$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5005a39b-8b35-31c6-aa0e-5dc1605f183b.roa File: 5005a39b-8b35-31c6-aa0e-5dc1605f183b.roa (raw, json) Hash identifier: TkhI84OFmrBbZGeJC/eiboXGGute5f6umNH04BYBFiQ= Subject key identifier: ED:2C:C3:C2:01:73:7A:A9:5C:83:C7:40:64:19:CA:07:A7:48:A3:58 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B821D83081B276B3F8EBA5380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5005a39b-8b35-31c6-aa0e-5dc1605f183b.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 6939 IP address blocks: 23.27.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:83:08:1b:27:6b:3f:8e:ba:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=6bf1acea-7824-4a81-bb33-53c9ab806044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:24:19:ad:eb:75:5f:b6:25:4f:ca:59:81: 6a:0f:2f:41:61:aa:00:ab:ba:f8:be:46:a6:c5:4a: 39:3a:13:64:f4:56:42:83:11:b1:df:d7:78:83:32: e7:9d:05:dd:b0:43:67:eb:ea:a3:2a:0e:b2:39:3b: c0:d8:a0:a9:f2:c3:c6:db:55:7a:7e:73:9f:1b:40: ad:8d:ea:f1:14:ad:58:65:a1:52:9a:d3:c7:d1:03: bd:a9:c1:b7:f9:67:07:98:44:aa:47:ae:b1:30:33: 24:e4:eb:c9:48:cb:07:ba:fb:f7:eb:35:5f:21:5b: 39:61:91:6a:21:78:2c:77:ef:44:b6:7f:20:c6:34: f5:e8:03:44:83:cf:2d:2a:a5:94:79:dd:14:84:87: 9f:d3:1d:bb:e9:83:b0:26:6d:9d:83:68:5c:8b:91: f8:d3:33:04:f5:ca:2e:d4:21:c4:5d:ee:6f:c1:31: 2a:5b:c5:9e:41:13:5e:26:68:aa:ad:4e:5e:72:20: 41:bd:36:1e:eb:e1:78:a6:74:c1:fa:a7:51:87:1c: 6f:0e:6b:4b:07:88:9a:f9:ef:f7:ab:9a:f0:72:88: e0:dd:72:c3:85:15:9f:26:b0:32:bf:e1:e4:66:7e: bc:26:07:f6:e5:e3:dd:b3:93:ce:bf:b7:0c:fc:92: ad:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2C:C3:C2:01:73:7A:A9:5C:83:C7:40:64:19:CA:07:A7:48:A3:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5005a39b-8b35-31c6-aa0e-5dc1605f183b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:47:4c:6e:2b:e8:58:82:21:28:92:08:d3:09:ed:f4:fc:d8: 79:35:bf:27:6c:21:7c:1d:28:e8:9e:f1:b5:ea:ae:72:78:19: 0b:41:1f:90:54:05:39:40:e9:a9:68:b5:d9:f7:1b:74:38:21: 18:a3:bf:d8:58:f7:44:ff:50:bc:89:7b:34:23:cf:b5:8b:e8: 00:49:02:ce:27:f6:97:85:84:96:ab:fa:d4:f5:10:65:66:05: c5:77:73:31:f3:ad:18:7e:e3:ce:57:1d:d7:3f:f9:12:1b:db: 55:10:d9:48:85:01:fc:63:50:34:20:e0:e6:ac:bb:d8:61:98: 4e:a5:9e:a3:51:e6:d5:d7:89:a7:61:86:92:7c:db:e5:45:7a: e0:50:f4:57:45:5e:ff:ae:50:52:2a:c5:25:fb:e1:59:34:1d: dd:45:1e:6d:45:cd:95:eb:b8:57:d7:0b:cf:eb:dd:03:c2:a9: df:6e:39:df:9d:02:f1:93:ec:71:a5:73:c7:5a:5d:0c:e2:97: b1:e5:fe:19:7e:4d:1b:64:dd:14:f6:20:14:20:f8:68:83:f9: db:bf:6c:40:84:c2:58:7e:af:c3:3c:77:d9:4b:1a:42:a9:83: bc:2e:fc:c3:02:16:23:1f:d5:9d:ea:a5:b0:9c:9f:69:40:fa: fd:0e:a2:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYMIGydrP466U4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk NmJmMWFjZWEtNzgyNC00YTgxLWJiMzMtNTNjOWFiODA2MDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSskGa3rdV+2JU/KWYFqDy9BYaoAq7r4vkam xUo5OhNk9FZCgxGx39d4gzLnnQXdsENn6+qjKg6yOTvA2KCp8sPG21V6fnOfG0Ct jerxFK1YZaFSmtPH0QO9qcG3+WcHmESqR66xMDMk5OvJSMsHuvv36zVfIVs5YZFq IXgsd+9Etn8gxjT16ANEg88tKqWUed0UhIef0x276YOwJm2dg2hci5H40zME9cou 1CHEXe5vwTEqW8WeQRNeJmiqrU5eciBBvTYe6+F4pnTB+qdRhxxvDmtLB4ia+e/3 q5rwcojg3XLDhRWfJrAyv+HkZn68Jgf25ePds5POv7cM/JKtVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0sw8IBc3qpXIPHQGQZygenSKNYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTAwNWEzOWItOGIzNS0z MWM2LWFhMGUtNWRjMTYwNWYxODNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJVHTG4r6FiCISiSCNMJ7fT82Hk1vydsIXwdKOie8bXqrnJ4GQtBH5BU BTlA6alotdn3G3Q4IRijv9hY90T/ULyJezQjz7WL6ABJAs4n9peFhJar+tT1EGVm BcV3czHzrRh+485XHdc/+RIb21UQ2UiFAfxjUDQg4Oasu9hhmE6lnqNR5tXXiadh hpJ82+VFeuBQ9FdFXv+uUFIqxSX74Vk0Hd1FHm1FzZXruFfXC8/r3QPCqd9uOd+d AvGT7HGlc8daXQzil7Hl/hl+TRtk3RT2IBQg+GiD+du/bECEwlh+r8M8d9lLGkKp g7wu/MMCFiMf1Z3qpbCcn2lA+v0OoqY= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:06 2025 by rpki-client