$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cea54318-08b2-3948-9b58-d69380b1b289.roa File: cea54318-08b2-3948-9b58-d69380b1b289.roa (raw, json) Hash identifier: hTyS6/UnzG5UPxOkuuCRVamdzhj8dw9GCLxOgvq7H4I= Subject key identifier: FD:69:64:C2:D7:17:11:25:E5:3B:9E:DC:EA:22:9B:56:8E:49:44:3E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B3DBA2C78E0E633386E79B980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cea54318-08b2-3948-9b58-d69380b1b289.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 401152 IP address blocks: 23.27.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2c:78:e0:e6:33:38:6e:79:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=eca1be97-9cad-467b-b3ac-1b25fbfe3b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:42:6a:1e:a9:5d:bc:f7:d0:0d:28:b4:0e:b7: 57:30:ed:7b:9d:c3:5f:77:6e:87:b6:85:38:76:80: c4:96:26:fc:91:34:99:ca:71:92:a1:f8:9f:b1:4e: 98:f2:ed:02:12:94:e9:6f:aa:4b:56:e5:46:21:89: ce:3b:a2:1e:5e:de:16:ad:67:ac:4a:38:fe:67:b9: 77:16:4f:b0:0c:78:c1:f0:f3:2a:cf:5f:4a:2b:6c: c2:65:1f:1d:6b:2d:66:cf:c5:91:ab:60:04:11:22: 6d:34:0b:f0:54:40:89:02:28:c3:64:ac:46:e6:41: 7f:6c:5a:ee:80:50:d2:0e:d0:ae:44:ea:de:3b:e5: 6e:43:a2:67:3a:30:5a:15:a0:ba:bd:71:d6:86:7c: 24:09:60:5a:0e:d9:0c:14:b2:7d:1b:da:7b:ab:2d: 49:21:bd:d5:15:1e:2d:ff:99:1f:f5:b7:0a:f4:c1: fc:15:69:97:93:74:46:44:c8:f4:9e:d5:d6:e6:6c: f2:5f:67:46:56:d3:3a:c7:b9:8b:7b:83:a1:bd:14: c8:dd:c0:88:36:17:0a:80:87:3b:a5:32:1b:2b:11: e2:9f:e9:ff:27:6b:ae:2d:af:b8:46:cb:77:bf:94: c4:a7:af:75:b6:c1:91:7d:41:9d:95:30:22:a1:41: eb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:69:64:C2:D7:17:11:25:E5:3B:9E:DC:EA:22:9B:56:8E:49:44:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cea54318-08b2-3948-9b58-d69380b1b289.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:45:ec:ee:57:1e:a9:02:b7:b4:44:0b:43:b4:d9:40:ef:f6: 72:e7:ae:75:38:d6:9f:8e:7d:93:e6:7f:65:c7:e6:3f:37:f7: 65:53:6a:be:45:e2:1d:2d:c5:43:22:a0:a9:d2:76:35:10:3d: 9f:a8:74:ea:5f:78:4e:99:7c:92:54:50:59:44:de:23:da:59: f8:a6:36:b8:b5:90:e3:ad:2b:bd:5b:3d:7c:93:1c:26:a2:cc: 80:7e:44:3e:41:93:ca:6e:53:9c:4e:9d:d1:4b:32:62:63:2f: 9d:34:3f:29:f4:14:96:35:1a:76:e6:2a:0d:2e:5b:8a:94:bd: f0:7a:00:18:2b:05:ed:f9:0f:4e:0b:fa:83:8f:03:0a:df:af: 42:94:49:40:ae:e1:96:80:f6:03:f9:09:26:d2:40:44:45:5e: 59:91:df:d3:68:70:47:b5:5e:5e:b6:67:ca:d7:99:55:47:38: b6:ba:79:76:64:9e:f2:0f:61:63:eb:93:1e:8c:ef:5a:da:e8: de:f8:c7:fd:30:f8:f7:11:6e:fd:f9:c3:57:3e:16:cf:f8:36: e2:40:bb:80:f3:39:d5:ba:4f:68:8c:ea:e0:d7:88:af:95:0f: 61:ef:4e:d2:37:c0:c4:22:32:a8:ff:d6:cd:51:8c:22:05:ac: 61:9a:01:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uix44OYzOG55uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk ZWNhMWJlOTctOWNhZC00NjdiLWIzYWMtMWIyNWZiZmUzYjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkJqHqldvPfQDSi0DrdXMO17ncNfd26HtoU4 doDElib8kTSZynGSofifsU6Y8u0CEpTpb6pLVuVGIYnOO6IeXt4WrWesSjj+Z7l3 Fk+wDHjB8PMqz19KK2zCZR8day1mz8WRq2AEESJtNAvwVECJAijDZKxG5kF/bFru gFDSDtCuROreO+VuQ6JnOjBaFaC6vXHWhnwkCWBaDtkMFLJ9G9p7qy1JIb3VFR4t /5kf9bcK9MH8FWmXk3RGRMj0ntXW5mzyX2dGVtM6x7mLe4OhvRTI3cCINhcKgIc7 pTIbKxHin+n/J2uuLa+4Rst3v5TEp691tsGRfUGdlTAioUHr9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1pZMLXFxEl5Tue3Ooim1aOSUQ+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2VhNTQzMTgtMDhiMi0z OTQ4LTliNTgtZDY5MzgwYjFiMjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJF7O5XHqkCt7REC0O02UDv9nLnrnU41p+OfZPmf2XH5j8392VTar5F 4h0txUMioKnSdjUQPZ+odOpfeE6ZfJJUUFlE3iPaWfimNri1kOOtK71bPXyTHCai zIB+RD5Bk8puU5xOndFLMmJjL500Pyn0FJY1GnbmKg0uW4qUvfB6ABgrBe35D04L +oOPAwrfr0KUSUCu4ZaA9gP5CSbSQERFXlmR39NocEe1Xl62Z8rXmVVHOLa6eXZk nvIPYWPrkx6M71ra6N74x/0w+PcRbv35w1c+Fs/4NuJAu4DzOdW6T2iM6uDXiK+V D2HvTtI3wMQiMqj/1s1RjCIFrGGaAZc= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:37 2025 by rpki-client