$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b736a393-4d6b-346f-9fab-4cc1e2831985.roa File: b736a393-4d6b-346f-9fab-4cc1e2831985.roa (raw, json) Hash identifier: UKKiPEi/lop1O9VmuyBFSEDDdKiZTtPb/cfd4OphOj4= Subject key identifier: 14:1D:38:F5:02:45:7A:6A:9F:D2:20:12:0D:0D:F3:A8:F7:FE:95:01 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BBE405A388F3CF9918E6B5470 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b736a393-4d6b-346f-9fab-4cc1e2831985.roa Signing time: Tue 04 Nov 2025 02:00:31 +0000 ROA not before: Tue 04 Nov 2025 02:00:31 +0000 ROA not after: Mon 02 Feb 2026 02:00:31 +0000 asID: 30860 IP address blocks: 23.27.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:be:40:5a:38:8f:3c:f9:91:8e:6b:54:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 4 02:00:31 2025 GMT Not After : Feb 2 02:00:31 2026 GMT Subject: CN=1d1a0125-4814-4c12-bad1-795090756534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:15:33:58:da:2e:95:2c:85:65:d5:ff:4d:42: 5a:53:e2:b5:01:5b:e8:22:20:a8:32:27:73:c7:26: 02:03:ac:77:f2:e9:0d:4f:0c:db:38:d6:53:a5:f4: 13:ca:a1:af:67:27:9a:95:49:eb:c4:3d:0e:1d:e3: f1:a7:7b:cc:9c:2e:0d:2a:52:ba:a7:68:31:31:78: 02:0d:f0:29:11:ed:70:09:75:26:8d:58:ff:39:6f: 3f:b7:61:cf:27:c6:dc:60:62:1f:4f:50:43:07:52: 65:94:33:3d:b0:11:01:a9:04:fc:d2:cc:65:45:f2: e1:18:ab:52:04:43:b2:88:6c:e0:4a:8e:9c:c2:5b: dc:e3:00:37:8a:8a:ea:08:33:a3:8e:5d:4b:0c:4a: dc:15:42:0a:53:f3:90:c4:1a:06:cc:ec:6d:22:c3: c0:89:c9:bf:e5:5c:da:16:8d:a1:8c:e5:c2:1e:b5: 99:dd:a5:24:4f:8a:37:09:2d:11:e0:94:48:c4:20: a8:58:8e:c1:22:66:96:ae:ed:dc:98:5d:8b:4a:be: 48:8b:cb:47:fe:74:88:b5:b1:93:85:0b:c8:f0:1b: 30:fc:9a:be:68:25:88:0a:b7:e1:24:6b:d9:5b:22: 70:3b:fe:c0:0a:bc:2c:84:cb:1f:e6:c5:1e:43:f6: bd:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:1D:38:F5:02:45:7A:6A:9F:D2:20:12:0D:0D:F3:A8:F7:FE:95:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b736a393-4d6b-346f-9fab-4cc1e2831985.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:5b:ec:98:20:28:4d:98:c1:e7:ec:97:a0:3e:1c:9e:a9:15: f4:05:55:7e:98:dc:90:ce:e8:7a:51:36:f3:ec:25:06:20:be: bf:c3:c0:c5:46:50:10:d7:72:99:82:55:d2:63:14:3e:62:2c: 1d:7d:f1:01:9d:9d:10:69:25:ab:c4:21:5b:99:d6:fd:3f:b1: 24:06:be:3e:aa:45:9a:a0:02:44:86:91:d8:12:23:93:77:e0: 2d:b1:38:9c:81:2b:5a:c0:5a:b1:a2:58:5a:b5:76:42:8c:fb: 43:8d:c7:95:8c:fb:21:eb:8a:49:45:ac:b3:6c:1e:ed:07:a1: ee:90:5e:31:3e:56:72:50:3b:3c:6b:66:13:2a:fd:b0:7f:d5: 01:3e:09:c6:c4:47:b6:dd:19:79:c6:c2:35:3e:1c:c5:fe:dc: f9:bc:44:cf:87:50:8f:2b:e7:d5:80:66:4c:93:71:5d:65:25: fe:4c:eb:22:00:3c:fe:87:d1:80:58:e4:68:ca:65:9a:94:9a: 7c:c9:9c:59:78:ce:fe:86:bc:ab:0e:92:f5:1e:6d:6b:bc:2a: 46:7f:f1:8d:69:74:91:10:e2:3b:39:1d:d2:bf:e3:e2:5e:41: ec:62:0d:82:12:33:d3:b0:28:f1:fd:01:47:58:c6:25:af:68: 58:35:fb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu+QFo4jzz5kY5rVHAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwNDAyMDAzMVoXDTI2MDIwMjAyMDAzMVowLzEtMCsGA1UEAxMk MWQxYTAxMjUtNDgxNC00YzEyLWJhZDEtNzk1MDkwNzU2NTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9BUzWNoulSyFZdX/TUJaU+K1AVvoIiCoMidz xyYCA6x38ukNTwzbONZTpfQTyqGvZyealUnrxD0OHePxp3vMnC4NKlK6p2gxMXgC DfApEe1wCXUmjVj/OW8/t2HPJ8bcYGIfT1BDB1JllDM9sBEBqQT80sxlRfLhGKtS BEOyiGzgSo6cwlvc4wA3iorqCDOjjl1LDErcFUIKU/OQxBoGzOxtIsPAicm/5Vza Fo2hjOXCHrWZ3aUkT4o3CS0R4JRIxCCoWI7BImaWru3cmF2LSr5Ii8tH/nSItbGT hQvI8Bsw/Jq+aCWICrfhJGvZWyJwO/7ACrwshMsf5sUeQ/a98wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQdOPUCRXpqn9IgEg0N86j3/pUBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjczNmEzOTMtNGQ2Yi0z NDZmLTlmYWItNGNjMWUyODMxOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdb7JggKE2Ywefsl6A+HJ6pFfQFVX6Y3JDO6HpRNvPsJQYgvr/DwMVG UBDXcpmCVdJjFD5iLB198QGdnRBpJavEIVuZ1v0/sSQGvj6qRZqgAkSGkdgSI5N3 4C2xOJyBK1rAWrGiWFq1dkKM+0ONx5WM+yHriklFrLNsHu0Hoe6QXjE+VnJQOzxr ZhMq/bB/1QE+CcbER7bdGXnGwjU+HMX+3Pm8RM+HUI8r59WAZkyTcV1lJf5M6yIA PP6H0YBY5GjKZZqUmnzJnFl4zv6GvKsOkvUebWu8KkZ/8Y1pdJEQ4js5HdK/4+Je QexiDYISM9OwKPH9AUdYxiWvaFg1+/M= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:59 2025 by rpki-client