$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3702431-d93f-376f-8c34-0e16b2e912f6.roa File: d3702431-d93f-376f-8c34-0e16b2e912f6.roa (raw, json) Hash identifier: iqcHJTl/82d8r51DO3Ix8WLg2+cAB9SX4ipSWXDMZBA= Subject key identifier: A1:AF:F8:62:41:48:82:06:DF:73:85:7E:69:D5:92:64:DB:59:E5:9D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BBB759C7A6A7D49F1D1610040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3702431-d93f-376f-8c34-0e16b2e912f6.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 40676 IP address blocks: 23.27.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9c:7a:6a:7d:49:f1:d1:61:00:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=131ea457-9728-46fe-9124-f4e4244bc1b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:55:03:23:c0:d2:05:6c:86:5a:f7:de:94:4e: 09:57:14:3b:81:a2:31:2c:db:e2:b1:32:a0:11:94: 7e:3c:32:2a:08:37:23:2b:41:49:18:32:86:c0:6c: 80:e9:b8:dc:38:65:34:bd:65:93:13:31:71:f2:f7: b1:27:55:ca:8c:56:ae:98:7b:54:23:f9:02:c7:ba: 2f:11:ec:b2:0c:34:8b:5b:80:5f:c3:60:f6:72:dc: 58:fb:09:fd:0f:ba:f6:52:4f:ff:77:df:e0:5d:c8: 47:b5:c7:69:81:ba:f0:a5:29:7c:d0:59:73:bd:0f: 99:a0:bf:60:ea:c5:5e:ac:64:e8:15:ad:26:ce:67: d5:7a:76:b6:bc:37:78:d9:63:5f:75:c5:2f:31:a3: d3:56:8b:f2:f5:20:9a:f2:a3:b8:53:01:fb:c5:e2: c5:a7:14:0b:f5:b2:b6:ae:ca:0c:f0:64:c0:11:0c: e7:93:a6:36:a4:19:4c:67:2e:61:12:fe:ff:e1:ec: ff:c0:52:93:91:e0:73:4c:b6:02:e8:7e:88:d8:b7: 46:00:8a:ad:4c:8d:b7:18:bf:b9:e1:ca:59:b3:46: c2:89:eb:e2:03:26:d5:6f:d2:c1:c2:e8:6a:6d:27: 95:11:31:fc:43:e9:54:47:c3:0d:7f:3b:c0:cc:2f: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AF:F8:62:41:48:82:06:DF:73:85:7E:69:D5:92:64:DB:59:E5:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d3702431-d93f-376f-8c34-0e16b2e912f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2f:61:e9:43:73:f9:17:8f:78:9d:cd:48:e0:fe:dc:a8:05: 47:56:2d:88:02:51:c6:3e:3d:2a:6a:f7:07:c5:6f:07:9f:5b: 48:80:82:03:2a:df:77:e3:f3:8a:8e:5a:b5:44:4d:9e:3a:89: 22:3b:b6:7c:a0:26:6c:f7:1f:55:3c:a0:e9:b9:f1:3d:5f:6f: 96:80:8f:1e:7c:c7:e9:35:a6:b2:65:9a:d6:9a:20:c8:c8:b1: c3:7e:b2:56:2d:bc:32:da:a8:03:31:29:67:70:3b:cc:37:74: 93:09:4d:6e:5e:64:12:4d:97:62:de:2a:fd:be:92:49:ab:f3: d8:86:f7:7e:c0:ac:76:9a:1d:6c:c5:bd:0e:93:ba:e0:1f:ab: f8:48:84:aa:58:80:e2:40:66:bd:81:67:d9:05:cc:40:15:2c: ec:45:0b:2d:49:99:8c:70:1c:c4:f0:21:91:e3:5a:23:21:be: a1:ea:82:21:22:22:ee:31:b1:44:04:ed:8b:6d:88:49:78:61: 7b:33:00:de:1a:af:3b:fb:aa:1d:ca:03:b6:56:6e:35:e5:64: ba:0c:82:80:d2:a2:bb:58:43:9b:56:b0:14:a9:0c:7b:b2:b6: 62:8f:ae:6d:6a:b5:55:c9:c3:cf:9b:19:86:a5:8f:f4:6c:3e: c8:e6:e6:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZx6an1J8dFhAEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MTMxZWE0NTctOTcyOC00NmZlLTkxMjQtZjRlNDI0NGJjMWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFUDI8DSBWyGWvfelE4JVxQ7gaIxLNvisTKg EZR+PDIqCDcjK0FJGDKGwGyA6bjcOGU0vWWTEzFx8vexJ1XKjFaumHtUI/kCx7ov EeyyDDSLW4Bfw2D2ctxY+wn9D7r2Uk//d9/gXchHtcdpgbrwpSl80FlzvQ+ZoL9g 6sVerGToFa0mzmfVena2vDd42WNfdcUvMaPTVovy9SCa8qO4UwH7xeLFpxQL9bK2 rsoM8GTAEQznk6Y2pBlMZy5hEv7/4ez/wFKTkeBzTLYC6H6I2LdGAIqtTI23GL+5 4cpZs0bCieviAybVb9LBwuhqbSeVETH8Q+lUR8MNfzvAzC/V/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGv+GJBSIIG33OFfmnVkmTbWeWdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDM3MDI0MzEtZDkzZi0z NzZmLThjMzQtMGUxNmIyZTkxMmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHovYelDc/kXj3idzUjg/tyoBUdWLYgCUcY+PSpq9wfFbwefW0iAggMq 33fj84qOWrVETZ46iSI7tnygJmz3H1U8oOm58T1fb5aAjx58x+k1prJlmtaaIMjI scN+slYtvDLaqAMxKWdwO8w3dJMJTW5eZBJNl2LeKv2+kkmr89iG937ArHaaHWzF vQ6TuuAfq/hIhKpYgOJAZr2BZ9kFzEAVLOxFCy1JmYxwHMTwIZHjWiMhvqHqgiEi Iu4xsUQE7YttiEl4YXszAN4arzv7qh3KA7ZWbjXlZLoMgoDSortYQ5tWsBSpDHuy tmKPrm1qtVXJw8+bGYalj/RsPsjm5gQ= -----END CERTIFICATE-----Generated at Tue Nov 4 20:59:47 2025 by rpki-client