$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25b96157-ecf8-3e99-a928-e5d07d52c38a.roa File: 25b96157-ecf8-3e99-a928-e5d07d52c38a.roa (raw, json) Hash identifier: BYwN2bxBntJ9e4s134q9fKmGdLpxRMbg6Ry17T1mJHg= Subject key identifier: D0:C4:CC:73:50:74:4C:94:5D:44:C9:08:28:D8:F1:F7:39:56:8F:04 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A9636879B2B8BB613A9252080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25b96157-ecf8-3e99-a928-e5d07d52c38a.roa Signing time: Mon 21 Jul 2025 01:00:50 +0000 ROA not before: Mon 21 Jul 2025 01:00:50 +0000 ROA not after: Sun 19 Oct 2025 01:00:50 +0000 asID: 401152 IP address blocks: 23.27.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:96:36:87:9b:2b:8b:b6:13:a9:25:20:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 21 01:00:50 2025 GMT Not After : Oct 19 01:00:50 2025 GMT Subject: CN=d3c8fa43-ab9c-4bfd-b9a5-95bf36208ed5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:57:08:63:64:fd:16:eb:97:b3:e4:bc:0a:53: 1c:2f:6a:b7:0d:67:f0:d0:0d:33:9d:49:12:6e:75: e4:d3:6c:2a:c1:80:eb:a6:57:aa:75:bb:b9:c1:c4: 08:51:5f:67:73:5f:55:17:46:b1:35:2e:a5:b1:b2: 8e:7b:d9:ff:15:ac:73:fc:0b:25:3e:f0:ff:0e:1c: d5:b3:e5:94:02:bb:dd:64:c8:99:e5:bf:d8:1d:2a: ad:11:64:48:7f:cf:09:b7:13:4f:b8:4a:3f:fd:5b: fd:09:f3:ae:86:02:7f:a8:27:7b:53:fc:0d:a4:a4: 03:05:f0:11:3e:0b:6d:4c:dd:c9:69:6e:62:5f:eb: 02:02:a8:9f:d3:b6:b5:08:a7:08:e6:2a:36:c0:92: cc:89:5f:d3:f4:34:81:67:e2:fa:56:af:7e:c0:e3: 96:0b:69:be:2a:54:ae:52:75:3d:66:1b:fc:17:d7: e3:6c:8d:38:23:6d:94:dc:98:0d:ab:48:e4:6e:19: ea:61:91:a2:4d:f1:f5:08:a8:98:54:1d:8e:b6:ab: 96:63:b0:7b:07:a5:27:23:1a:50:6d:c0:a1:62:cb: 9a:de:12:ea:63:76:ac:73:30:9d:a7:db:f7:be:10: 44:8c:1f:50:99:72:05:eb:1d:0b:5d:e3:ba:af:84: fd:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:C4:CC:73:50:74:4C:94:5D:44:C9:08:28:D8:F1:F7:39:56:8F:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25b96157-ecf8-3e99-a928-e5d07d52c38a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:87:f6:66:d9:ca:2c:2d:da:bc:64:64:f7:98:3c:f3:ef:6d: 2d:3b:70:39:da:5e:b7:9c:1d:ad:14:1a:19:70:8b:6b:fa:de: c3:84:85:73:be:89:81:8b:39:23:c2:59:77:af:f1:c2:42:05: 2b:7e:6f:63:a5:f4:7f:ee:73:7f:99:ff:e6:0c:06:16:17:af: a0:5a:18:8b:47:79:3e:f5:45:67:79:d9:b8:38:2a:ad:67:84: 39:c3:4a:bf:89:57:be:0d:e0:f7:59:68:7e:c8:31:50:59:e5: d8:3b:a6:d6:ab:52:7e:af:c9:fa:75:09:c4:b1:ff:67:de:7d: c5:17:65:ca:13:9b:2a:d1:31:2e:72:19:b1:8c:ff:f0:76:0d: 68:ba:bc:7c:d3:f7:db:6d:a5:44:d8:f5:1a:33:3c:17:74:24: f0:40:c2:af:ef:ed:7a:ca:10:5a:40:35:33:35:cb:77:c1:7c: 4c:54:46:23:40:d9:17:e7:b8:16:ee:72:dd:b7:aa:74:ba:be: d0:48:8a:dd:29:99:dc:05:7b:ad:98:eb:48:84:ca:6a:f1:77: 6c:38:c5:12:33:53:30:f5:c2:6b:56:8e:7d:d4:d0:15:86:23: 8a:bc:87:eb:6b:03:83:c3:c1:ae:b7:68:39:9b:c2:04:83:e6: 8e:f2:27:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqWNoebK4u2E6klIIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMTAxMDA1MFoXDTI1MTAxOTAxMDA1MFowLzEtMCsGA1UEAxMk ZDNjOGZhNDMtYWI5Yy00YmZkLWI5YTUtOTViZjM2MjA4ZWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1cIY2T9FuuXs+S8ClMcL2q3DWfw0A0znUkS bnXk02wqwYDrpleqdbu5wcQIUV9nc19VF0axNS6lsbKOe9n/Faxz/AslPvD/DhzV s+WUArvdZMiZ5b/YHSqtEWRIf88JtxNPuEo//Vv9CfOuhgJ/qCd7U/wNpKQDBfAR PgttTN3JaW5iX+sCAqif07a1CKcI5io2wJLMiV/T9DSBZ+L6Vq9+wOOWC2m+KlSu UnU9Zhv8F9fjbI04I22U3JgNq0jkbhnqYZGiTfH1CKiYVB2OtquWY7B7B6UnIxpQ bcChYsua3hLqY3asczCdp9v3vhBEjB9QmXIF6x0LXeO6r4T9hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNDEzHNQdEyUXUTJCCjY8fc5Vo8EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjViOTYxNTctZWNmOC0z ZTk5LWE5MjgtZTVkMDdkNTJjMzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqH9mbZyiwt2rxkZPeYPPPvbS07cDnaXrecHa0UGhlwi2v63sOEhXO+ iYGLOSPCWXev8cJCBSt+b2Ol9H/uc3+Z/+YMBhYXr6BaGItHeT71RWd52bg4Kq1n hDnDSr+JV74N4PdZaH7IMVBZ5dg7ptarUn6vyfp1CcSx/2fefcUXZcoTmyrRMS5y GbGM//B2DWi6vHzT99ttpUTY9RozPBd0JPBAwq/v7XrKEFpANTM1y3fBfExURiNA 2RfnuBbuct23qnS6vtBIit0pmdwFe62Y60iEymrxd2w4xRIzUzD1wmtWjn3U0BWG I4q8h+trA4PDwa63aDmbwgSD5o7yJ6U= -----END CERTIFICATE-----Generated at Mon Aug 4 15:01:05 2025 by rpki-client