$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa File: 24389646-f33e-3ab4-8e45-b731e4365860.roa (raw, json) Hash identifier: SHG/czMzc6eueit7nv3bWPPpgC4BWEcWnsodydeh1n8= Subject key identifier: D9:38:9D:5B:D3:C9:39:58:0C:4C:7F:33:56:16:28:54:B9:19:81:08 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4C3D440C3D5D15943FD4DA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 201106 IP address blocks: 23.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:44:0c:3d:5d:15:94:3f:d4:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=0b4bd3ac-2cf5-4695-8760-57b8f713e6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:65:a9:1e:47:24:78:b6:90:f0:ea:53:6e: e8:a3:08:84:53:fd:3b:0a:cd:c0:ef:d4:d7:84:05: 9e:88:4a:af:a3:b2:44:0e:34:7e:d4:47:7d:1c:b3: e4:e6:8a:02:55:5f:9b:87:0e:ac:4b:10:16:8f:1a: e6:e3:fc:2d:2d:86:42:d3:fb:6a:69:55:d7:fb:e7: 1d:ce:a6:59:14:cf:0e:0f:87:71:e5:18:92:db:05: 7b:7c:89:94:25:77:96:49:f5:ff:d4:9a:dc:b3:53: 97:5d:6c:55:80:a9:bc:88:2c:33:92:38:de:5e:d1: cf:9f:fa:a5:6d:0c:bb:65:92:b4:41:4f:96:70:81: 9a:c0:a8:d3:c7:bf:ce:4d:7e:9f:94:e8:ae:db:95: 07:a9:c1:9d:0c:ff:6f:6d:da:49:e5:d9:9d:be:0d: c5:fc:62:ec:40:b3:28:2b:71:22:5a:50:09:b6:57: 2c:3e:32:63:42:24:84:fa:22:93:00:1c:ef:ec:98: 37:7f:5c:8e:21:67:9f:c8:ef:d3:bd:97:79:ce:bc: 4c:1b:d3:3f:f5:96:e9:c1:69:6c:6d:ee:34:c7:bf: 72:f4:03:eb:3b:3f:61:39:77:83:0f:3c:3c:3d:b8: 2b:b4:c5:c7:9d:6d:26:01:06:35:df:02:8e:14:24: ff:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:38:9D:5B:D3:C9:39:58:0C:4C:7F:33:56:16:28:54:B9:19:81:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/24389646-f33e-3ab4-8e45-b731e4365860.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7e:d0:b6:ab:d6:ce:82:9c:56:6f:1a:f4:f4:89:7c:10:40: fd:92:7f:11:2d:d8:05:3e:29:1c:78:7c:6b:f5:97:0c:c4:fd: 13:e7:9b:28:85:3c:df:a0:d1:ad:b7:3e:00:a2:e2:ac:d6:d0: 5e:ae:69:77:72:7f:e1:67:5f:d0:b5:0e:32:ab:f3:cc:62:fe: ce:fa:96:71:ce:f4:cf:e3:bc:a5:55:d0:96:9b:48:ab:86:ce: 9c:d2:1d:10:e1:d7:02:b0:a6:8d:ab:23:ac:e1:dd:b0:88:8d: cc:d1:5c:d9:b6:70:0b:86:8f:61:49:ec:1e:ab:37:ab:73:31: 6a:fe:f8:de:bd:ae:5a:50:4f:9f:d2:19:f4:9c:e9:26:24:e3: ee:17:22:3a:28:9c:31:ea:22:1c:c4:c4:cb:43:f1:4b:18:a8: 54:92:e8:e9:5c:18:61:d7:60:71:2e:fa:39:48:fd:ee:33:07: 5d:a5:01:5e:60:e2:71:95:b1:8d:d4:52:08:bb:61:27:ea:8a: 4b:02:1c:60:05:12:7d:70:46:19:f6:a7:0e:c2:80:71:d3:41: 5b:27:1b:5a:26:4a:4f:db:41:4c:b0:85:71:5c:64:c9:cd:8a: 6b:1e:d3:1b:eb:36:62:01:5d:f5:50:1e:1e:18:e4:89:51:d4: d6:14:ef:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPUQMPV0VlD/U2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MGI0YmQzYWMtMmNmNS00Njk1LTg3NjAtNTdiOGY3MTNlNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo79lqR5HJHi2kPDqU27oowiEU/07Cs3A79TX hAWeiEqvo7JEDjR+1Ed9HLPk5ooCVV+bhw6sSxAWjxrm4/wtLYZC0/tqaVXX++cd zqZZFM8OD4dx5RiS2wV7fImUJXeWSfX/1Jrcs1OXXWxVgKm8iCwzkjjeXtHPn/ql bQy7ZZK0QU+WcIGawKjTx7/OTX6flOiu25UHqcGdDP9vbdpJ5dmdvg3F/GLsQLMo K3EiWlAJtlcsPjJjQiSE+iKTABzv7Jg3f1yOIWefyO/TvZd5zrxMG9M/9ZbpwWls be40x79y9APrOz9hOXeDDzw8PbgrtMXHnW0mAQY13wKOFCT/jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNk4nVvTyTlYDEx/M1YWKFS5GYEIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjQzODk2NDYtZjMzZS0z YWI0LThlNDUtYjczMWU0MzY1ODYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5+0Lar1s6CnFZvGvT0iXwQQP2SfxEt2AU+KRx4fGv1lwzE/RPnmyiF PN+g0a23PgCi4qzW0F6uaXdyf+FnX9C1DjKr88xi/s76lnHO9M/jvKVV0JabSKuG zpzSHRDh1wKwpo2rI6zh3bCIjczRXNm2cAuGj2FJ7B6rN6tzMWr++N69rlpQT5/S GfSc6SYk4+4XIjoonDHqIhzExMtD8UsYqFSS6OlcGGHXYHEu+jlI/e4zB12lAV5g 4nGVsY3UUgi7YSfqiksCHGAFEn1wRhn2pw7CgHHTQVsnG1omSk/bQUywhXFcZMnN imse0xvrNmIBXfVQHh4Y5IlR1NYU78s= -----END CERTIFICATE-----Generated at Sun Oct 11 11:34:52 2026 by rpki-client