$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa File: d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa (raw, json) Hash identifier: /i7nivWYu9JmdqrIZ8Q2B5iMTOblGQh8Ia77eoSotVU= Subject key identifier: 85:3C:69:FC:CD:DE:8B:05:15:3E:4F:24:32:D1:B5:52:33:99:93:3B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772BE6AEC876AAA1456C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 23.27.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2b:e6:ae:c8:76:aa:a1:45:6c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=c92d2fb5-3522-4823-ab84-5665a77a76ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:33:6f:6c:ed:6a:36:ad:4a:9e:92:9a:02: 15:a8:b6:04:ac:85:96:6c:af:5b:7d:81:9e:46:35: 1d:e2:ff:04:4e:a7:3b:62:ab:8a:d9:92:8f:e6:f8: e2:c2:9e:04:e5:49:33:31:17:28:3e:70:50:93:97: 7b:c2:b9:17:b4:42:74:a8:b8:a3:43:58:08:81:84: ec:4a:8b:c1:24:94:c8:99:a7:50:e4:f1:f5:e9:74: ab:e5:18:1f:3f:a3:d1:7d:dd:d4:da:00:3e:aa:6b: bb:c9:65:e8:65:bb:e4:2a:aa:44:53:5e:12:4d:d8: 50:fe:f2:4c:b5:bb:67:0b:d8:21:62:ee:4c:4c:85: a7:b4:7b:f1:ee:81:8e:f8:d3:6c:22:68:fa:ac:ee: bc:2e:32:bc:d5:54:26:69:3f:9b:3f:91:e9:a0:ca: 9d:9b:2a:79:df:85:d5:b2:1f:d7:4e:07:57:4c:93: a6:ed:5e:52:e7:da:37:bb:cf:ca:33:a5:f3:b3:14: f7:b9:fd:55:42:9a:6a:80:5b:38:a5:5d:da:c0:0b: 28:e3:77:fd:04:73:0d:26:92:08:aa:e3:17:b0:f1: f1:a9:0d:64:8f:87:6f:68:07:70:db:c2:09:7f:26: e8:99:4b:8e:fb:aa:0e:7e:6d:15:46:2c:3d:4f:83: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:3C:69:FC:CD:DE:8B:05:15:3E:4F:24:32:D1:B5:52:33:99:93:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d85e0b0a-8bee-3516-a93d-52ff69c21efa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:2f:2d:57:8d:a5:c9:7c:c3:1c:c8:64:ad:3b:7e:43:2a:6c: 20:35:c5:76:1b:aa:b5:79:02:44:2e:7b:40:5e:91:f1:74:0c: 3a:9a:ba:a4:3c:76:66:f2:30:30:01:ec:46:35:e8:dc:91:8f: b6:70:90:e6:51:d4:1c:1c:0a:e4:c6:5b:20:65:ce:d3:63:79: 96:e9:ba:1f:7b:4a:a0:e3:e5:a3:7f:66:bc:58:25:da:fc:86: 63:9a:2d:d2:1f:52:74:1a:46:53:72:0e:1a:d8:e9:7a:6d:b2: 41:99:96:6f:78:fc:d3:1a:50:50:72:8a:0c:e1:28:08:bc:3a: 11:49:0c:a9:0d:02:6e:00:51:5e:21:c7:58:c8:b5:7d:ab:34: 65:64:99:e5:0a:6f:de:f9:23:04:65:48:26:e7:11:5d:9c:10: 54:9f:e6:be:04:ce:6f:99:e9:8c:74:3b:46:40:d6:d4:32:aa: 2b:59:d9:05:64:78:a1:e8:93:04:8c:29:82:d0:ed:d8:12:9b: 1d:c9:c5:c4:bb:7f:a0:ff:97:fa:bd:60:54:d9:56:39:36:9b: d5:55:35:23:b6:65:41:a8:8f:5b:55:1c:16:10:46:7a:9d:00: 29:e4:49:6d:8e:27:ad:d2:6b:cd:37:40:16:3c:6a:86:0f:dc: b9:46:a6:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdyvmrsh2qqFFbIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk YzkyZDJmYjUtMzUyMi00ODIzLWFiODQtNTY2NWE3N2E3NmVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuMzb2ztajatSp6SmgIVqLYErIWWbK9bfYGe RjUd4v8ETqc7YquK2ZKP5vjiwp4E5UkzMRcoPnBQk5d7wrkXtEJ0qLijQ1gIgYTs SovBJJTImadQ5PH16XSr5RgfP6PRfd3U2gA+qmu7yWXoZbvkKqpEU14STdhQ/vJM tbtnC9ghYu5MTIWntHvx7oGO+NNsImj6rO68LjK81VQmaT+bP5HpoMqdmyp534XV sh/XTgdXTJOm7V5S59o3u8/KM6XzsxT3uf1VQppqgFs4pV3awAso43f9BHMNJpII quMXsPHxqQ1kj4dvaAdw28IJfybomUuO+6oOfm0VRiw9T4OXCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU8afzN3osFFT5PJDLRtVIzmZM7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDg1ZTBiMGEtOGJlZS0z NTE2LWE5M2QtNTJmZjY5YzIxZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxucMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAkvLVeNpcl8wxzIZK07fkMqbCA1xXYbqrV5AkQue0BekfF0DDqauqQ8 dmbyMDAB7EY16NyRj7ZwkOZR1BwcCuTGWyBlztNjeZbpuh97SqDj5aN/ZrxYJdr8 hmOaLdIfUnQaRlNyDhrY6XptskGZlm94/NMaUFByigzhKAi8OhFJDKkNAm4AUV4h x1jItX2rNGVkmeUKb975IwRlSCbnEV2cEFSf5r4Ezm+Z6Yx0O0ZA1tQyqitZ2QVk eKHokwSMKYLQ7dgSmx3JxcS7f6D/l/q9YFTZVjk2m9VVNSO2ZUGoj1tVHBYQRnqd ACnkSW2OJ63Sa803QBY8aoYP3LlGpmY= -----END CERTIFICATE-----Generated at Mon Oct 20 03:26:33 2025 by rpki-client