$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3df8a7c-e1f9-397c-bb65-90b194931f9c.roa File: a3df8a7c-e1f9-397c-bb65-90b194931f9c.roa (raw, json) Hash identifier: IQs3OF5SNSHx+CtMvIxy+NJUxXLGueTAElT8SPl8NEE= Subject key identifier: 52:83:16:71:5C:04:1A:8A:84:B6:A3:5F:A5:AF:2C:E9:30:12:B5:64 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB7B63741C16F4AF4250DE080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3df8a7c-e1f9-397c-bb65-90b194931f9c.roa Signing time: Sat 02 Aug 2025 01:00:32 +0000 ROA not before: Sat 02 Aug 2025 01:00:32 +0000 ROA not after: Fri 31 Oct 2025 01:00:32 +0000 asID: 7385 IP address blocks: 23.27.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:b6:37:41:c1:6f:4a:f4:25:0d:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 2 01:00:32 2025 GMT Not After : Oct 31 01:00:32 2025 GMT Subject: CN=e8dac9bc-1b9e-4d5b-ac9a-8ad1932a6839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:68:53:e9:d7:10:0b:81:d8:c3:3e:c5:cd:50: bd:1c:64:63:e1:ce:e8:26:52:92:f0:52:e9:99:71: f9:49:46:3e:67:ac:81:ae:24:95:ee:ab:88:60:83: 84:b6:7e:2b:b8:8e:f4:6c:c9:1a:8b:ae:24:df:4b: 45:f7:b4:1b:9c:af:92:bc:af:df:50:b5:23:55:47: 1b:9e:99:ae:b8:2f:0c:f9:08:d0:76:bd:79:d0:04: 61:ec:e5:ba:f3:f9:04:16:09:5e:82:c6:99:37:9b: 44:88:4d:8a:04:80:77:80:ae:34:3f:ef:1d:f3:4c: a9:7a:31:74:ef:f6:61:08:69:17:41:9f:9f:c4:f2: 7a:00:0b:14:b5:ff:23:f5:8a:e9:d7:1f:c6:cf:b4: 80:96:18:55:c1:98:71:f1:ec:df:82:2e:86:40:b4: 6c:e5:3e:a8:0f:61:33:69:b7:62:50:ba:7b:8c:9b: 76:df:75:29:38:08:73:1a:80:e2:52:8d:cf:ae:a8: ae:64:bc:f9:ec:73:61:04:67:77:dc:2d:06:ff:8a: c4:59:12:0b:1d:28:fc:0a:4f:52:00:ce:9f:91:2c: 4a:e8:e9:39:88:80:50:3d:e6:ee:b5:af:76:8b:8d: 8a:26:a0:7f:32:42:3a:45:85:08:c7:61:5c:c5:1d: e5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:83:16:71:5C:04:1A:8A:84:B6:A3:5F:A5:AF:2C:E9:30:12:B5:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3df8a7c-e1f9-397c-bb65-90b194931f9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:cf:53:f9:95:ec:0a:5e:ac:4b:73:53:2f:32:9a:8d:2e:7a: 30:62:5e:37:08:08:11:bf:ad:30:bc:b5:a8:3a:9f:f7:79:ce: dc:f1:b0:30:53:06:3f:a9:6b:42:5d:c0:80:a6:06:00:44:e8: 76:fa:0d:a6:64:3d:7f:4d:f2:1a:a1:40:bb:5f:40:6c:20:82: e7:a9:40:97:fa:3c:26:3c:99:79:08:f9:35:56:88:30:2f:99: 41:ba:fe:c6:fb:19:59:36:b4:d6:85:c8:fd:5b:62:ff:77:c7: 42:e8:37:76:39:9b:4d:f4:5c:c8:a8:7e:67:aa:b2:99:23:49: 47:85:fa:99:b7:4c:95:d8:26:a5:5d:82:a9:3c:72:2e:c2:40: 68:71:a9:1e:45:52:4c:ab:e9:1b:3d:d6:87:cf:f5:41:71:2c: 3f:03:a1:71:b4:16:e6:63:71:ad:79:9e:a7:f3:77:4e:36:51: 02:12:24:b0:4f:d5:ab:43:66:e6:01:44:83:2e:c5:54:72:8c: d7:8f:ab:b5:d4:e5:62:80:e9:ad:ea:3d:c3:e0:09:5e:94:5a: 2f:2f:0f:6c:39:f7:53:ed:a5:ce:af:cc:be:92:c6:03:4d:48: d7:6b:dc:bd:af:32:7f:4f:0e:ed:39:73:82:f6:81:e0:0e:bc: 46:8a:27:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3tjdBwW9K9CUN4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgwMjAxMDAzMloXDTI1MTAzMTAxMDAzMlowLzEtMCsGA1UEAxMk ZThkYWM5YmMtMWI5ZS00ZDViLWFjOWEtOGFkMTkzMmE2ODM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWhT6dcQC4HYwz7FzVC9HGRj4c7oJlKS8FLp mXH5SUY+Z6yBriSV7quIYIOEtn4ruI70bMkai64k30tF97QbnK+SvK/fULUjVUcb npmuuC8M+QjQdr150ARh7OW68/kEFglegsaZN5tEiE2KBIB3gK40P+8d80ypejF0 7/ZhCGkXQZ+fxPJ6AAsUtf8j9Yrp1x/Gz7SAlhhVwZhx8ezfgi6GQLRs5T6oD2Ez abdiULp7jJt233UpOAhzGoDiUo3PrqiuZLz57HNhBGd33C0G/4rEWRILHSj8Ck9S AM6fkSxK6Ok5iIBQPebuta92i42KJqB/MkI6RYUIx2FcxR3l/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKDFnFcBBqKhLajX6WvLOkwErVkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTNkZjhhN2MtZTFmOS0z OTdjLWJiNjUtOTBiMTk0OTMxZjljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHPU/mV7AperEtzUy8ymo0uejBiXjcICBG/rTC8tag6n/d5ztzxsDBT Bj+pa0JdwICmBgBE6Hb6DaZkPX9N8hqhQLtfQGwgguepQJf6PCY8mXkI+TVWiDAv mUG6/sb7GVk2tNaFyP1bYv93x0LoN3Y5m030XMiofmeqspkjSUeF+pm3TJXYJqVd gqk8ci7CQGhxqR5FUkyr6Rs91ofP9UFxLD8DoXG0FuZjca15nqfzd042UQISJLBP 1atDZuYBRIMuxVRyjNePq7XU5WKA6a3qPcPgCV6UWi8vD2w591Ptpc6vzL6SxgNN SNdr3L2vMn9PDu05c4L2geAOvEaKJ7A= -----END CERTIFICATE-----Generated at Mon Aug 4 15:05:37 2025 by rpki-client