$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa File: 3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa (raw, json) Hash identifier: 3OxWCF56rFbte2kuEu+Lp5/HAFxUXbARsjirTc6lu8c= Subject key identifier: 1C:87:69:22:33:8D:6E:90:E1:20:6E:8A:AC:26:D3:AC:75:2F:68:A9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E30FB391415C31DB24A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18779 IP address blocks: 23.27.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:30:fb:39:14:15:c3:1d:b2:4a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5d9f3de5-2e1f-437f-8062-befaf1aeff3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:1b:f1:d1:53:0e:0c:5c:36:bc:7b:e2:7f:37: 07:87:10:62:d4:ef:e7:a9:b8:d3:ca:6f:80:c1:00: 52:d1:26:29:1a:ec:fa:cc:63:85:3a:51:88:64:da: a4:51:06:0b:05:e1:fb:25:8e:bf:a5:77:f0:d3:8e: 47:39:6c:af:ba:8e:fd:2f:15:a8:15:35:4a:d5:e3: 85:f6:54:cd:82:4c:42:31:ce:11:9a:ce:3f:22:99: 08:fe:26:68:b5:4e:51:69:c4:e0:99:9c:be:94:ee: 5a:28:e0:3e:1e:47:db:ed:50:a4:19:6b:35:e4:03: 04:db:20:ed:50:e3:76:50:67:5b:2a:a4:43:34:aa: c4:96:e6:c0:fe:9e:5d:f7:b1:15:90:d2:8f:fe:ac: 9c:4b:41:bc:54:1b:16:af:f1:2f:03:97:55:8e:0b: 70:17:6f:cd:58:3f:ad:6d:ad:cc:c1:62:13:52:e1: 7d:cc:aa:61:a1:21:40:6d:5f:ac:d7:a4:09:06:53: 5a:52:8f:ee:df:02:33:a8:12:fd:36:2d:66:54:83: a8:8e:5d:6f:66:e4:45:62:66:98:9f:68:dc:8f:07: 72:2d:1e:8d:ed:b2:97:9a:a8:89:6e:bc:38:a8:94: 49:f1:48:1b:a9:58:5b:d7:52:53:40:2b:bf:86:9b: 01:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:87:69:22:33:8D:6E:90:E1:20:6E:8A:AC:26:D3:AC:75:2F:68:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3e08dd3d-c968-3562-8bd6-ddc5971ef85a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:09:71:1e:be:cb:7d:90:d7:a7:0f:7a:68:f6:bc:f4:73:64: ef:68:f1:55:3e:53:4f:cb:a6:6a:6d:2b:86:2d:5e:d3:68:94: 5a:8c:3d:2a:45:4f:67:10:53:07:aa:1e:4d:a4:56:dd:e1:4b: 1e:ea:10:d9:c1:01:2e:3d:c7:10:33:58:06:b1:74:18:9a:44: f7:c4:f8:c5:65:7a:3e:12:4d:c7:82:27:57:7b:64:dc:6b:b9: a0:4a:ec:f2:7d:df:e6:ac:e9:d1:87:12:4f:1f:b6:fa:df:ea: df:cf:c6:7b:98:77:13:4f:23:ca:7f:d1:8a:26:39:1e:e0:62: a8:7e:f9:ee:a9:32:67:d8:be:5a:ed:37:a0:df:8e:33:9b:95: 8b:4f:c2:9b:83:8b:dd:8d:77:aa:d3:06:df:b2:65:aa:ca:4a: 75:3d:92:ef:32:26:c1:3a:19:f2:d5:2c:c0:ab:e3:a6:72:5c: 0b:3d:41:bf:2b:4e:7a:db:c3:37:97:1e:0d:f7:81:90:55:b3: f6:07:b3:10:10:54:16:83:bd:3c:c0:35:1e:b1:3f:64:7c:51: 07:9b:f9:54:61:35:3a:d6:4a:52:09:04:04:5c:fa:c1:05:6b: 77:17:ed:c0:e4:d5:f4:a4:e1:78:e4:60:b5:a4:21:6c:87:61: c3:0d:9e:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfjD7ORQVwx2ySoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWQ5ZjNkZTUtMmUxZi00MzdmLTgwNjItYmVmYWYxYWVmZjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xvx0VMODFw2vHvifzcHhxBi1O/nqbjTym+A wQBS0SYpGuz6zGOFOlGIZNqkUQYLBeH7JY6/pXfw045HOWyvuo79LxWoFTVK1eOF 9lTNgkxCMc4Rms4/IpkI/iZotU5RacTgmZy+lO5aKOA+Hkfb7VCkGWs15AME2yDt UON2UGdbKqRDNKrElubA/p5d97EVkNKP/qycS0G8VBsWr/EvA5dVjgtwF2/NWD+t ba3MwWITUuF9zKphoSFAbV+s16QJBlNaUo/u3wIzqBL9Ni1mVIOojl1vZuRFYmaY n2jcjwdyLR6N7bKXmqiJbrw4qJRJ8UgbqVhb11JTQCu/hpsBlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFByHaSIzjW6Q4SBuiqwm06x1L2ipMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2UwOGRkM2QtYzk2OC0z NTYyLThiZDYtZGRjNTk3MWVmODVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4JcR6+y32Q16cPemj2vPRzZO9o8VU+U0/LpmptK4YtXtNolFqMPSpF T2cQUweqHk2kVt3hSx7qENnBAS49xxAzWAaxdBiaRPfE+MVlej4STceCJ1d7ZNxr uaBK7PJ93+as6dGHEk8ftvrf6t/PxnuYdxNPI8p/0YomOR7gYqh++e6pMmfYvlrt N6DfjjOblYtPwpuDi92Nd6rTBt+yZarKSnU9ku8yJsE6GfLVLMCr46ZyXAs9Qb8r TnrbwzeXHg33gZBVs/YHsxAQVBaDvTzANR6xP2R8UQeb+VRhNTrWSlIJBARc+sEF a3cX7cDk1fSk4XjkYLWkIWyHYcMNnvE= -----END CERTIFICATE-----Generated at Tue Sep 29 08:27:56 2026 by rpki-client