$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f04edd60-79a9-3542-90f9-4ba72a4a12bb.roa File: f04edd60-79a9-3542-90f9-4ba72a4a12bb.roa (raw, json) Hash identifier: e9WM09m1yNtnwp0tBSUfgYuWdSN5OScAkuThWXi+bkw= Subject key identifier: 1B:4F:1E:07:13:DD:9C:F6:EE:0B:CF:E2:8F:28:22:05:E4:75:08:8F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4985C43D6DCE8BB341288AC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f04edd60-79a9-3542-90f9-4ba72a4a12bb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 149440 IP address blocks: 23.27.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:85:c4:3d:6d:ce:8b:b3:41:28:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7bace5df-e6d7-48f0-ad68-a87e95ffe8e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0f:f6:70:ee:74:5a:a8:a1:78:66:e0:b3:a9: 73:30:b0:f3:42:86:8a:a5:e3:95:99:c9:36:3c:b1: 83:ec:94:0f:8e:9e:79:7f:b5:93:33:71:b9:db:4f: d2:32:4d:bf:02:17:16:b2:63:ad:e7:86:20:c8:37: b8:09:e8:45:79:d9:42:28:a8:0d:7c:14:9b:15:54: 4a:d8:86:4a:29:29:fc:8f:70:cd:7e:7b:5d:d0:b7: 35:78:00:fe:25:89:d5:2a:98:1e:a9:37:5a:95:5a: eb:5b:3c:11:5b:a2:f1:f3:4e:cd:b4:49:ab:29:a0: 6c:0f:73:a7:f1:cd:0f:e9:4d:ae:76:79:3d:99:06: c8:30:75:00:a5:e6:57:b1:88:a3:55:2d:00:01:f3: eb:ad:26:0b:42:03:7c:79:6f:d5:1f:c6:a9:7a:a9: c9:c7:b8:50:49:59:10:f6:c8:11:a7:ee:1b:ff:63: 4d:13:43:71:8e:72:6b:91:6a:ef:99:c2:1f:65:0f: 2f:84:fe:f5:e1:74:43:79:4d:7a:ca:b1:ab:48:fa: af:22:00:a8:2c:57:e7:4e:20:98:f4:0e:ee:04:ee: c0:36:6a:cd:78:f8:16:af:6d:3b:4f:dd:12:d8:9d: c6:40:3d:76:d1:42:ab:41:a8:94:ae:05:12:59:13: 42:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:4F:1E:07:13:DD:9C:F6:EE:0B:CF:E2:8F:28:22:05:E4:75:08:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f04edd60-79a9-3542-90f9-4ba72a4a12bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:90:c8:64:2f:3c:17:dd:43:f2:a6:70:bd:bc:89:b3:9b:30: 7c:64:4a:48:e1:35:9c:92:7a:59:7e:8e:48:c8:94:54:aa:91: 62:a1:15:7d:e3:12:35:5f:60:57:96:a5:63:fe:b8:13:85:9a: 3a:85:f5:9b:cf:a2:16:94:d4:82:bb:86:35:b7:f2:10:f8:83: db:97:cd:bb:87:bc:0c:6e:b2:2a:08:bd:c7:01:11:5a:24:bd: 29:3f:72:f9:08:8f:2c:29:fc:c4:79:15:f0:74:68:1c:d6:22: 5a:d4:26:c6:23:fb:a7:36:5d:0e:41:57:4c:ab:74:b3:24:eb: b1:ff:36:47:62:bd:15:b7:ff:1a:60:41:ed:ba:54:fd:dd:25: f3:88:43:a3:1d:15:88:aa:43:4b:c7:86:7d:f6:cb:8a:21:07: 1e:44:e0:9b:c3:2b:5e:eb:5b:06:22:f8:9a:b1:8c:6f:55:35: f6:f7:11:7f:1a:92:94:f7:61:29:ad:18:b9:72:03:c5:90:12: a5:5d:06:41:38:40:13:d5:4f:6a:66:16:04:9f:05:7a:0d:23: db:5b:5f:a8:47:44:04:8c:70:1b:06:46:1f:35:70:fc:29:14: a2:79:1e:79:d1:3f:03:aa:2f:34:bb:6a:c6:ad:33:f9:cf:36: be:23:86:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhcQ9bc6Ls0EoisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JhY2U1ZGYtZTZkNy00OGYwLWFkNjgtYTg3ZTk1ZmZlOGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw/2cO50WqiheGbgs6lzMLDzQoaKpeOVmck2 PLGD7JQPjp55f7WTM3G520/SMk2/AhcWsmOt54YgyDe4CehFedlCKKgNfBSbFVRK 2IZKKSn8j3DNfntd0Lc1eAD+JYnVKpgeqTdalVrrWzwRW6Lx807NtEmrKaBsD3On 8c0P6U2udnk9mQbIMHUApeZXsYijVS0AAfPrrSYLQgN8eW/VH8apeqnJx7hQSVkQ 9sgRp+4b/2NNE0NxjnJrkWrvmcIfZQ8vhP714XRDeU16yrGrSPqvIgCoLFfnTiCY 9A7uBO7ANmrNePgWr207T90S2J3GQD120UKrQaiUrgUSWRNCxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtPHgcT3Zz27gvP4o8oIgXkdQiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjA0ZWRkNjAtNzlhOS0z NTQyLTkwZjktNGJhNzJhNGExMmJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiQyGQvPBfdQ/KmcL28ibObMHxkSkjhNZySell+jkjIlFSqkWKhFX3j EjVfYFeWpWP+uBOFmjqF9ZvPohaU1IK7hjW38hD4g9uXzbuHvAxusioIvccBEVok vSk/cvkIjywp/MR5FfB0aBzWIlrUJsYj+6c2XQ5BV0yrdLMk67H/NkdivRW3/xpg Qe26VP3dJfOIQ6MdFYiqQ0vHhn32y4ohBx5E4JvDK17rWwYi+JqxjG9VNfb3EX8a kpT3YSmtGLlyA8WQEqVdBkE4QBPVT2pmFgSfBXoNI9tbX6hHRASMcBsGRh81cPwp FKJ5HnnRPwOqLzS7asatM/nPNr4jhv0= -----END CERTIFICATE-----Generated at Mon Sep 28 14:47:10 2026 by rpki-client