$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec36661c-ece1-3d7a-85e9-23880a949811.roa File: ec36661c-ece1-3d7a-85e9-23880a949811.roa (raw, json) Hash identifier: 0jijjutdzSwax2fxj2O8Cd19DgCEW7ZHpbbBpeG9OeM= Subject key identifier: CC:5C:76:DB:10:04:4A:3D:D8:AD:E5:59:20:E8:F7:03:C4:65:DE:43 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B7DECC1F689474A87DCB62200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec36661c-ece1-3d7a-85e9-23880a949811.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 149440 IP address blocks: 23.27.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:c1:f6:89:47:4a:87:dc:b6:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=a3eee656-e23a-406d-b035-1c72ce54cdf3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:8a:82:47:6c:9c:e9:51:aa:26:87:e5:5e: bb:97:21:d7:2e:fd:ce:82:5e:ea:e6:1b:1f:c9:cc: f1:34:e3:dd:e0:d5:9b:a7:07:90:45:c1:fe:9d:6a: 82:d2:7b:33:bb:be:c5:9b:5a:b2:51:9e:35:00:62: 49:ad:e5:34:f5:14:78:a8:e7:88:de:92:b5:a7:1f: 25:da:c4:36:e2:bb:50:4d:25:8e:c4:8f:94:b9:0f: 30:af:3b:30:f3:4d:eb:4b:b1:f7:88:93:49:7c:95: de:9e:c7:fd:3f:5d:db:6a:4c:0a:76:67:76:60:6f: e4:7c:4c:9c:3b:4a:a4:17:d5:dc:f8:e5:35:fa:b5: f6:20:c1:e3:1e:3c:71:99:a1:e2:1b:06:71:06:31: cb:3f:fa:61:f9:98:10:c7:5d:dd:d3:fe:14:45:6e: f1:b5:2b:38:cd:a0:6f:f7:91:5b:22:21:1e:6a:22: 89:61:e0:16:ca:67:04:76:7e:de:0c:63:22:0d:32: 72:ef:b8:a4:ac:6c:a5:cf:94:1f:b1:10:09:f7:ea: 88:ca:45:f7:a8:28:d6:8c:f5:30:07:5b:67:a0:b3: 5f:30:53:24:1c:5f:af:1e:ec:86:9b:67:49:ab:33: e9:59:3a:d2:a3:40:cf:31:e8:18:8a:72:01:cd:e4: e6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5C:76:DB:10:04:4A:3D:D8:AD:E5:59:20:E8:F7:03:C4:65:DE:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ec36661c-ece1-3d7a-85e9-23880a949811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0c:d6:c9:b1:61:3b:93:46:bc:27:99:a4:c3:1c:90:4c:58: d4:8a:5f:88:28:b0:6f:35:f3:b3:36:c9:1c:84:df:9f:45:7a: 6d:e5:85:25:ea:4d:fe:b0:23:46:cb:10:7a:6b:7f:f4:c6:e6: 24:85:cd:e2:4b:da:d0:31:c3:fc:83:07:c3:e9:0b:fb:70:5b: 2d:10:bd:3f:24:78:ee:0c:c0:96:e5:c3:4f:5c:31:83:3b:9b: 7d:69:4a:a1:ac:88:4e:c8:c4:2c:c6:bc:5f:c2:a6:fa:18:48: 6f:7c:ab:6f:5a:53:88:23:05:35:28:26:4b:8f:2c:be:f4:4d: 75:84:67:77:32:4e:52:aa:59:3a:ad:2d:ff:44:54:18:99:7d: b2:aa:6b:24:39:af:5a:e2:4e:2e:ab:e9:ad:cc:f3:e9:e8:bc: 28:65:55:3d:ff:45:bd:77:ab:6c:37:de:01:b8:6d:7e:5c:bb: af:ff:c2:0b:43:f6:c0:cf:14:f6:7d:39:96:c4:e7:2f:ee:9d: 5c:d4:cf:16:a7:8e:39:ad:28:0a:73:f2:43:4c:dd:c4:3b:cd: 70:6a:7e:b6:26:1f:5f:de:04:ef:f6:70:e9:a0:75:56:eb:f4: c6:04:24:f5:94:7f:b3:45:8e:cb:a9:62:c3:9d:09:02:28:1c: a5:0f:b4:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97MH2iUdKh9y2IgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk YTNlZWU2NTYtZTIzYS00MDZkLWIwMzUtMWM3MmNlNTRjZGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLCKgkdsnOlRqiaH5V67lyHXLv3Ogl7q5hsf yczxNOPd4NWbpweQRcH+nWqC0nszu77Fm1qyUZ41AGJJreU09RR4qOeI3pK1px8l 2sQ24rtQTSWOxI+UuQ8wrzsw803rS7H3iJNJfJXensf9P13bakwKdmd2YG/kfEyc O0qkF9Xc+OU1+rX2IMHjHjxxmaHiGwZxBjHLP/ph+ZgQx13d0/4URW7xtSs4zaBv 95FbIiEeaiKJYeAWymcEdn7eDGMiDTJy77ikrGylz5QfsRAJ9+qIykX3qCjWjPUw B1tnoLNfMFMkHF+vHuyGm2dJqzPpWTrSo0DPMegYinIBzeTmPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMxcdtsQBEo92K3lWSDo9wPEZd5DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWMzNjY2MWMtZWNlMS0z ZDdhLTg1ZTktMjM4ODBhOTQ5ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgM1smxYTuTRrwnmaTDHJBMWNSKX4gosG8187M2yRyE359Fem3lhSXq Tf6wI0bLEHprf/TG5iSFzeJL2tAxw/yDB8PpC/twWy0QvT8keO4MwJblw09cMYM7 m31pSqGsiE7IxCzGvF/CpvoYSG98q29aU4gjBTUoJkuPLL70TXWEZ3cyTlKqWTqt Lf9EVBiZfbKqayQ5r1riTi6r6a3M8+novChlVT3/Rb13q2w33gG4bX5cu6//wgtD 9sDPFPZ9OZbE5y/unVzUzxanjjmtKApz8kNM3cQ7zXBqfrYmH1/eBO/2cOmgdVbr 9MYEJPWUf7NFjsupYsOdCQIoHKUPtFA= -----END CERTIFICATE-----Generated at Tue Nov 4 21:40:34 2025 by rpki-client