$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a9ce9800-3014-3b03-9e02-f4949d3c3746.roa File: a9ce9800-3014-3b03-9e02-f4949d3c3746.roa (raw, json) Hash identifier: iKUC+9VD3DI5z7Klx1QMTMlv2VLxLXD3eJqwpR6RetI= Subject key identifier: A5:05:58:E5:59:F3:04:90:4F:9C:09:2D:79:CC:A1:9D:23:55:21:84 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B987236B8F07018B454405680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a9ce9800-3014-3b03-9e02-f4949d3c3746.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7385 IP address blocks: 23.27.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:36:b8:f0:70:18:b4:54:40:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=09c92a15-3590-454f-8271-3f9095974dcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:6e:d8:6e:1f:db:4a:52:a2:5d:d5:44:4a: 65:0d:b6:9d:88:32:c6:be:12:a8:85:93:b7:a4:df: 80:7d:e9:fc:83:8a:e6:2f:ca:d9:e8:62:97:5c:ad: 58:ff:19:27:ee:09:89:d6:12:ca:66:97:20:82:94: fc:3b:b9:1d:7b:3b:ca:08:a2:31:d3:c0:50:32:d5: 73:c1:22:5c:64:ce:2b:64:5f:31:bd:34:2c:78:72: 0e:2a:c1:39:6c:aa:d8:a8:3a:91:36:cf:15:6f:b9: 27:05:ae:1e:db:b6:c0:f2:83:c7:c3:c8:1f:fb:89: fc:58:cb:7f:f0:4d:34:63:e2:fa:b2:32:6b:1e:87: 6c:da:df:19:c0:a9:03:eb:a5:6b:e6:b8:54:12:c8: 9b:88:bb:94:62:7e:9b:48:58:6b:41:12:b6:25:8d: f6:86:41:2f:99:5c:09:ec:8c:5c:fb:7f:b0:c6:33: 8d:fe:b1:2d:57:d7:12:1c:33:f5:bd:fa:3d:4d:7f: 3b:b3:3f:1a:bf:f4:16:20:be:f5:81:dd:2d:92:bd: 71:f2:8e:d0:d0:85:34:57:65:9a:b3:ad:06:9a:01: 51:45:98:d5:e2:74:42:49:9a:7b:8c:ed:73:9e:94: 5b:d8:eb:b9:ee:6d:68:e3:2f:6e:86:bb:ca:8d:92: 98:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:05:58:E5:59:F3:04:90:4F:9C:09:2D:79:CC:A1:9D:23:55:21:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a9ce9800-3014-3b03-9e02-f4949d3c3746.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a8:0b:97:1e:0c:87:3e:71:88:dd:96:7d:c0:69:86:ad:84: 4a:7e:ae:fe:1e:3f:d0:61:6a:c4:ed:54:bc:8a:ac:f4:48:45: a9:ab:44:20:7b:ad:27:ad:d2:49:d2:55:d7:c2:a4:14:dc:e2: f0:4a:af:28:ee:8c:32:83:2f:c7:51:4a:bc:65:a6:b5:cf:7a: e7:cc:bd:b8:9e:47:94:bb:42:9c:45:56:d7:34:0d:3c:a4:01: 2e:bf:e3:2b:a4:f9:f1:0c:18:98:08:4d:6f:f4:54:fc:90:7b: 2c:7b:a6:fe:c4:ba:d1:80:11:24:fb:62:86:bb:e1:7e:43:96: ea:d8:6a:da:a7:c0:59:40:37:4e:69:3e:22:e2:11:ea:ce:f3: a6:b5:8e:55:56:a4:84:52:36:32:31:84:10:e8:0e:79:d7:44: a9:db:3b:26:79:ba:f6:c2:5f:4a:5a:67:b4:f5:1d:22:73:e6: 1b:cd:82:e1:e7:e0:65:b4:9e:4e:1c:37:26:90:a9:2f:f2:19: 9d:d6:76:9f:1d:55:28:8b:09:8a:f6:0e:8d:ca:05:b8:b9:a4: 25:fa:50:35:39:af:d5:b7:3b:1d:9d:8a:78:e6:25:ce:ff:92: 57:44:8c:7d:98:1c:5a:6e:77:7e:5d:72:8d:f9:5a:36:ef:e8: 2f:eb:4f:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcja48HAYtFRAVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk MDljOTJhMTUtMzU5MC00NTRmLTgyNzEtM2Y5MDk1OTc0ZGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2lu2G4f20pSol3VREplDbadiDLGvhKohZO3 pN+Afen8g4rmL8rZ6GKXXK1Y/xkn7gmJ1hLKZpcggpT8O7kdezvKCKIx08BQMtVz wSJcZM4rZF8xvTQseHIOKsE5bKrYqDqRNs8Vb7knBa4e27bA8oPHw8gf+4n8WMt/ 8E00Y+L6sjJrHods2t8ZwKkD66Vr5rhUEsibiLuUYn6bSFhrQRK2JY32hkEvmVwJ 7Ixc+3+wxjON/rEtV9cSHDP1vfo9TX87sz8av/QWIL71gd0tkr1x8o7Q0IU0V2Wa s60GmgFRRZjV4nRCSZp7jO1znpRb2Ou57m1o4y9uhrvKjZKY6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUFWOVZ8wSQT5wJLXnMoZ0jVSGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTljZTk4MDAtMzAxNC0z YjAzLTllMDItZjQ5NDlkM2MzNzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGoC5ceDIc+cYjdln3AaYathEp+rv4eP9BhasTtVLyKrPRIRamrRCB7 rSet0knSVdfCpBTc4vBKryjujDKDL8dRSrxlprXPeufMvbieR5S7QpxFVtc0DTyk AS6/4yuk+fEMGJgITW/0VPyQeyx7pv7EutGAEST7Yoa74X5DlurYatqnwFlAN05p PiLiEerO86a1jlVWpIRSNjIxhBDoDnnXRKnbOyZ5uvbCX0paZ7T1HSJz5hvNguHn 4GW0nk4cNyaQqS/yGZ3Wdp8dVSiLCYr2Do3KBbi5pCX6UDU5r9W3Ox2dinjmJc7/ kldEjH2YHFpud35dco35Wjbv6C/rTw8= -----END CERTIFICATE-----Generated at Tue Nov 4 22:03:45 2025 by rpki-client