$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9720fc1-63e2-318f-a8ae-b58525ba4721.roa File: d9720fc1-63e2-318f-a8ae-b58525ba4721.roa (raw, json) Hash identifier: FGy6FK/48kHvFr/1EeQehSmoM0+yvYprVC1o85ozV9c= Subject key identifier: 55:AE:A4:95:DA:D7:F6:28:E2:85:42:C4:DE:C6:3D:5F:3F:43:B1:0C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A94D0E60F398F28A943A590C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9720fc1-63e2-318f-a8ae-b58525ba4721.roa Signing time: Sun 20 Jul 2025 13:01:04 +0000 ROA not before: Sun 20 Jul 2025 13:01:04 +0000 ROA not after: Sat 18 Oct 2025 13:01:04 +0000 asID: 7018 IP address blocks: 23.27.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:94:d0:e6:0f:39:8f:28:a9:43:a5:90:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 20 13:01:04 2025 GMT Not After : Oct 18 13:01:04 2025 GMT Subject: CN=11ec9f2c-fe1d-4529-bbf5-5e9c1b3e1950 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:67:42:ec:a6:b4:47:96:8a:26:ff:73:5e:89: 4c:4a:66:c9:8d:23:d2:ba:e6:e9:fc:85:15:9c:c2: 2d:1a:76:f4:41:a4:6a:c6:bf:b0:b7:1e:93:09:0a: 35:01:e1:1c:e7:4b:f1:2f:98:69:fb:28:b6:47:cf: 64:40:c3:3b:b1:ac:be:e0:cb:17:36:72:94:c6:0d: 8c:92:33:6e:8a:7e:8f:84:49:1a:35:f9:f2:ca:bb: 83:f6:98:06:7f:b0:ec:ed:ed:61:3d:fa:d9:43:92: d4:1e:8d:36:12:bf:10:da:92:a9:c7:c3:ed:57:e8: c4:5a:17:94:08:36:18:31:92:68:e7:b9:41:77:51: 93:42:42:a0:ba:bb:fe:7f:81:4c:55:75:fd:d4:3e: 7d:39:e7:65:de:dd:45:0c:49:d4:1f:d8:29:59:11: f9:64:41:bd:87:8a:a6:c1:9d:4a:12:af:b6:ea:89: e0:af:b9:15:d0:ae:8c:8d:08:3e:5a:35:00:0f:7b: a6:0c:61:2f:5c:14:66:5e:0f:71:81:82:71:3d:3c: c9:46:0f:be:e2:54:4a:60:e1:91:b8:39:52:bd:92: 76:02:dd:8e:ec:2d:1b:4c:6c:3e:b8:10:31:4c:0d: a2:26:70:fe:a5:05:f3:94:3b:08:46:1e:5b:b3:b3: 5c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AE:A4:95:DA:D7:F6:28:E2:85:42:C4:DE:C6:3D:5F:3F:43:B1:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9720fc1-63e2-318f-a8ae-b58525ba4721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:ed:92:6d:5d:93:16:ec:ea:d2:c8:1e:86:15:c5:6a:e7:76: e7:42:1a:6b:67:a1:48:93:ec:00:ea:fa:80:7a:b7:aa:c5:16: 8e:3c:ba:dd:c7:71:84:d1:1a:4d:40:77:7d:12:34:b0:ce:a9: 3e:cf:8d:12:ba:69:e1:60:01:4f:42:3e:ae:3e:48:59:76:9e: a7:19:41:0a:94:74:1e:e9:42:a8:ce:da:d8:fc:39:45:5b:bf: c8:c3:3c:8c:e2:55:09:74:5d:14:95:e7:dd:e2:46:81:27:78: cb:a2:77:5c:0c:7e:2e:9d:32:04:3f:e3:90:9d:64:3a:7b:82: 4f:7d:96:54:6d:e1:dc:2b:3c:09:b4:7f:7f:fb:76:5b:32:9d: af:6c:15:9e:6c:5c:0b:dd:c6:cf:9b:39:36:d1:cc:78:69:bb: 91:ca:6d:8a:db:2e:96:82:5a:95:77:00:6e:6a:ff:1d:3f:c0: d5:9f:f8:d2:b5:52:6c:e6:00:43:39:e4:54:8c:64:44:fd:71: a5:ba:b9:eb:c3:b5:01:c6:d4:8e:ed:84:81:dd:29:bd:c4:2c: 87:28:a4:a8:96:2c:b6:b0:48:f4:e0:b0:d2:cf:fd:29:0b:6c: 41:8d:68:28:90:10:48:54:63:71:e7:95:bc:db:cc:9e:ea:e7: c2:bd:df:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0OYPOY8oqUOlkMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk MTFlYzlmMmMtZmUxZC00NTI5LWJiZjUtNWU5YzFiM2UxOTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmdC7Ka0R5aKJv9zXolMSmbJjSPSuubp/IUV nMItGnb0QaRqxr+wtx6TCQo1AeEc50vxL5hp+yi2R89kQMM7say+4MsXNnKUxg2M kjNuin6PhEkaNfnyyruD9pgGf7Ds7e1hPfrZQ5LUHo02Er8Q2pKpx8PtV+jEWheU CDYYMZJo57lBd1GTQkKgurv+f4FMVXX91D59Oedl3t1FDEnUH9gpWRH5ZEG9h4qm wZ1KEq+26ongr7kV0K6MjQg+WjUAD3umDGEvXBRmXg9xgYJxPTzJRg++4lRKYOGR uDlSvZJ2At2O7C0bTGw+uBAxTA2iJnD+pQXzlDsIRh5bs7NcsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWupJXa1/Yo4oVCxN7GPV8/Q7EMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDk3MjBmYzEtNjNlMi0z MThmLWE4YWUtYjU4NTI1YmE0NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIHtkm1dkxbs6tLIHoYVxWrndudCGmtnoUiT7ADq+oB6t6rFFo48ut3H cYTRGk1Ad30SNLDOqT7PjRK6aeFgAU9CPq4+SFl2nqcZQQqUdB7pQqjO2tj8OUVb v8jDPIziVQl0XRSV593iRoEneMuid1wMfi6dMgQ/45CdZDp7gk99llRt4dwrPAm0 f3/7dlsyna9sFZ5sXAvdxs+bOTbRzHhpu5HKbYrbLpaCWpV3AG5q/x0/wNWf+NK1 UmzmAEM55FSMZET9caW6uevDtQHG1I7thIHdKb3ELIcopKiWLLawSPTgsNLP/SkL bEGNaCiQEEhUY3HnlbzbzJ7q58K93xw= -----END CERTIFICATE-----Generated at Wed Aug 6 11:05:32 2025 by rpki-client