifier: XjniCiR+4YxWcp99N2ocDJxbQzGnG3CfgQQOR8dp4Kw= Subject key identifier: F5:27:33:B3:8D:2A:CB:C7:79:23:08:47:FF:4D:FA:81:DA:78:7E:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584FB93BBB697A85F334F1B97900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b3acf0-78e9-3d17-9958-7af71bbec206.roa Signing time: Wed 04 Nov 2026 02:00:13 +0000 ROA not before: Wed 04 Nov 2026 02:00:13 +0000 ROA not after: Tue 02 Feb 2027 02:00:13 +0000 asID: 212669 IP address blocks: 23.27.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b9:3b:bb:69:7a:85:f3:34:f1:b9:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 4 02:00:13 2026 GMT Not After : Feb 2 02:00:13 2027 GMT Subject: CN=1befad00-d05c-4b58-98ca-b11ea857b08a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:65:56:4e:0e:8d:09:b9:2b:4f:13:60:61:7e: 09:ee:5a:31:9a:aa:19:a8:10:58:22:19:57:ae:10: 23:50:24:bf:68:ad:1e:01:ed:e4:30:4a:36:66:d0: dc:e3:de:00:b8:88:54:c1:d9:59:5c:fb:8c:95:fa: d2:15:42:ca:f8:fc:36:b6:1c:fc:61:44:ac:f6:10: 63:26:85:b6:34:d2:17:10:d4:5e:73:b0:21:78:d7: 9c:0c:23:e8:ae:31:45:a4:51:09:e0:26:b7:93:42: 7e:02:1c:60:2d:f0:56:f1:c0:44:21:28:53:bb:9b: 50:2c:b8:e1:39:c3:95:fc:71:9a:5f:b4:84:04:1d: 2d:03:a8:39:b8:bf:2e:7e:72:e5:90:ca:93:37:da: 8a:65:cc:a5:67:82:56:f0:8d:4e:84:70:b6:94:6a: 6a:fc:44:a1:8f:c8:fe:05:18:9f:9f:5e:8a:5b:83: 7d:c6:18:6c:a5:94:79:01:db:95:b3:31:2c:fa:48: c5:bd:39:4b:53:16:fd:58:2d:0c:81:49:79:c4:32: 60:6c:c0:43:ac:08:34:20:05:ee:e5:c5:eb:22:6f: 7c:be:46:4e:05:d8:ba:36:d9:20:1a:00:f7:e9:35: af:22:80:55:8b:fc:f8:4c:15:6f:57:5a:96:3f:ba: e3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:27:33:B3:8D:2A:CB:C7:79:23:08:47:FF:4D:FA:81:DA:78:7E:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a2b3acf0-78e9-3d17-9958-7af71bbec206.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7c:bb:04:98:31:6e:80:3d:89:02:4b:33:69:9e:69:7d:63: e7:6a:29:c8:cb:55:5c:54:6b:75:fa:c3:bf:e2:28:e4:37:bd: 09:89:09:57:ba:83:e1:83:ae:b2:a4:cb:db:32:51:b5:1f:d7: dc:3d:05:5c:1e:3c:61:3c:2a:35:33:98:3d:29:24:46:92:c1: 05:d5:55:1a:dd:81:10:91:08:a2:cf:b1:35:38:07:f8:70:0e: 96:2c:5b:66:55:71:e1:2f:c3:e8:b0:38:95:44:84:93:3b:7b: cd:66:d8:c9:24:8f:2b:18:23:80:15:5d:ba:91:66:1d:be:6e: 4b:6f:27:00:77:69:13:e9:b6:e8:b5:3b:5d:d2:1a:9c:ce:43: 98:29:43:3a:46:d4:9b:2c:50:51:27:06:b2:3c:11:1a:ec:06: 6c:16:fb:df:8d:c6:3a:59:02:3c:ab:22:a4:a2:e3:48:fe:63: 07:f7:57:63:b7:1a:42:be:a3:90:40:a5:d5:d4:ea:d5:60:62: ed:e9:4e:b8:4a:59:68:ee:e2:cd:ec:75:88:10:65:f7:ec:25: f7:dc:9b:58:a3:f6:c4:ae:3c:60:c5:2b:49:2c:37:28:81:c4: 4c:36:d4:31:6f:7e:95:68:b0:97:42:68:b6:77:22:06:cc:f2: 5f:0e:aa:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+5O7tpeoXzNPG5eQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTEwNDAyMDAxM1oXDTI3MDIwMjAyMDAxM1owLzEtMCsGA1UEAxMk MWJlZmFkMDAtZDA1Yy00YjU4LTk4Y2EtYjExZWE4NTdiMDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2VWTg6NCbkrTxNgYX4J7loxmqoZqBBYIhlX rhAjUCS/aK0eAe3kMEo2ZtDc494AuIhUwdlZXPuMlfrSFULK+Pw2thz8YUSs9hBj JoW2NNIXENRec7AheNecDCPorjFFpFEJ4Ca3k0J+AhxgLfBW8cBEIShTu5tQLLjh OcOV/HGaX7SEBB0tA6g5uL8ufnLlkMqTN9qKZcylZ4JW8I1OhHC2lGpq/EShj8j+ BRifn16KW4N9xhhspZR5AduVszEs+kjFvTlLUxb9WC0MgUl5xDJgbMBDrAg0IAXu 5cXrIm98vkZOBdi6NtkgGgD36TWvIoBVi/z4TBVvV1qWP7rj5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUnM7ONKsvHeSMIR/9N+oHaeH5VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTJiM2FjZjAtNzhlOS0z ZDE3LTk5NTgtN2FmNzFiYmVjMjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFl8uwSYMW6APYkCSzNpnml9Y+dqKcjLVVxUa3X6w7/iKOQ3vQmJCVe6 g+GDrrKky9syUbUf19w9BVwePGE8KjUzmD0pJEaSwQXVVRrdgRCRCKLPsTU4B/hw DpYsW2ZVceEvw+iwOJVEhJM7e81m2MkkjysYI4AVXbqRZh2+bktvJwB3aRPptui1 O13SGpzOQ5gpQzpG1JssUFEnBrI8ERrsBmwW+9+NxjpZAjyrIqSi40j+Ywf3V2O3 GkK+o5BApdXU6tVgYu3pTrhKWWju4s3sdYgQZffsJffcm1ij9sSuPGDFK0ksNyiB xEw21DFvfpVosJdCaLZ3IgbM8l8Oqng= -----END CERTIFICATE-----Generated at Thu Nov 5 20:01:16 2026 by rpki-client