$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa File: 5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa (raw, json) Hash identifier: aLE0PwGjaJw0jMqvWIzcrG1OlsDvBXaK5un+PgI/akM= Subject key identifier: 0A:89:F5:0D:4E:49:64:D1:A2:8A:17:D4:B6:B7:26:A3:80:3A:A6:A5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D143D50E25BEAF0CB0F667D20 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 209854 IP address blocks: 23.27.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:50:e2:5b:ea:f0:cb:0f:66:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=4f286c8f-dff9-4584-80f3-15f9301f5984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3a:21:84:2e:32:db:14:dc:92:fb:e1:78:23: 56:18:d0:a3:62:43:8b:21:ad:0f:cc:e9:ef:14:68: 81:ca:19:c1:a3:c3:fb:ef:3e:b1:dd:10:6e:25:9c: 14:5b:df:ad:f9:f7:e5:31:e9:87:d6:1e:60:c1:8c: 60:ce:f9:2c:95:47:69:3d:77:ce:c9:f6:fa:e2:34: ac:a8:75:fb:af:e0:c8:80:68:82:32:26:eb:bf:49: ec:8c:d8:0e:58:e4:c8:4e:bc:49:20:d8:ef:da:b5: 2a:76:0b:3a:21:06:b1:0b:56:69:e7:99:60:49:8e: fb:bb:5c:5a:9d:8b:89:13:9c:1c:e1:04:e6:62:15: c0:94:81:93:55:b6:95:a2:b5:f2:c0:15:b7:c7:99: 67:26:f0:b4:36:10:c2:e2:66:ae:67:27:0b:a2:d6: 34:1c:68:71:59:af:01:ba:f0:5b:1a:27:9d:07:da: 10:4f:d3:e7:14:99:3a:bc:1c:ba:b2:8d:bc:32:e3: d1:c6:a2:db:2d:bd:ea:53:89:f5:ec:82:ea:28:d5: 7d:e4:65:2e:a5:cd:64:5f:db:49:2b:7a:20:ce:99: ec:17:25:cf:c6:7c:0d:19:e9:76:0f:e2:f2:2c:90: 1d:13:28:b8:16:6d:d8:3c:c0:2b:31:4b:ec:7e:88: 7d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:89:F5:0D:4E:49:64:D1:A2:8A:17:D4:B6:B7:26:A3:80:3A:A6:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:72:a5:3a:29:aa:47:88:78:94:8d:fb:6e:01:ec:9f:8d:f7: 9a:f0:93:f4:5c:04:39:b2:c6:39:b5:1b:7c:84:a3:48:86:cd: 27:f1:9b:c6:73:0e:ae:35:b9:eb:6f:da:5a:cf:b6:26:ca:d6: 10:b8:ac:fe:c8:eb:78:17:fa:01:42:0a:ca:a9:47:21:38:85: 14:8f:4e:49:e6:31:e9:7a:f1:35:f4:c0:1f:74:aa:d3:68:71: 8a:90:fe:5b:7e:a9:32:ac:2b:d6:e8:68:55:2f:9c:23:c3:d6: 77:d2:5f:0e:21:99:2d:aa:4c:e6:1f:b8:f0:6f:98:47:d5:f5: a1:75:8e:dc:77:25:8a:6a:58:10:70:64:1a:1b:66:74:69:ef: 12:11:5a:95:ea:9e:52:29:50:ea:6a:d4:e4:54:c2:82:47:e4: 53:08:03:30:3e:68:b5:12:d0:9f:63:e1:0a:d9:16:b2:c2:93: 19:d8:b5:9d:c5:e8:68:a4:6f:5c:78:ea:ea:83:31:be:c1:70: 14:3b:8e:bf:47:9d:1f:34:82:6e:bf:b6:c4:db:65:8a:3e:a2: ba:58:ad:5a:1c:69:69:10:18:5c:e1:06:14:2e:93:25:2d:b8: 65:7d:80:39:9e:a1:4f:5f:4c:cc:6f:0e:20:eb:fe:56:69:59: 50:0a:cb:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVDiW+rwyw9mfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk NGYyODZjOGYtZGZmOS00NTg0LTgwZjMtMTVmOTMwMWY1OTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljohhC4y2xTckvvheCNWGNCjYkOLIa0PzOnv FGiByhnBo8P77z6x3RBuJZwUW9+t+fflMemH1h5gwYxgzvkslUdpPXfOyfb64jSs qHX7r+DIgGiCMibrv0nsjNgOWOTITrxJINjv2rUqdgs6IQaxC1Zp55lgSY77u1xa nYuJE5wc4QTmYhXAlIGTVbaVorXywBW3x5lnJvC0NhDC4mauZycLotY0HGhxWa8B uvBbGiedB9oQT9PnFJk6vBy6so28MuPRxqLbLb3qU4n17ILqKNV95GUupc1kX9tJ K3ogzpnsFyXPxnwNGel2D+LyLJAdEyi4Fm3YPMArMUvsfoh9rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqJ9Q1OSWTRoooX1La3JqOAOqalMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWM3MGFiZTMtZmRhMC0z YjU3LTk0YmEtOGFkMDEwMGI5Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdypTopqkeIeJSN+24B7J+N95rwk/RcBDmyxjm1G3yEo0iGzSfxm8Zz Dq41uetv2lrPtibK1hC4rP7I63gX+gFCCsqpRyE4hRSPTknmMel68TX0wB90qtNo cYqQ/lt+qTKsK9boaFUvnCPD1nfSXw4hmS2qTOYfuPBvmEfV9aF1jtx3JYpqWBBw ZBobZnRp7xIRWpXqnlIpUOpq1ORUwoJH5FMIAzA+aLUS0J9j4QrZFrLCkxnYtZ3F 6Gikb1x46uqDMb7BcBQ7jr9HnR80gm6/tsTbZYo+orpYrVocaWkQGFzhBhQukyUt uGV9gDmeoU9fTMxvDiDr/lZpWVAKy+4= -----END CERTIFICATE-----Generated at Thu Mar 26 02:46:50 2026 by rpki-client