$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b400b5b7-f5cb-38e6-a730-603b99fa278d.roa File: b400b5b7-f5cb-38e6-a730-603b99fa278d.roa (raw, json) Hash identifier: VOqpwbCtgvi6smhtsUEjiyC42VGsWcM/yiME1606jwQ= Subject key identifier: E9:38:B1:70:13:92:44:62:AF:89:97:16:8D:C3:25:34:A8:E2:75:98 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB43354E8552EA13750AA2B80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b400b5b7-f5cb-38e6-a730-603b99fa278d.roa Signing time: Thu 31 Jul 2025 18:49:42 +0000 ROA not before: Thu 31 Jul 2025 18:49:42 +0000 ROA not after: Wed 29 Oct 2025 18:49:42 +0000 asID: 401152 IP address blocks: 23.27.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b4:33:54:e8:55:2e:a1:37:50:aa:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 31 18:49:42 2025 GMT Not After : Oct 29 18:49:42 2025 GMT Subject: CN=0eab6b94-1935-41db-b3d8-81c17d3ffb51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ba:6c:58:53:f6:e2:5e:de:b4:75:16:97:e4: 42:a4:5f:2c:cb:62:b4:94:f6:02:19:b9:99:72:98: db:2c:21:6f:b7:cb:6e:f1:8a:85:e0:4c:4c:4d:f0: de:ba:5f:64:e0:17:53:c4:39:b5:1f:00:d1:55:a3: 9e:b8:c7:8d:92:ce:b8:45:76:b0:d8:5f:9a:12:20: c1:41:50:14:aa:1c:e3:81:04:eb:a6:52:0f:38:91: 34:3f:81:bd:c5:49:75:96:5b:a2:ba:8e:01:7b:1c: de:ac:c6:e1:2a:34:53:cf:ab:26:c7:14:ff:b7:b5: 14:a2:9c:ea:38:ff:09:40:57:c7:a7:a7:1b:c9:2e: d0:92:9c:70:9a:60:a1:6c:0f:a2:c2:86:e6:05:b9: 48:3b:7b:23:68:0b:e3:2c:c7:77:72:4c:78:d3:bf: c6:1f:8e:d9:e8:cc:c8:00:9f:30:9c:fe:97:af:2a: 74:7b:38:dc:f4:a5:d8:54:92:ae:d9:d5:83:ad:00: 39:96:01:ba:e1:a0:c5:9b:8e:f4:c0:a8:f5:6b:3c: 83:ae:8d:c4:d9:33:69:92:4b:6a:36:48:39:64:ba: d0:6a:5c:7b:b8:8a:3a:cc:0c:09:cb:e3:a8:b4:f2: cf:21:e0:52:c0:93:7b:a4:9d:91:5f:b0:23:21:79: 9b:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:38:B1:70:13:92:44:62:AF:89:97:16:8D:C3:25:34:A8:E2:75:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b400b5b7-f5cb-38e6-a730-603b99fa278d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:62:01:d3:d7:64:a2:dc:64:2a:50:14:81:27:1f:74:18:4c: 0c:53:da:42:bc:c9:c1:c0:20:b0:84:9d:d6:5f:99:fa:12:bb: 64:d6:6e:5a:30:66:f7:22:3e:18:0e:08:0e:df:da:36:e7:5b: 89:31:33:a4:f9:54:4a:02:c3:b4:11:eb:92:2f:45:41:9a:1d: 56:e6:37:70:9d:11:a3:f6:36:91:74:b4:39:75:05:5e:71:bc: 7e:38:e4:a6:b0:c5:3e:64:94:9c:0b:dc:f2:5c:d4:a5:68:67: 65:d3:0e:8a:78:b6:07:c3:eb:16:65:b4:ef:a3:eb:ab:b9:43: a4:5d:3b:22:f3:72:56:cd:0a:2d:e2:ed:d6:b4:22:fd:b1:93: d2:dd:f3:8a:5d:0e:13:0d:6f:ba:7d:a4:60:35:c9:ee:f5:27: f0:77:28:b8:19:42:c6:d3:a7:9e:7e:94:90:2d:b1:4e:48:03: 3c:95:4e:da:e5:6b:1c:dc:a9:9d:bc:f9:cc:cf:db:f4:1f:37: 7d:96:16:79:67:73:69:1c:98:84:31:be:89:ac:43:18:ca:fe: 03:34:33:f8:0c:87:ae:89:1a:18:87:9d:89:4d:ef:8a:2b:59: 09:04:b0:c2:7d:6a:0a:a8:2f:6f:c9:3d:97:5f:7c:9d:50:64: b3:a0:51:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq0M1ToVS6hN1CqK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDczMTE4NDk0MloXDTI1MTAyOTE4NDk0MlowLzEtMCsGA1UEAxMk MGVhYjZiOTQtMTkzNS00MWRiLWIzZDgtODFjMTdkM2ZmYjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrpsWFP24l7etHUWl+RCpF8sy2K0lPYCGbmZ cpjbLCFvt8tu8YqF4ExMTfDeul9k4BdTxDm1HwDRVaOeuMeNks64RXaw2F+aEiDB QVAUqhzjgQTrplIPOJE0P4G9xUl1lluiuo4BexzerMbhKjRTz6smxxT/t7UUopzq OP8JQFfHp6cbyS7QkpxwmmChbA+iwobmBblIO3sjaAvjLMd3ckx407/GH47Z6MzI AJ8wnP6Xryp0ezjc9KXYVJKu2dWDrQA5lgG64aDFm470wKj1azyDro3E2TNpkktq Nkg5ZLrQalx7uIo6zAwJy+OotPLPIeBSwJN7pJ2RX7AjIXmbXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOk4sXATkkRir4mXFo3DJTSo4nWYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjQwMGI1YjctZjVjYi0z OGU2LWE3MzAtNjAzYjk5ZmEyNzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAANiAdPXZKLcZCpQFIEnH3QYTAxT2kK8ycHAILCEndZfmfoSu2TWblow ZvciPhgOCA7f2jbnW4kxM6T5VEoCw7QR65IvRUGaHVbmN3CdEaP2NpF0tDl1BV5x vH445KawxT5klJwL3PJc1KVoZ2XTDop4tgfD6xZltO+j66u5Q6RdOyLzclbNCi3i 7da0Iv2xk9Ld84pdDhMNb7p9pGA1ye71J/B3KLgZQsbTp55+lJAtsU5IAzyVTtrl axzcqZ28+czP2/QfN32WFnlnc2kcmIQxvomsQxjK/gM0M/gMh66JGhiHnYlN74or WQkEsMJ9agqoL2/JPZdffJ1QZLOgUYQ= -----END CERTIFICATE-----Generated at Mon Aug 4 16:02:15 2025 by rpki-client