$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa File: 9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa (raw, json) Hash identifier: td+yAQuDK5Us2TT08Ul1GG2rU+Dv2PdKm+KeYt4r6ZI= Subject key identifier: 8D:9E:12:3F:0B:68:AE:DC:28:2E:A9:10:6F:1A:CF:53:C8:B5:FB:FE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A9D30F2F8940A23B9208DE980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa Signing time: Wed 23 Jul 2025 13:01:02 +0000 ROA not before: Wed 23 Jul 2025 13:01:02 +0000 ROA not after: Tue 21 Oct 2025 13:01:02 +0000 asID: 400899 IP address blocks: 23.27.6.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:9d:30:f2:f8:94:0a:23:b9:20:8d:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 23 13:01:02 2025 GMT Not After : Oct 21 13:01:02 2025 GMT Subject: CN=63ac559e-1968-4910-8850-d465b671ab25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:98:9b:21:0e:af:03:bb:f6:6c:45:41:52: 71:97:02:8d:ca:76:ee:54:c9:5c:c6:8d:20:87:c8: df:59:37:28:a6:a2:fb:97:94:10:f7:c3:88:1d:0b: 48:bb:d9:b0:27:5c:8a:8a:34:b4:63:9b:1e:0f:94: d2:ed:28:76:bb:8a:e5:8f:8c:fb:ab:ab:0d:08:1a: d3:1f:63:15:9b:18:63:50:62:a7:61:10:32:3c:63: 05:b4:01:d1:93:e4:cd:b3:10:f9:0f:70:01:c3:65: f5:1f:a4:4a:45:29:19:22:fa:fd:e6:a8:7c:5b:5f: fb:8d:f7:ab:45:ba:c7:0d:85:75:f0:b2:44:4b:2c: 61:10:93:3e:86:4b:b2:13:0b:78:34:08:f0:2e:4d: 4e:a4:49:77:9b:7b:5b:46:eb:ad:78:2c:f5:70:28: 2e:75:b6:ea:51:42:bd:4b:15:34:e1:b5:f5:c4:87: 3f:dd:55:7b:da:25:88:a4:4a:ea:6b:e9:a5:61:7e: 3d:70:60:40:7e:a6:35:fa:71:6f:55:83:87:27:ee: 60:92:19:61:92:23:0a:1c:dc:eb:2d:a5:62:de:33: 4c:8c:3a:77:f6:e0:9e:9a:4b:5c:4c:50:ff:8d:43: 49:5f:98:45:e9:ec:b1:94:f9:26:25:19:87:67:d1: a3:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9E:12:3F:0B:68:AE:DC:28:2E:A9:10:6F:1A:CF:53:C8:B5:FB:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9ecd322f-a6fb-336c-a3ab-6d36c3b2d88c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.6.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:03:e6:bd:15:d3:83:92:e0:6b:4b:c7:75:e6:9c:f1:0e:56: 01:49:fc:aa:5f:7b:a7:f4:33:79:8f:0d:c3:e1:fa:1e:90:f9: cd:a3:a0:25:d7:34:e0:47:49:e3:b6:25:d9:29:2a:c2:a0:21: 4a:93:71:35:cf:4f:63:01:0f:55:75:11:58:a1:57:3c:20:17: 22:f6:8c:57:0f:5e:3e:a0:84:ad:f9:36:34:90:9f:d0:89:63: 0e:be:63:2f:95:a1:fc:2e:b8:b4:f9:67:90:cb:86:09:28:aa: 44:68:e8:22:46:65:1f:48:99:b3:ed:72:97:7c:67:e9:d3:de: 43:e5:2b:82:28:0c:87:62:42:ea:09:7d:57:1e:d9:ca:f1:d2: 9b:92:25:0a:c0:ac:46:04:d8:ab:11:d7:91:ca:0e:29:c9:49: 62:eb:8f:33:64:a5:dd:bc:f3:52:92:c5:21:a5:29:49:10:82: ba:7a:78:67:26:c0:9a:d8:6d:eb:ee:a1:a2:26:4a:4d:62:c7: 80:38:ee:e0:a7:bd:fa:17:23:fa:cf:47:9c:ac:25:e6:7d:5a: 97:62:28:de:fb:9b:b2:0c:48:dc:59:6f:94:7f:3e:00:1d:7e: 51:00:e8:3c:e9:d6:04:20:78:73:3f:e4:7f:bf:81:65:af:31: 25:f4:13:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMPL4lAojuSCN6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk NjNhYzU1OWUtMTk2OC00OTEwLTg4NTAtZDQ2NWI2NzFhYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNqYmyEOrwO79mxFQVJxlwKNynbuVMlcxo0g h8jfWTcopqL7l5QQ98OIHQtIu9mwJ1yKijS0Y5seD5TS7Sh2u4rlj4z7q6sNCBrT H2MVmxhjUGKnYRAyPGMFtAHRk+TNsxD5D3ABw2X1H6RKRSkZIvr95qh8W1/7jfer RbrHDYV18LJESyxhEJM+hkuyEwt4NAjwLk1OpEl3m3tbRuuteCz1cCgudbbqUUK9 SxU04bX1xIc/3VV72iWIpErqa+mlYX49cGBAfqY1+nFvVYOHJ+5gkhlhkiMKHNzr LaVi3jNMjDp39uCemktcTFD/jUNJX5hF6eyxlPkmJRmHZ9GjbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2eEj8LaK7cKC6pEG8az1PItfv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWVjZDMyMmYtYTZmYi0z MzZjLWEzYWItNmQzNmMzYjJkODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUD5r0V04OS4GtLx3XmnPEOVgFJ/Kpfe6f0M3mPDcPh+h6Q+c2joCXX NOBHSeO2JdkpKsKgIUqTcTXPT2MBD1V1EVihVzwgFyL2jFcPXj6ghK35NjSQn9CJ Yw6+Yy+VofwuuLT5Z5DLhgkoqkRo6CJGZR9ImbPtcpd8Z+nT3kPlK4IoDIdiQuoJ fVce2crx0puSJQrArEYE2KsR15HKDinJSWLrjzNkpd2881KSxSGlKUkQgrp6eGcm wJrYbevuoaImSk1ix4A47uCnvfoXI/rPR5ysJeZ9WpdiKN77m7IMSNxZb5R/PgAd flEA6Dzp1gQgeHM/5H+/gWWvMSX0E/8= -----END CERTIFICATE-----Generated at Wed Aug 6 09:23:57 2025 by rpki-client