$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa File: bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa (raw, json) Hash identifier: fTGePldSfJA8lBAOPUKgbboEy/QKsglWabZS0py2E1M= Subject key identifier: 05:C3:EE:29:67:11:C5:C5:AC:4E:FC:02:21:13:14:3A:F4:9B:71:FD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B987248B610E6E1F282C04680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7385 IP address blocks: 23.27.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:48:b6:10:e6:e1:f2:82:c0:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=8c45aec5-fbb0-4190-ab4c-a4736bf5da64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7b:df:b7:f2:d8:bc:17:b9:e9:5f:53:00:02: cd:f8:e1:40:78:37:e6:8f:be:ac:7d:00:7d:8c:a6: e7:cc:48:17:7e:2f:bc:28:8c:d1:bf:bf:f6:ce:10: bc:2e:28:5a:be:e3:f0:c9:31:fe:61:c1:44:74:25: 08:89:b1:f5:9f:c6:18:65:ea:3c:f5:82:ee:0b:8b: 65:17:f2:a4:b4:b5:d4:81:9d:1a:6c:9b:4e:21:eb: 0b:01:00:9c:f2:53:35:5e:21:03:75:3c:99:8c:3e: 29:7b:cb:3a:0f:ec:ab:8f:ae:49:86:0b:bb:fc:a2: db:ed:69:1e:ac:41:04:5d:57:8d:16:71:9a:bc:9b: ff:d3:88:a7:51:c1:38:52:a5:5d:01:c0:55:fe:cc: e2:3e:06:aa:39:96:c3:eb:fc:85:0e:39:ea:21:8d: 55:d1:4c:b2:45:6d:86:c5:fc:6a:c5:f3:fd:3e:14: a7:9b:fa:bc:04:90:f5:ca:0a:7e:51:cd:79:d6:6d: 74:99:19:82:ab:52:af:ec:23:e0:71:f8:47:cd:07: 30:37:3a:b7:5e:88:b2:67:10:0a:79:50:b6:53:36: b1:a5:79:00:a8:7c:21:51:6a:d7:26:e7:54:c8:3e: 69:da:bf:43:87:47:c9:1a:17:85:2d:f7:0e:65:b4: 57:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C3:EE:29:67:11:C5:C5:AC:4E:FC:02:21:13:14:3A:F4:9B:71:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bf31851a-c3eb-39cf-9ef9-0b79cfa230e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:e5:90:7f:a5:20:9f:26:ea:48:d4:cf:ad:01:ef:d3:4e:89: 40:27:be:c4:2a:86:81:3e:9c:85:e6:9c:d4:c1:45:97:80:bc: d6:d1:73:ad:8d:47:11:7e:53:f4:4a:ca:ca:12:1a:d2:19:8d: 84:ee:f6:88:b1:6c:1c:e9:51:5a:1f:30:17:cb:0d:a3:04:48: 44:ba:18:29:29:99:7a:04:d9:0f:2f:d6:fd:52:62:a8:ac:91: b1:a6:69:f2:4d:6a:1d:95:20:ef:07:49:e2:a5:e9:eb:9a:0f: 51:2a:2d:e1:07:7b:33:05:90:ac:ab:a7:bf:ef:8c:4c:9a:ca: 0c:88:7e:05:b0:92:e6:8a:40:f1:4a:aa:e5:3c:c5:4f:b0:2a: 88:9d:95:b9:52:47:d4:97:c2:9d:77:42:ff:10:87:9f:ef:bf: 18:4c:ac:31:5a:8d:47:71:78:3e:da:66:c2:69:e5:3a:e0:61: 02:db:a7:1e:28:9c:37:dc:94:9f:ee:f0:40:f2:32:65:33:47: 74:a0:28:29:97:39:1a:9f:85:5a:79:e3:38:d7:af:11:61:9b: a1:ed:c8:ab:45:51:bf:68:b6:92:cf:35:51:96:6f:2b:55:31: 8c:bc:05:79:c6:80:52:43:85:6f:34:9c:40:5f:08:02:b0:85: 7f:88:b2:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYcki2EObh8oLARoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk OGM0NWFlYzUtZmJiMC00MTkwLWFiNGMtYTQ3MzZiZjVkYTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXvft/LYvBe56V9TAALN+OFAeDfmj76sfQB9 jKbnzEgXfi+8KIzRv7/2zhC8LihavuPwyTH+YcFEdCUIibH1n8YYZeo89YLuC4tl F/KktLXUgZ0abJtOIesLAQCc8lM1XiEDdTyZjD4pe8s6D+yrj65Jhgu7/KLb7Wke rEEEXVeNFnGavJv/04inUcE4UqVdAcBV/sziPgaqOZbD6/yFDjnqIY1V0UyyRW2G xfxqxfP9PhSnm/q8BJD1ygp+Uc151m10mRmCq1Kv7CPgcfhHzQcwNzq3XoiyZxAK eVC2UzaxpXkAqHwhUWrXJudUyD5p2r9Dh0fJGheFLfcOZbRXdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXD7ilnEcXFrE78AiETFDr0m3H9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmYzMTg1MWEtYzNlYi0z OWNmLTllZjktMGI3OWNmYTIzMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETlkH+lIJ8m6kjUz60B79NOiUAnvsQqhoE+nIXmnNTBRZeAvNbRc62N RxF+U/RKysoSGtIZjYTu9oixbBzpUVofMBfLDaMESES6GCkpmXoE2Q8v1v1SYqis kbGmafJNah2VIO8HSeKl6euaD1EqLeEHezMFkKyrp7/vjEyaygyIfgWwkuaKQPFK quU8xU+wKoidlblSR9SXwp13Qv8Qh5/vvxhMrDFajUdxeD7aZsJp5TrgYQLbpx4o nDfclJ/u8EDyMmUzR3SgKCmXORqfhVp54zjXrxFhm6HtyKtFUb9otpLPNVGWbytV MYy8BXnGgFJDhW80nEBfCAKwhX+IsoA= -----END CERTIFICATE-----Generated at Tue Nov 4 22:04:18 2025 by rpki-client