$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f6d1ca0-3a73-3b31-8716-8d639c7b6bd1.roa File: 7f6d1ca0-3a73-3b31-8716-8d639c7b6bd1.roa (raw, json) Hash identifier: sNgeUuLpjuvin96giR/v4lWCY3ijS1Dk08BH2OkYerc= Subject key identifier: 88:F8:18:B0:72:96:B2:AC:AE:AD:7C:E4:E5:61:90:F4:95:9C:60:A3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4C3D5F67AB0BF216466A2680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f6d1ca0-3a73-3b31-8716-8d639c7b6bd1.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 9009 IP address blocks: 23.27.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:5f:67:ab:0b:f2:16:46:6a:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=da8f3a65-c38d-46c7-8a74-beb7e5186ea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:4a:94:5a:84:55:28:6a:a8:d8:fe:08:b0:93: 2b:3c:fd:40:a9:0f:0d:8c:34:b4:9d:64:9e:af:fb: 08:6a:59:09:b0:f0:ed:19:19:2d:3d:0a:7b:52:27: 2d:ee:3a:33:5a:c8:18:bd:d6:8a:5b:cd:6a:5a:98: 7f:3f:88:f3:45:86:40:df:0c:08:3b:e5:70:fb:26: 11:c2:fa:22:59:29:fa:02:20:bf:fc:00:fe:6d:95: 50:8c:d6:3c:01:06:d4:04:1e:c5:0a:3c:0f:85:63: 32:0f:e8:b0:d5:cd:93:fb:2f:ed:cf:c5:b3:df:9b: d2:19:70:9d:45:90:14:cc:8e:f1:f0:cb:92:3f:d0: 2c:e1:1c:f6:51:89:53:36:e1:67:e0:ec:1e:e2:97: d7:05:fe:53:13:0e:77:76:26:03:ea:8f:bf:9e:23: 09:ee:7f:48:55:2a:ad:ca:8b:85:03:d6:e5:cc:b5: ec:6b:03:88:7b:24:cb:2f:44:7e:cf:38:59:b2:e3: 74:6c:77:4e:c8:f7:b2:93:44:78:ab:d6:89:73:5a: 2e:ec:59:a1:55:a9:d2:9d:ee:6f:c9:c7:29:71:3f: 85:68:39:71:25:1f:ea:ad:b2:48:59:1b:ac:10:dd: 5a:96:72:7f:eb:d0:06:24:10:20:d8:94:f6:ec:cc: 0f:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:F8:18:B0:72:96:B2:AC:AE:AD:7C:E4:E5:61:90:F4:95:9C:60:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7f6d1ca0-3a73-3b31-8716-8d639c7b6bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:37:50:4e:f2:b0:23:00:95:d3:fb:8e:b8:2d:7e:c9:af:7f: 27:e4:0b:d6:ee:fa:0e:dd:42:f1:63:47:6c:16:a7:49:c3:f6: 70:b0:4d:01:9f:c4:28:b9:66:ca:6d:ff:65:d8:e3:82:66:88: cb:b1:bd:ae:18:d5:56:ad:8c:fa:5f:a0:ec:ea:b5:4f:9e:c8: 4e:09:18:a0:2c:2d:eb:97:6d:fe:32:3b:7b:34:b2:a3:82:0b: aa:d3:5b:d1:fe:a5:f3:17:64:d2:57:c2:17:69:b1:b6:1f:1e: 0a:df:57:63:92:7f:f1:25:db:72:a3:ff:83:bc:94:cb:54:f4: ef:47:59:c2:b8:8b:27:62:6d:0a:c9:9f:9b:8c:66:ad:ba:72: 77:89:c3:03:46:3c:4a:a3:40:dd:e7:10:38:ef:bb:cc:bc:69: 36:b2:23:55:c4:cc:5d:22:37:64:2c:5f:f8:cd:b7:69:30:dc: 1f:f6:36:36:4b:50:83:b5:c6:0e:52:66:00:84:39:ef:00:73: 54:81:39:5a:3c:70:9a:32:3e:06:d7:a6:ad:33:d9:6a:4a:ce: db:21:4d:fa:31:7b:7b:ae:02:92:b6:01:a8:39:a9:f6:b7:a2: 4b:9c:53:7c:be:c3:b7:32:43:5c:c6:5f:f0:c9:d2:d8:42:02: 82:99:80:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPV9nqwvyFkZqJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZGE4ZjNhNjUtYzM4ZC00NmM3LThhNzQtYmViN2U1MTg2ZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkqUWoRVKGqo2P4IsJMrPP1AqQ8NjDS0nWSe r/sIalkJsPDtGRktPQp7Uict7jozWsgYvdaKW81qWph/P4jzRYZA3wwIO+Vw+yYR wvoiWSn6AiC//AD+bZVQjNY8AQbUBB7FCjwPhWMyD+iw1c2T+y/tz8Wz35vSGXCd RZAUzI7x8MuSP9As4Rz2UYlTNuFn4Owe4pfXBf5TEw53diYD6o+/niMJ7n9IVSqt youFA9blzLXsawOIeyTLL0R+zzhZsuN0bHdOyPeyk0R4q9aJc1ou7FmhVanSne5v yccpcT+FaDlxJR/qrbJIWRusEN1alnJ/69AGJBAg2JT27MwPiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIj4GLBylrKsrq185OVhkPSVnGCjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2Y2ZDFjYTAtM2E3My0z YjMxLTg3MTYtOGQ2MzljN2I2YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY3UE7ysCMAldP7jrgtfsmvfyfkC9bu+g7dQvFjR2wWp0nD9nCwTQGf xCi5Zspt/2XY44JmiMuxva4Y1VatjPpfoOzqtU+eyE4JGKAsLeuXbf4yO3s0sqOC C6rTW9H+pfMXZNJXwhdpsbYfHgrfV2OSf/El23Kj/4O8lMtU9O9HWcK4iydibQrJ n5uMZq26cneJwwNGPEqjQN3nEDjvu8y8aTayI1XEzF0iN2QsX/jNt2kw3B/2NjZL UIO1xg5SZgCEOe8Ac1SBOVo8cJoyPgbXpq0z2WpKztshTfoxe3uuApK2Aag5qfa3 okucU3y+w7cyQ1zGX/DJ0thCAoKZgP8= -----END CERTIFICATE-----Generated at Mon Sep 28 16:45:47 2026 by rpki-client