$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/66d87c4e-898b-3932-89a8-dc417c729d2e.roa File: 66d87c4e-898b-3932-89a8-dc417c729d2e.roa (raw, json) Hash identifier: ZcGdB8FkHVC5VSj883QvfMkLmaZKRmOhgKr/r33b+fQ= Subject key identifier: 11:D1:EE:4B:20:CF:5F:A5:CA:58:6D:6D:4A:83:8F:D3:9F:6F:63:55 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FA2E437E10EE4ED11F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/66d87c4e-898b-3932-89a8-dc417c729d2e.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 23.27.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fa:2e:43:7e:10:ee:4e:d1:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=67a0defe-3811-41f5-9222-ee0cc523962d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:88:d7:7f:0e:c2:94:a3:6f:0b:e6:82:c9:b9: b5:0b:46:d6:0e:3b:ea:69:f9:f7:cf:4a:36:4d:9d: 97:f9:f6:2d:86:91:0e:91:75:55:f2:da:99:99:55: 84:b1:29:4f:06:0f:86:7e:2c:ee:c3:41:2e:eb:6c: 84:c1:71:29:ce:1c:22:2c:80:72:28:a0:c8:88:6b: 6e:f6:c1:85:0a:b9:f2:a1:ba:be:6b:c2:cb:1b:22: 01:90:7a:3d:b5:13:92:33:ba:10:24:2d:10:22:5d: 64:00:c6:a2:4d:10:3a:ee:42:b5:3d:12:21:f7:b5: d2:71:ee:46:46:f9:f5:64:f5:21:5d:28:eb:fc:10: dc:84:e3:7d:69:2d:cd:7d:a2:05:b2:2f:30:be:ac: ce:f9:42:0d:71:28:f0:21:1a:55:42:cb:f1:b3:0b: e1:33:c5:c1:41:f2:78:01:5e:18:fc:38:1b:5d:91: be:90:40:28:b1:af:ca:10:a7:5e:0d:c1:8a:df:96: a6:66:3f:45:f8:3d:e2:f1:02:f1:6c:07:d6:ec:3b: 21:7c:b0:14:a9:3d:48:c4:de:e8:5d:11:25:2b:b9: da:7e:27:95:b4:77:30:4b:fd:7e:04:36:4f:8e:14: 5d:86:bc:89:6c:b1:54:b2:72:81:84:c3:2a:2e:21: fe:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:EE:4B:20:CF:5F:A5:CA:58:6D:6D:4A:83:8F:D3:9F:6F:63:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/66d87c4e-898b-3932-89a8-dc417c729d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:19:02:8b:c8:c2:a9:53:0b:45:37:05:57:6f:78:1d:b8:f0: bb:47:38:3a:f0:43:7f:32:99:98:70:61:4e:48:42:ed:b9:64: 89:d5:ad:21:6e:c7:e5:0d:be:60:3b:7e:ad:9a:d2:9f:2d:d4: df:a6:92:b0:64:c0:b9:4a:bf:c1:fd:d7:d2:db:62:c2:6a:03: f0:a4:4e:71:33:17:d1:43:25:45:b4:5e:6b:c3:be:ec:af:c2: 29:b5:f1:c4:55:08:7c:f7:83:f2:26:98:12:a6:75:2f:13:53: 13:13:c4:7c:48:15:a6:5e:d0:bb:39:21:af:57:06:3f:13:cb: 65:c0:8b:8b:36:fb:7e:07:c9:9b:77:25:e7:2a:6f:27:62:5a: 29:e8:7e:a9:6a:9c:64:12:cb:2a:df:1d:7e:5f:4f:a3:00:8d: d6:24:a4:0b:3a:05:93:ee:29:42:5c:d3:23:2e:c1:d8:98:71: c2:80:32:55:d5:07:d6:b2:a8:1c:c2:40:57:03:63:3a:5c:c1: f9:6a:33:4f:46:16:b5:6a:bc:40:97:cc:5f:76:91:aa:df:08: 23:22:54:6f:e3:19:ab:04:3c:b5:7b:37:31:b1:12:44:1f:c9: 6b:f5:74:e3:59:63:c9:da:4d:22:1e:d6:2a:a8:b7:36:04:72: d0:2b:8a:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/ouQ34Q7k7RH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk NjdhMGRlZmUtMzgxMS00MWY1LTkyMjItZWUwY2M1MjM5NjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIjXfw7ClKNvC+aCybm1C0bWDjvqafn3z0o2 TZ2X+fYthpEOkXVV8tqZmVWEsSlPBg+Gfizuw0Eu62yEwXEpzhwiLIByKKDIiGtu 9sGFCrnyobq+a8LLGyIBkHo9tROSM7oQJC0QIl1kAMaiTRA67kK1PRIh97XSce5G Rvn1ZPUhXSjr/BDchON9aS3NfaIFsi8wvqzO+UINcSjwIRpVQsvxswvhM8XBQfJ4 AV4Y/DgbXZG+kEAosa/KEKdeDcGK35amZj9F+D3i8QLxbAfW7DshfLAUqT1IxN7o XRElK7nafieVtHcwS/1+BDZPjhRdhryJbLFUsnKBhMMqLiH+PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHR7ksgz1+lylhtbUqDj9Ofb2NVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjZkODdjNGUtODk4Yi0z OTMyLTg5YTgtZGM0MTdjNzI5ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIZAovIwqlTC0U3BVdveB248LtHODrwQ38ymZhwYU5IQu25ZInVrSFu x+UNvmA7fq2a0p8t1N+mkrBkwLlKv8H919LbYsJqA/CkTnEzF9FDJUW0XmvDvuyv wim18cRVCHz3g/ImmBKmdS8TUxMTxHxIFaZe0Ls5Ia9XBj8Ty2XAi4s2+34HyZt3 JecqbydiWinofqlqnGQSyyrfHX5fT6MAjdYkpAs6BZPuKUJc0yMuwdiYccKAMlXV B9ayqBzCQFcDYzpcwflqM09GFrVqvECXzF92karfCCMiVG/jGasEPLV7NzGxEkQf yWv1dONZY8naTSIe1iqotzYEctAriqU= -----END CERTIFICATE-----Generated at Mon Oct 20 04:39:55 2025 by rpki-client