$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa File: 3d106c9d-da57-3ede-87a0-891616fb58f5.roa (raw, json) Hash identifier: kC/9LioISkvJT8WQ6wxeSlccMcPrs5/52NUwq89syns= Subject key identifier: C2:59:DB:04:72:24:C8:CE:EB:D9:9D:EE:E8:C1:D9:BC:27:A7:DF:43 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D343A2CB4391D01ABB1D17580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa Signing time: Wed 18 Mar 2026 01:00:33 +0000 ROA not before: Wed 18 Mar 2026 01:00:33 +0000 ROA not after: Tue 16 Jun 2026 01:00:33 +0000 asID: 7018 IP address blocks: 23.27.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:34:3a:2c:b4:39:1d:01:ab:b1:d1:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 01:00:33 2026 GMT Not After : Jun 16 01:00:33 2026 GMT Subject: CN=022ffb9c-bc99-4333-979f-5293933fed51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:1f:4c:24:a8:28:78:ff:cf:be:5f:f4:a3:d9: c6:d2:23:72:ee:1f:01:63:a9:2d:d5:c7:5f:61:2e: 38:ec:1f:54:38:d0:88:23:cb:09:e2:42:d5:ef:3f: 0e:ab:ff:12:57:21:d2:0d:3d:5c:43:1d:f3:59:12: 54:2e:82:0f:fe:bf:44:bb:db:42:46:ef:1a:db:89: 27:6f:cc:25:cc:f6:a8:09:ab:7c:48:51:88:4c:e5: 07:a6:14:41:3a:e3:4c:cb:d4:5f:ae:d6:bc:a8:73: 0a:97:6b:3b:53:35:2a:c3:f0:16:b1:11:07:e4:5f: df:44:8f:0d:65:7b:fd:64:6b:bf:42:92:75:8f:de: a9:2e:62:0d:6f:e6:e6:a1:01:42:47:f5:ad:f9:49: a7:38:c8:83:ce:0c:07:9d:b7:53:7a:07:d1:d2:90: eb:a2:da:f6:5d:7e:ed:54:f5:99:bb:e5:a6:56:1f: ea:22:4a:54:ad:3a:72:aa:1a:65:5d:18:ce:f5:89: 2b:8d:75:fd:88:cd:bc:18:e3:9d:53:a9:dc:14:d2: 76:6b:d5:90:05:43:39:93:d6:a5:ad:ab:30:88:9a: bd:2c:52:86:9d:75:c1:2d:b7:95:db:10:a8:60:0e: a7:d0:f6:26:95:e0:2a:b7:27:53:80:a2:c6:fd:3d: f1:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:59:DB:04:72:24:C8:CE:EB:D9:9D:EE:E8:C1:D9:BC:27:A7:DF:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c3:4c:f4:7f:54:33:a4:2d:d8:a0:0a:b9:1b:01:51:18:24: 8a:d2:75:43:18:03:13:42:65:73:aa:2a:ef:b6:c0:89:c1:c3: 48:3b:1b:6c:9a:6f:f9:6f:60:1e:40:fa:18:af:fa:f4:f7:2f: 61:7e:22:3f:77:19:18:81:90:23:b5:f0:e4:7d:6b:fc:f0:88: 88:19:9b:a7:c2:a2:a6:d9:fd:5b:da:73:d6:cb:a5:11:14:1e: df:6f:52:e5:bd:95:8d:5d:6b:40:2f:cb:c9:87:2c:a0:69:90: 63:65:6f:ac:fb:2d:e5:8c:40:ff:87:87:ff:5a:1f:dd:d5:cb: 25:2d:96:fc:84:76:34:e2:83:5b:63:80:9d:24:40:2f:90:72: ff:1b:95:1f:86:e9:fb:6f:d6:62:69:d4:f4:f8:ca:61:36:c1: ea:2b:ed:90:36:13:f8:6f:36:f0:b1:4d:b6:6a:6c:a0:09:4a: a8:a6:01:ad:47:bc:31:8a:da:cf:e4:c7:49:61:d6:39:55:ff: 15:9d:1b:53:32:c4:d7:07:df:52:3c:12:d9:dd:56:c7:3c:9e: e5:ca:bf:35:65:65:f4:a8:35:79:8e:88:1a:59:f6:03:ff:a5: 48:74:5f:6f:c7:17:b0:86:a7:a2:a0:dc:a4:22:e1:f4:fd:78: 7a:a8:bc:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE00Oiy0OR0Bq7HRdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxODAxMDAzM1oXDTI2MDYxNjAxMDAzM1owLzEtMCsGA1UEAxMk MDIyZmZiOWMtYmM5OS00MzMzLTk3OWYtNTI5MzkzM2ZlZDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkR9MJKgoeP/Pvl/0o9nG0iNy7h8BY6kt1cdf YS447B9UONCII8sJ4kLV7z8Oq/8SVyHSDT1cQx3zWRJULoIP/r9Eu9tCRu8a24kn b8wlzPaoCat8SFGITOUHphRBOuNMy9Rfrta8qHMKl2s7UzUqw/AWsREH5F/fRI8N ZXv9ZGu/QpJ1j96pLmINb+bmoQFCR/Wt+UmnOMiDzgwHnbdTegfR0pDrotr2XX7t VPWZu+WmVh/qIkpUrTpyqhplXRjO9YkrjXX9iM28GOOdU6ncFNJ2a9WQBUM5k9al raswiJq9LFKGnXXBLbeV2xCoYA6n0PYmleAqtydTgKLG/T3xSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJZ2wRyJMjO69md7ujB2bwnp99DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2QxMDZjOWQtZGE1Ny0z ZWRlLTg3YTAtODkxNjE2ZmI1OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzDTPR/VDOkLdigCrkbAVEYJIrSdUMYAxNCZXOqKu+2wInBw0g7G2ya b/lvYB5A+hiv+vT3L2F+Ij93GRiBkCO18OR9a/zwiIgZm6fCoqbZ/Vvac9bLpREU Ht9vUuW9lY1da0Avy8mHLKBpkGNlb6z7LeWMQP+Hh/9aH93VyyUtlvyEdjTig1tj gJ0kQC+Qcv8blR+G6ftv1mJp1PT4ymE2weor7ZA2E/hvNvCxTbZqbKAJSqimAa1H vDGK2s/kx0lh1jlV/xWdG1MyxNcH31I8EtndVsc8nuXKvzVlZfSoNXmOiBpZ9gP/ pUh0X2/HF7CGp6Kg3KQi4fT9eHqovLM= -----END CERTIFICATE-----Generated at Thu Mar 26 19:43:50 2026 by rpki-client