$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa File: b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa (raw, json) Hash identifier: iUAwO09D3S+4+4Jf/ebN7jvbl5Ws3Vw01+NVNWegt8o= Subject key identifier: 4B:01:7A:6A:E8:73:28:40:F4:77:8F:B7:56:EE:3F:7F:A4:F4:06:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB45D414D14DD3BE474790082 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 49770 IP address blocks: 23.27.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:41:4d:14:dd:3b:e4:74:79:00:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=9db3c1fd-a6b3-485c-9b08-332bd6a32633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:90:31:7f:fe:27:c0:0e:f6:31:3f:93:c7:8a: 6f:44:04:34:c8:87:50:e3:bf:2b:2e:0a:67:2c:c5: 40:e3:9f:77:27:ca:50:f1:86:17:af:ee:29:0a:15: 86:ba:5d:de:46:cd:79:d8:9b:8e:e2:de:d7:02:30: 39:07:f1:99:60:86:64:46:ee:1d:97:dd:fc:bd:38: 6a:7e:a1:eb:e7:89:d9:c4:3d:37:c1:97:83:82:43: 6a:4e:02:db:c8:49:aa:26:7d:06:79:86:02:02:e8: cf:36:d6:d7:55:4f:7e:9f:1e:13:52:04:b5:48:7c: 37:b3:07:2e:30:40:9d:b7:9b:2f:0f:30:48:6c:c2: 54:f3:ff:47:cc:18:a9:d5:1e:05:93:15:fd:ec:39: e4:4b:fe:01:76:a4:8f:af:3a:dd:9f:dc:41:85:59: b6:ae:46:cb:ee:5d:01:83:c2:c8:7e:64:73:74:51: 63:86:d3:31:e6:ad:bb:3b:c8:a6:35:7b:c7:d7:f8: a1:76:ad:c3:fc:f6:04:05:5b:82:61:84:01:d6:04: 7c:a8:c8:96:18:b3:74:45:6d:b8:20:1d:cb:60:8e: c6:b2:6b:01:f8:cc:59:39:28:38:d3:f5:95:af:e3: 36:64:46:ac:32:59:47:a1:b0:7d:2f:1f:bf:32:73: 81:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:01:7A:6A:E8:73:28:40:F4:77:8F:B7:56:EE:3F:7F:A4:F4:06:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:6b:e7:a5:d3:8c:84:0f:8b:ff:d1:c7:0d:46:79:d0:3a:9f: 21:06:0e:95:77:c4:e0:ac:d0:92:c2:46:56:70:57:6e:10:70: 00:e3:88:4f:0a:74:0a:3e:f9:44:4d:23:85:4a:7b:c1:e7:07: 34:ff:60:f1:2d:62:fb:f1:c9:08:90:a8:ee:82:a9:6d:d7:51: d2:60:b6:24:01:93:7e:fd:3c:5a:87:ea:85:bb:43:57:3b:6d: ac:53:15:b9:82:d2:4d:66:c8:ec:3c:53:2b:08:ed:9a:c4:e0: 0a:e4:31:ac:a5:d4:19:b2:f8:50:84:1a:25:36:99:50:fd:b4: 20:04:df:ba:a4:8b:db:f5:3f:bb:e4:af:2d:2a:fa:39:c4:6a: 2e:d2:af:c6:4e:25:04:8b:23:5f:82:0c:3a:79:1f:c7:37:e7: 2b:94:5d:1f:40:e5:49:6c:9f:cc:f5:a7:ea:28:89:0d:5d:84: 9e:d6:66:5c:61:2e:71:e1:0c:8d:d2:65:8b:97:42:cb:bc:df: bf:45:fc:e2:c6:7d:36:ce:7b:25:9a:a9:c1:91:ab:c8:f0:47: 6a:95:40:01:37:a8:59:f4:a0:29:9f:ef:0b:e6:04:08:e8:8a: f7:74:9d:40:15:52:a8:15:49:72:50:2d:a9:1c:de:53:0a:d6: 4b:f1:ba:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XUFNFN075HR5AIIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk OWRiM2MxZmQtYTZiMy00ODVjLTliMDgtMzMyYmQ2YTMyNjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75Axf/4nwA72MT+Tx4pvRAQ0yIdQ478rLgpn LMVA4593J8pQ8YYXr+4pChWGul3eRs152JuO4t7XAjA5B/GZYIZkRu4dl938vThq fqHr54nZxD03wZeDgkNqTgLbyEmqJn0GeYYCAujPNtbXVU9+nx4TUgS1SHw3swcu MECdt5svDzBIbMJU8/9HzBip1R4FkxX97DnkS/4BdqSPrzrdn9xBhVm2rkbL7l0B g8LIfmRzdFFjhtMx5q27O8imNXvH1/ihdq3D/PYEBVuCYYQB1gR8qMiWGLN0RW24 IB3LYI7GsmsB+MxZOSg40/WVr+M2ZEasMllHobB9Lx+/MnOBbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsBemrocyhA9HePt1buP3+k9AYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjBmYTEyNTgtOGE0MC0z OTVjLThjZTMtYzhhNWYwMWYzMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxu9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJr56XTjIQPi//Rxw1GedA6nyEGDpV3xOCs0JLCRlZwV24QcADjiE8K dAo++URNI4VKe8HnBzT/YPEtYvvxyQiQqO6CqW3XUdJgtiQBk379PFqH6oW7Q1c7 baxTFbmC0k1myOw8UysI7ZrE4ArkMayl1Bmy+FCEGiU2mVD9tCAE37qki9v1P7vk ry0q+jnEai7Sr8ZOJQSLI1+CDDp5H8c35yuUXR9A5Ulsn8z1p+ooiQ1dhJ7WZlxh LnHhDI3SZYuXQsu8379F/OLGfTbOeyWaqcGRq8jwR2qVQAE3qFn0oCmf7wvmBAjo ivd0nUAVUqgVSXJQLakc3lMK1kvxuqE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:29 2025 by rpki-client