$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa File: 6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa (raw, json) Hash identifier: SPaSuWs0Y1gQbhbEDlxKfIp/2GsYaKQqvttl/HYrZsE= Subject key identifier: 48:BC:28:AB:DF:35:D1:7D:F0:F5:47:D6:C2:AD:88:91:36:5F:8E:31 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AE9F671BDDB5942596D4D4280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa Signing time: Wed 20 Aug 2025 01:00:33 +0000 ROA not before: Wed 20 Aug 2025 01:00:33 +0000 ROA not after: Tue 18 Nov 2025 02:00:33 +0000 asID: 149440 IP address blocks: 23.27.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:e9:f6:71:bd:db:59:42:59:6d:4d:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 20 01:00:33 2025 GMT Not After : Nov 18 02:00:33 2025 GMT Subject: CN=fd7f431c-52c6-4821-8000-59fea3cf913a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:27:21:12:12:35:21:22:d3:3b:e2:d4:d8:1c: ab:42:62:02:90:dc:cc:c9:13:6a:61:fd:a7:47:b8: 07:10:cf:c7:9c:aa:06:7f:23:58:10:11:44:d5:b5: b4:52:4a:69:ed:c5:05:8c:3f:b3:a9:6a:e3:31:0e: cc:cc:c7:5f:43:8c:fc:ad:87:2e:94:6a:24:19:89: 8a:dc:f2:93:22:7d:d8:be:e4:23:d2:bf:60:24:96: 7c:b6:8a:16:06:be:d9:77:3a:e9:c8:6d:be:73:1b: a1:2a:93:f5:1e:95:d1:9c:33:fe:6a:d3:46:0e:16: a5:48:c9:bc:88:71:a1:ef:49:cb:82:89:97:fa:cf: 15:f5:0c:68:e4:d4:4d:23:ae:6e:ef:41:81:fa:8f: 6a:64:de:ce:a8:d3:03:3f:49:57:d6:f8:0a:df:ad: 8a:39:51:63:69:da:7a:c6:60:a0:5c:e9:a8:0a:13: 49:5d:be:43:22:59:73:b2:a6:91:c1:6a:e6:cd:e4: aa:28:5c:34:ce:49:0b:2f:c0:5c:c8:9b:8d:87:70: 8a:5a:a8:20:c2:34:01:e8:cc:a5:ca:cd:f3:a1:58: ad:d9:ca:bf:75:2c:d4:0c:29:df:5a:65:bc:e0:e5: 8e:22:1d:51:3a:fa:21:1e:e0:34:e3:e7:86:57:ea: bd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:BC:28:AB:DF:35:D1:7D:F0:F5:47:D6:C2:AD:88:91:36:5F:8E:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:53:e9:4b:eb:78:0e:20:98:ed:87:6a:3d:a0:23:46:81:64: 01:2c:3a:10:5f:f2:0c:66:ca:38:0b:b8:87:c7:22:d3:1e:e1: 08:4f:0e:d2:50:45:e0:86:56:5b:01:e9:2a:65:73:83:13:91: 66:68:52:59:cb:54:3e:33:d3:e8:b4:95:79:25:24:2d:e4:75: e2:6a:64:ae:98:d8:c6:35:50:1b:c7:cb:80:06:b7:aa:ba:b4: c6:3d:d1:bf:bc:3a:0b:90:84:b2:33:1c:24:e5:22:0c:70:b1: b4:4e:6d:d0:b4:11:f1:75:c9:f7:30:0d:54:7b:b0:e6:cc:21: 7b:5d:f8:0e:76:a8:7e:e4:78:f2:49:20:69:8e:20:f7:de:79: a0:b9:91:4f:b6:a3:8e:ac:ed:e9:58:cc:20:af:0f:e4:7c:4f: 29:13:e2:e5:65:69:99:85:0c:8b:9a:d3:16:90:e5:7a:ff:c8: cc:4a:3a:0f:cd:78:c5:43:ff:c2:25:ce:84:5b:86:e7:4b:44: 73:70:70:f0:94:1f:b3:41:a1:11:94:84:ba:29:dd:f8:83:30: 11:c0:fc:8d:17:1c:dd:87:63:b2:96:90:65:bd:73:22:17:f4: 8b:bf:87:1b:12:2c:21:8f:b3:f5:36:5a:ee:23:83:24:df:4f: 53:d9:73:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErp9nG921lCWW1NQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyMDAxMDAzM1oXDTI1MTExODAyMDAzM1owLzEtMCsGA1UEAxMk ZmQ3ZjQzMWMtNTJjNi00ODIxLTgwMDAtNTlmZWEzY2Y5MTNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSchEhI1ISLTO+LU2ByrQmICkNzMyRNqYf2n R7gHEM/HnKoGfyNYEBFE1bW0Ukpp7cUFjD+zqWrjMQ7MzMdfQ4z8rYculGokGYmK 3PKTIn3YvuQj0r9gJJZ8tooWBr7ZdzrpyG2+cxuhKpP1HpXRnDP+atNGDhalSMm8 iHGh70nLgomX+s8V9Qxo5NRNI65u70GB+o9qZN7OqNMDP0lX1vgK362KOVFjadp6 xmCgXOmoChNJXb5DIllzsqaRwWrmzeSqKFw0zkkLL8BcyJuNh3CKWqggwjQB6Myl ys3zoVit2cq/dSzUDCnfWmW84OWOIh1ROvohHuA04+eGV+q93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEi8KKvfNdF98PVH1sKtiJE2X44xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjQwOGEyMzAtNzRmNy0z NWE0LWE4YzYtOTkxMWQ0YWVhZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFT6UvreA4gmO2Haj2gI0aBZAEsOhBf8gxmyjgLuIfHItMe4QhPDtJQ ReCGVlsB6Splc4MTkWZoUlnLVD4z0+i0lXklJC3kdeJqZK6Y2MY1UBvHy4AGt6q6 tMY90b+8OguQhLIzHCTlIgxwsbRObdC0EfF1yfcwDVR7sObMIXtd+A52qH7kePJJ IGmOIPfeeaC5kU+2o46s7elYzCCvD+R8TykT4uVlaZmFDIua0xaQ5Xr/yMxKOg/N eMVD/8IlzoRbhudLRHNwcPCUH7NBoRGUhLop3fiDMBHA/I0XHN2HY7KWkGW9cyIX 9Iu/hxsSLCGPs/U2Wu4jgyTfT1PZc5o= -----END CERTIFICATE-----Generated at Sat Aug 23 15:06:26 2025 by rpki-client