$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa File: ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa (raw, json) Hash identifier: ZTkuXoy2FfoHr8IT+6QHOdWeMYICIKjzMsWXYV0SL/A= Subject key identifier: 15:C8:9E:BE:A3:80:B1:CF:C9:32:94:81:6F:93:F5:B9:03:71:F1:B4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B821D82E8AF1807A0E30A3480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 6939 IP address blocks: 23.27.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:82:e8:af:18:07:a0:e3:0a:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=36172201-a69b-4d88-921e-7b098067a155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:09:40:c4:0f:22:4a:db:17:c8:a7:b3:ce: 66:fd:ae:e2:8e:93:4b:48:09:5c:dd:a9:ed:7f:ef: e1:d7:66:6f:81:c7:52:bf:a5:56:1e:a3:28:8a:27: a9:42:6e:81:cd:ba:52:b2:cf:76:b8:0f:a4:17:7b: b6:df:43:fe:b7:64:df:4e:5f:f7:1d:bc:c3:a8:d3: 7b:2e:05:c0:43:99:b5:80:2e:8e:c6:3f:de:da:e0: 4a:d2:58:f3:f7:ff:7d:b2:cb:6c:36:fa:2c:10:10: d5:eb:8a:37:67:2b:ed:39:fb:58:f8:13:47:a5:14: 87:ae:fd:ae:e4:2f:1c:af:42:f6:87:df:fc:6e:dc: af:cf:09:77:33:c9:e9:1b:7c:a6:18:20:7d:e8:4e: aa:ce:6c:61:27:ef:4b:d4:a3:2d:df:17:b2:f6:b4: a3:b8:f4:33:ff:fc:05:55:cd:38:e9:b3:ac:e8:8e: f1:88:71:37:ba:5a:5d:c7:c4:b7:82:c0:51:27:ea: b5:51:35:75:86:7c:e6:10:a0:1e:2d:08:0c:8b:5b: 03:a5:7a:ef:b9:9e:3d:ae:d5:f0:cf:d3:eb:78:03: 21:99:84:65:65:85:51:69:71:cb:5f:70:23:80:74: 19:2f:9e:b1:26:7b:fd:b1:f3:02:7c:1d:5f:a2:7b: a6:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C8:9E:BE:A3:80:B1:CF:C9:32:94:81:6F:93:F5:B9:03:71:F1:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:02:11:03:bb:da:30:62:bf:8c:2a:17:70:70:e6:e4:f5:5a: b5:d1:b4:f1:42:db:39:48:93:60:92:62:77:7d:00:75:54:f6: 95:b8:d3:56:99:9c:1d:45:bd:9e:e4:3b:83:8f:95:0b:f4:03: 8b:54:9d:c8:ce:75:1e:6a:ea:97:28:44:58:a2:7a:49:85:dc: 13:21:c5:72:75:ff:86:22:4e:da:81:92:db:6d:75:9f:03:a6: 86:3f:dc:23:0e:bf:4a:14:c0:9f:2a:1f:af:f9:5d:8f:c9:cc: bc:47:03:b3:77:83:74:3c:bb:62:36:5d:7c:e4:80:85:18:2f: 5d:0b:cd:11:56:33:4c:2e:12:a3:ce:c2:89:23:53:02:3d:f8: 8e:0f:c0:fc:56:f5:b0:ab:a2:f8:8e:49:ce:e5:76:1f:d1:03: 77:4e:d7:1d:27:34:21:82:2f:23:5c:2b:a5:ea:69:cd:6f:9a: 8d:93:38:da:94:38:86:db:3f:d1:95:33:3c:48:f2:cd:d6:28: 82:c6:97:d7:50:f7:a7:75:65:0b:c8:df:ee:11:73:05:65:5a: 95:06:f4:85:0b:7c:4b:78:f6:bc:c9:c7:9a:0a:df:60:a6:29: 6a:15:2e:fe:65:2e:31:a0:75:72:ba:66:0e:74:86:2d:64:1d: 7a:eb:f7:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYLorxgHoOMKNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk MzYxNzIyMDEtYTY5Yi00ZDg4LTkyMWUtN2IwOTgwNjdhMTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivkJQMQPIkrbF8ins85m/a7ijpNLSAlc3ant f+/h12ZvgcdSv6VWHqMoiiepQm6BzbpSss92uA+kF3u230P+t2TfTl/3HbzDqNN7 LgXAQ5m1gC6Oxj/e2uBK0ljz9/99sstsNvosEBDV64o3ZyvtOftY+BNHpRSHrv2u 5C8cr0L2h9/8btyvzwl3M8npG3ymGCB96E6qzmxhJ+9L1KMt3xey9rSjuPQz//wF Vc046bOs6I7xiHE3ulpdx8S3gsBRJ+q1UTV1hnzmEKAeLQgMi1sDpXrvuZ49rtXw z9PreAMhmYRlZYVRaXHLX3AjgHQZL56xJnv9sfMCfB1fonumtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXInr6jgLHPyTKUgW+T9bkDcfG0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmZlNzc4YjMtMzk4Ny0z NDcyLTliZjYtMWI1YWI5YzJlNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYCEQO72jBiv4wqF3Bw5uT1WrXRtPFC2zlIk2CSYnd9AHVU9pW401aZ nB1FvZ7kO4OPlQv0A4tUncjOdR5q6pcoRFiiekmF3BMhxXJ1/4YiTtqBktttdZ8D poY/3CMOv0oUwJ8qH6/5XY/JzLxHA7N3g3Q8u2I2XXzkgIUYL10LzRFWM0wuEqPO wokjUwI9+I4PwPxW9bCroviOSc7ldh/RA3dO1x0nNCGCLyNcK6Xqac1vmo2TONqU OIbbP9GVMzxI8s3WKILGl9dQ96d1ZQvI3+4RcwVlWpUG9IULfEt49rzJx5oK32Cm KWoVLv5lLjGgdXK6Zg50hi1kHXrr9+k= -----END CERTIFICATE-----Generated at Wed Nov 5 04:44:25 2025 by rpki-client