$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/436c14f6-abda-3ed3-b59e-4054116965c1.roa File: 436c14f6-abda-3ed3-b59e-4054116965c1.roa (raw, json) Hash identifier: q+fysCvInhqpL2MbMYqbTQxEribgMohLc93b2nn0KBo= Subject key identifier: 08:95:7D:04:3E:6B:56:80:BF:9C:D2:84:5F:24:71:EE:B8:75:8B:06 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A6DBB5A56175B7D22B9725580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/436c14f6-abda-3ed3-b59e-4054116965c1.roa Signing time: Sun 06 Jul 2025 13:01:03 +0000 ROA not before: Sun 06 Jul 2025 13:01:03 +0000 ROA not after: Sat 04 Oct 2025 13:01:03 +0000 asID: 18779 IP address blocks: 23.27.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:6d:bb:5a:56:17:5b:7d:22:b9:72:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 6 13:01:03 2025 GMT Not After : Oct 4 13:01:03 2025 GMT Subject: CN=74fd371e-a327-4a1c-8be9-c4f62eb4af40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:74:5c:46:b7:0b:ae:6f:37:01:a7:c4:75:74: 08:d7:17:8c:a6:30:c6:5d:eb:de:fb:d5:c8:28:86: fc:13:9d:3e:da:e3:65:08:46:0d:45:a7:f6:8e:60: f6:d2:9a:da:2b:47:96:0f:f0:37:53:07:07:ff:87: 6f:e0:0f:14:34:75:d5:c6:67:a7:1a:03:04:6c:c8: 7b:77:05:88:ba:6e:d0:31:cd:65:dd:1a:b2:69:84: 41:e0:45:b1:3a:86:b5:8a:75:34:91:7f:0d:9d:36: 6f:cc:8b:cf:9d:d6:0f:a9:2d:b5:02:68:6b:de:c2: 96:13:b8:26:bf:8f:70:e4:59:2c:ef:28:d6:e7:46: 99:2c:00:f3:4b:78:e7:8b:2c:9f:f3:26:5e:30:0f: 68:32:10:30:2b:e6:5a:47:4c:94:41:bd:1d:bb:d2: 67:c2:12:c9:83:bd:dc:55:05:07:43:39:60:76:16: 52:03:6d:63:1b:f2:2e:4b:4e:59:c0:d6:7b:7e:cc: 8c:74:8d:82:8e:24:19:4f:ed:0f:6e:cc:4b:6d:07: 06:2e:c0:80:76:9d:bd:e4:d6:71:76:6f:f1:f2:36: cb:9f:6d:09:20:44:11:7b:0e:20:5a:13:bd:1f:f4: 68:d5:fb:12:c5:63:a1:d6:89:a1:c9:50:0f:45:16: e7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:95:7D:04:3E:6B:56:80:BF:9C:D2:84:5F:24:71:EE:B8:75:8B:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/436c14f6-abda-3ed3-b59e-4054116965c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:c9:38:a8:07:bc:c3:3a:fe:fe:d7:46:ae:5b:33:4f:0f:32: 0b:a7:4d:86:bc:23:1f:c3:6c:c3:ab:28:d2:35:22:b3:4a:19: 0c:40:00:35:21:d4:25:74:88:84:db:55:85:57:d0:60:7d:0b: 8e:70:48:de:bf:a4:91:87:65:5e:c6:bf:6c:9b:d2:01:7f:28: a8:4b:a8:44:3b:63:ee:a8:42:c5:fe:91:58:bf:5d:f5:1a:70: 6c:5c:26:2e:c7:28:9b:28:8f:32:44:1e:7f:37:6c:36:2a:43: 82:b7:9d:34:22:b8:92:4d:16:c6:e5:33:61:0e:97:20:7e:0f: bd:29:09:25:83:48:07:8e:58:bf:50:b1:04:e7:fb:a8:9e:03: 67:98:f4:24:9e:0f:9a:90:0e:bf:22:ed:a9:d6:15:70:5b:05: 13:27:61:47:8e:3a:bd:48:a2:a9:67:7f:4d:b3:f2:ff:81:fa: 98:f2:b0:de:e0:89:6a:75:7a:d2:fc:bd:95:e5:be:ac:1b:6a: 5c:83:32:4d:47:ee:70:42:57:42:72:08:14:01:14:f4:e1:2e: c9:eb:bf:c0:66:03:ce:bc:f7:bd:19:f5:51:b0:ff:2c:57:95: 9c:04:c7:ea:4f:bf:6d:e4:35:f0:8d:da:d7:b9:a2:f8:8b:c7: f0:17:65:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu1pWF1t9IrlyVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk NzRmZDM3MWUtYTMyNy00YTFjLThiZTktYzRmNjJlYjRhZjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3RcRrcLrm83AafEdXQI1xeMpjDGXeve+9XI KIb8E50+2uNlCEYNRaf2jmD20praK0eWD/A3UwcH/4dv4A8UNHXVxmenGgMEbMh7 dwWIum7QMc1l3RqyaYRB4EWxOoa1inU0kX8NnTZvzIvPndYPqS21Amhr3sKWE7gm v49w5Fks7yjW50aZLADzS3jniyyf8yZeMA9oMhAwK+ZaR0yUQb0du9JnwhLJg73c VQUHQzlgdhZSA21jG/IuS05ZwNZ7fsyMdI2CjiQZT+0PbsxLbQcGLsCAdp295NZx dm/x8jbLn20JIEQRew4gWhO9H/Ro1fsSxWOh1omhyVAPRRbnfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAiVfQQ+a1aAv5zShF8kce64dYsGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDM2YzE0ZjYtYWJkYS0z ZWQzLWI1OWUtNDA1NDExNjk2NWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXJOKgHvMM6/v7XRq5bM08PMgunTYa8Ix/DbMOrKNI1IrNKGQxAADUh 1CV0iITbVYVX0GB9C45wSN6/pJGHZV7Gv2yb0gF/KKhLqEQ7Y+6oQsX+kVi/XfUa cGxcJi7HKJsojzJEHn83bDYqQ4K3nTQiuJJNFsblM2EOlyB+D70pCSWDSAeOWL9Q sQTn+6ieA2eY9CSeD5qQDr8i7anWFXBbBRMnYUeOOr1Ioqlnf02z8v+B+pjysN7g iWp1etL8vZXlvqwbalyDMk1H7nBCV0JyCBQBFPThLsnrv8BmA868970Z9VGw/yxX lZwEx+pPv23kNfCN2te5oviLx/AXZbo= -----END CERTIFICATE-----Generated at Mon Jul 21 07:30:17 2025 by rpki-client