$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef4873e8-885f-399d-b37b-31cd3e3c194e.roa File: ef4873e8-885f-399d-b37b-31cd3e3c194e.roa (raw, json) Hash identifier: zwWLHTEsOiiCwqcjSiN2mQ/AxepD0PxaByW8K6hvrfk= Subject key identifier: DD:76:6A:02:9C:BC:AB:8E:8E:3B:94:4D:98:2E:57:34:98:C2:5A:24 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D1298F045CD903C6E1C18DF80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef4873e8-885f-399d-b37b-31cd3e3c194e.roa Signing time: Thu 05 Mar 2026 23:54:17 +0000 ROA not before: Thu 05 Mar 2026 23:54:17 +0000 ROA not after: Wed 03 Jun 2026 22:54:17 +0000 asID: 135120 IP address blocks: 23.27.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:12:98:f0:45:cd:90:3c:6e:1c:18:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 5 23:54:17 2026 GMT Not After : Jun 3 22:54:17 2026 GMT Subject: CN=ded653a4-f24d-46f7-a455-633fc5dac7e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:17:1e:e2:7b:cc:63:74:e7:f2:ab:ec:47:6f: 1c:bb:03:d4:74:cc:d1:c4:a2:83:24:43:42:b0:81: 69:3d:a4:fe:fb:55:48:91:fc:bc:54:16:ab:5c:a0: 0b:70:c7:41:4c:70:8c:21:bd:b2:54:8a:30:c9:9c: 2b:80:f7:d3:5a:69:2e:6f:b0:ea:6d:10:6e:32:de: 53:dc:0a:e2:43:82:7a:3e:7d:b8:c4:da:0e:12:57: 7f:8d:ce:a0:86:64:44:24:42:74:ee:dc:29:a2:ba: 24:b2:9e:73:d9:c4:dc:f0:31:ee:cb:08:7d:9f:70: db:88:72:17:a4:81:18:9b:a9:cc:21:e6:69:d0:78: 34:cf:5b:b0:4d:83:84:4d:b5:4e:a4:c4:4a:50:66: 5c:19:c2:3d:f3:9b:d6:62:66:ee:19:3b:28:c5:f4: 9d:03:ce:33:3d:30:f9:be:80:8a:11:75:b4:08:4d: ab:68:d0:57:ee:d9:fa:78:1a:7c:ef:3e:69:d4:de: 8e:04:93:e1:ec:46:0f:51:1e:71:8d:fc:6f:99:cc: 14:3d:1b:71:81:f3:61:f6:09:31:dd:a4:8f:79:f4: 48:86:11:ac:db:71:4a:e9:5b:aa:b4:23:9d:59:3e: 7d:41:52:b7:da:40:d7:41:af:f8:bd:db:82:1e:a8: 3d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:76:6A:02:9C:BC:AB:8E:8E:3B:94:4D:98:2E:57:34:98:C2:5A:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ef4873e8-885f-399d-b37b-31cd3e3c194e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:40:2c:03:f7:e6:ec:65:79:63:f9:fa:fc:5e:27:2c:be:98: 48:9e:34:ed:2c:55:c0:e2:6d:ac:67:0d:4a:ce:ab:47:22:69: 33:32:e0:ea:0f:a9:07:ba:13:07:4c:da:58:a2:5c:18:df:77: 66:9a:dd:47:62:0e:04:7c:b3:7e:71:63:44:61:91:b2:c9:78: fe:18:94:c3:4a:02:eb:33:78:35:64:43:bd:c2:d8:b9:63:0d: c3:27:f1:d4:80:aa:0a:92:e3:4c:88:aa:dd:99:72:fe:47:a8: 18:15:72:33:37:30:3d:81:ca:35:59:0c:0b:a0:d2:ef:39:2c: dc:a0:ea:c8:f4:e8:78:56:7b:0d:7e:9a:2d:75:65:dd:26:d0: 32:2a:a6:a2:87:61:b1:7f:10:7c:74:54:6e:8d:ef:0f:9c:de: 77:b0:b2:5e:b5:1c:ed:af:4b:de:94:25:a0:7f:8f:d9:2b:59: 7a:d6:65:90:89:70:c0:ce:2c:78:b1:d2:bd:aa:1d:92:31:fc: 79:6e:cd:55:37:01:b1:90:8d:bc:d1:e8:3e:b3:a6:45:37:31: 65:54:55:be:20:5a:25:29:dc:51:08:55:3c:67:dd:f3:39:3e: 03:66:b4:e0:aa:2a:bf:ee:02:c0:cc:37:6f:6c:29:6c:70:60: a3:c0:b4:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0SmPBFzZA8bhwY34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNTIzNTQxN1oXDTI2MDYwMzIyNTQxN1owLzEtMCsGA1UEAxMk ZGVkNjUzYTQtZjI0ZC00NmY3LWE0NTUtNjMzZmM1ZGFjN2UwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRce4nvMY3Tn8qvsR28cuwPUdMzRxKKDJENC sIFpPaT++1VIkfy8VBarXKALcMdBTHCMIb2yVIowyZwrgPfTWmkub7DqbRBuMt5T 3AriQ4J6Pn24xNoOEld/jc6ghmREJEJ07twporoksp5z2cTc8DHuywh9n3DbiHIX pIEYm6nMIeZp0Hg0z1uwTYOETbVOpMRKUGZcGcI985vWYmbuGTsoxfSdA84zPTD5 voCKEXW0CE2raNBX7tn6eBp87z5p1N6OBJPh7EYPUR5xjfxvmcwUPRtxgfNh9gkx 3aSPefRIhhGs23FK6VuqtCOdWT59QVK32kDXQa/4vduCHqg9swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN12agKcvKuOjjuUTZguVzSYwlokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWY0ODczZTgtODg1Zi0z OTlkLWIzN2ItMzFjZDNlM2MxOTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZALAP35uxleWP5+vxeJyy+mEieNO0sVcDibaxnDUrOq0ciaTMy4OoP qQe6EwdM2liiXBjfd2aa3UdiDgR8s35xY0RhkbLJeP4YlMNKAuszeDVkQ73C2Llj DcMn8dSAqgqS40yIqt2Zcv5HqBgVcjM3MD2ByjVZDAug0u85LNyg6sj06HhWew1+ mi11Zd0m0DIqpqKHYbF/EHx0VG6N7w+c3newsl61HO2vS96UJaB/j9krWXrWZZCJ cMDOLHix0r2qHZIx/HluzVU3AbGQjbzR6D6zpkU3MWVUVb4gWiUp3FEIVTxn3fM5 PgNmtOCqKr/uAsDMN29sKWxwYKPAtIk= -----END CERTIFICATE-----Generated at Sat Mar 28 12:18:47 2026 by rpki-client