$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2002e01-b864-3372-b58a-74934cc8439c.roa File: f2002e01-b864-3372-b58a-74934cc8439c.roa (raw, json) Hash identifier: gcctjGTyobqo9uHmVcyzNvVPLJ7WPMgnyUshbauQmn8= Subject key identifier: 5B:AB:C3:68:87:1E:31:81:03:87:7E:B0:7B:AC:92:2D:4F:35:9F:14 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D8EF606A1DCDFD82EE3B4A5E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2002e01-b864-3372-b58a-74934cc8439c.roa Signing time: Sun 19 Apr 2026 13:00:31 +0000 ROA not before: Sun 19 Apr 2026 13:00:31 +0000 ROA not after: Sat 18 Jul 2026 13:00:31 +0000 asID: 149440 IP address blocks: 23.27.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:8e:f6:06:a1:dc:df:d8:2e:e3:b4:a5:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 13:00:31 2026 GMT Not After : Jul 18 13:00:31 2026 GMT Subject: CN=ac71399b-cda0-4fad-83d5-55e3f8a7d360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:1d:36:16:fc:5f:a9:f7:dc:ac:37:26:42:2d: 57:c2:3a:51:8b:45:10:1b:eb:c8:46:ea:e4:74:64: ed:89:83:a7:6f:76:13:62:da:b4:4b:0a:d9:7f:de: 4e:10:e7:33:77:f2:65:f7:71:0a:15:94:4d:44:0c: 1a:79:e8:59:75:9a:a3:d6:6d:53:e3:09:a7:95:52: 24:b8:03:5d:11:f8:f9:2b:70:a2:70:11:f0:5d:4b: a8:8e:28:3a:9d:e5:84:cf:69:9f:e5:63:49:ee:9a: 58:e4:70:46:80:f6:d1:f2:84:ab:7d:2d:e2:8f:e3: 13:d0:d7:50:04:b4:bc:ce:9a:60:94:11:c6:38:42: 18:75:89:b1:24:2d:40:33:e7:5b:f2:57:d8:d3:a8: 94:bc:5c:a8:85:8c:fe:e9:fe:46:f8:b0:89:90:90: 28:cd:cf:25:03:a8:69:a9:c5:95:cb:87:81:86:5e: 80:10:81:5e:76:28:ef:c2:31:60:3e:de:cb:4e:92: e4:96:d2:92:fa:35:db:de:87:25:0a:90:b5:5b:8b: 46:9a:25:aa:a6:9c:ea:1d:87:48:98:79:1f:83:dd: 38:ba:db:fb:1d:ac:fa:d9:cb:b8:bf:4e:63:31:79: 1e:d2:66:46:bf:3a:3a:1b:a8:f6:3e:e1:4f:2e:03: ee:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:AB:C3:68:87:1E:31:81:03:87:7E:B0:7B:AC:92:2D:4F:35:9F:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2002e01-b864-3372-b58a-74934cc8439c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:dc:9d:74:2b:b1:f5:db:10:c4:c0:8e:06:e3:1a:9b:81:7b: e2:8b:ed:9d:98:77:6e:62:00:66:b6:ac:69:ae:76:4f:eb:84: 73:69:4f:e2:b7:2b:57:cf:e5:bf:75:7f:1f:6f:06:94:81:c6: 2a:89:01:a2:19:56:6b:86:0a:98:72:41:ab:b8:c4:c0:eb:f2: f5:7d:fb:c9:a5:f8:8f:eb:41:79:9b:0e:f6:d0:af:ee:97:ca: 7d:b8:95:d0:74:dc:8f:7c:d9:1d:fa:86:d4:b6:1a:94:64:0a: 20:87:97:e4:1f:7b:b6:19:d4:55:f5:4d:29:ab:b1:13:da:7a: 2b:6c:bc:46:73:d5:f0:98:46:42:61:c0:29:15:76:fe:01:fc: 6e:3f:11:40:13:c6:e9:a7:0f:ff:17:e5:04:e4:9a:63:ff:45: 93:70:c1:be:12:5d:d7:5b:fe:f4:23:98:03:37:f7:53:5f:7e: 1e:8c:45:cc:b2:67:d5:88:c2:61:18:25:b1:8a:e8:88:1f:90: 26:21:c9:ca:91:2e:3b:60:fe:62:ec:9d:63:42:5e:cd:84:fb: b5:cb:d5:84:9e:11:91:9d:b6:c9:28:46:5a:e5:5c:13:e1:c9: b4:6d:8b:69:49:d1:86:1d:2d:e2:24:8c:b0:ec:17:08:82:1d: 29:0c:79:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9gah3N/YLuO0peAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk YWM3MTM5OWItY2RhMC00ZmFkLTgzZDUtNTVlM2Y4YTdkMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAox02FvxfqffcrDcmQi1XwjpRi0UQG+vIRurk dGTtiYOnb3YTYtq0SwrZf95OEOczd/Jl93EKFZRNRAwaeehZdZqj1m1T4wmnlVIk uANdEfj5K3CicBHwXUuojig6neWEz2mf5WNJ7ppY5HBGgPbR8oSrfS3ij+MT0NdQ BLS8zppglBHGOEIYdYmxJC1AM+db8lfY06iUvFyohYz+6f5G+LCJkJAozc8lA6hp qcWVy4eBhl6AEIFedijvwjFgPt7LTpLkltKS+jXb3oclCpC1W4tGmiWqppzqHYdI mHkfg904utv7Haz62cu4v05jMXke0mZGvzo6G6j2PuFPLgPulwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFurw2iHHjGBA4d+sHuski1PNZ8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjIwMDJlMDEtYjg2NC0z MzcyLWI1OGEtNzQ5MzRjYzg0MzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvcnXQrsfXbEMTAjgbjGpuBe+KL7Z2Yd25iAGa2rGmudk/rhHNpT+K3 K1fP5b91fx9vBpSBxiqJAaIZVmuGCphyQau4xMDr8vV9+8ml+I/rQXmbDvbQr+6X yn24ldB03I982R36htS2GpRkCiCHl+Qfe7YZ1FX1TSmrsRPaeitsvEZz1fCYRkJh wCkVdv4B/G4/EUATxumnD/8X5QTkmmP/RZNwwb4SXddb/vQjmAM391Nffh6MRcyy Z9WIwmEYJbGK6IgfkCYhycqRLjtg/mLsnWNCXs2E+7XL1YSeEZGdtskoRlrlXBPh ybRti2lJ0YYdLeIkjLDsFwiCHSkMeZE= -----END CERTIFICATE-----Generated at Wed May 13 13:58:28 2026 by rpki-client