$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa File: 1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa (raw, json) Hash identifier: x34kguXVvW1+KrE0hEiFFOYq9VPkJwpOrd7t8XtfIpM= Subject key identifier: C2:D9:A6:4F:35:D3:7E:D2:85:F3:44:19:53:07:01:29:A9:77:B2:31 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A5E1DBE8D670EF02D2D887F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa Signing time: Mon 30 Jun 2025 22:46:41 +0000 ROA not before: Mon 30 Jun 2025 22:46:41 +0000 ROA not after: Sun 28 Sep 2025 22:46:41 +0000 asID: 401152 IP address blocks: 23.27.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5e:1d:be:8d:67:0e:f0:2d:2d:88:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 30 22:46:41 2025 GMT Not After : Sep 28 22:46:41 2025 GMT Subject: CN=10fe9fe8-3ec8-4781-9de3-c646aa0c0347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:25:3c:1b:9c:aa:6c:33:85:98:50:56:d2:a8: d5:d2:41:39:b7:55:7a:86:55:0f:05:b3:b8:28:58: 8c:b5:64:0d:28:92:ea:cb:36:49:50:3d:7c:01:df: f3:9c:5d:a6:1a:96:d8:00:5e:6f:a7:48:96:5e:02: bf:a3:67:92:8a:e3:c7:15:2f:22:39:4c:44:6b:6c: fa:75:df:08:ab:be:7f:39:18:95:ff:2d:e2:4a:be: ac:f2:d5:34:96:54:9d:23:24:be:38:18:99:82:7c: 45:6d:d5:98:2a:24:a0:42:e9:f6:26:93:61:5d:e5: 39:9d:7e:f4:6d:04:80:9d:4f:f5:c6:13:2c:9e:ff: 6e:5f:4c:ec:1f:96:c3:9e:51:24:35:01:99:3d:4e: ed:9b:6e:71:d5:6c:92:73:00:0d:45:b8:c8:1f:a2: ae:7b:23:67:8d:b3:75:28:c4:4a:22:87:ae:5f:4e: fb:49:28:bd:e2:05:af:76:30:fe:c4:3f:6a:8f:98: 34:61:3f:3f:1f:5b:0b:3e:9f:50:c8:a9:2a:a6:f0: b4:f9:ba:fe:53:9d:99:71:d4:09:b2:72:ed:14:6e: 00:31:bb:85:51:83:78:b5:1a:c8:d8:9a:69:30:f7: 6b:3f:d5:f2:65:4d:a3:bc:ac:2a:64:44:2c:a2:36: 20:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:D9:A6:4F:35:D3:7E:D2:85:F3:44:19:53:07:01:29:A9:77:B2:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1a7aa1e2-2aad-3739-8a35-9e91cdf85b29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:8d:1e:5e:95:41:53:45:3b:d4:64:97:b7:f9:50:8d:96:80: a4:00:0f:92:57:99:39:3c:8a:43:0f:07:f6:48:d5:5a:e8:99: 85:b1:8b:dd:07:a2:87:e2:89:48:22:cb:85:55:35:4a:8e:9b: d8:b9:c7:10:13:0c:d2:90:49:dc:b9:ea:e8:fc:1e:a0:8e:77: d4:12:29:4f:b7:dd:67:dd:5b:41:74:60:3b:b5:d0:de:70:4d: 21:b0:05:10:9e:ea:e1:b8:13:01:7e:f6:ad:5f:c2:d4:3b:e3: ff:50:21:64:a1:4e:a1:b1:ee:65:38:a1:92:1e:2a:b8:51:de: 65:56:eb:d9:31:20:da:af:16:93:a4:28:49:9b:a3:81:17:74: 41:d3:a6:53:f3:6a:e7:4c:1a:99:f9:4f:5c:57:71:a2:57:89: 52:80:b7:af:8d:cf:ad:7c:b2:2f:68:cc:10:29:7f:b8:57:9f: 0f:b3:f2:75:23:08:4b:2c:9d:62:75:77:51:25:bc:d8:e9:cd: 89:7e:2c:1e:bb:03:da:98:de:ed:eb:4d:68:fb:12:92:0a:c0: 86:d3:68:6f:15:db:54:d6:6e:d3:30:f7:80:b2:b5:41:4f:df: d8:03:7c:71:bc:93:17:ff:77:9d:58:eb:8d:aa:2a:9f:0f:b0: 9b:d7:8a:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpeHb6NZw7wLS2If4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYzMDIyNDY0MVoXDTI1MDkyODIyNDY0MVowLzEtMCsGA1UEAxMk MTBmZTlmZTgtM2VjOC00NzgxLTlkZTMtYzY0NmFhMGMwMzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCU8G5yqbDOFmFBW0qjV0kE5t1V6hlUPBbO4 KFiMtWQNKJLqyzZJUD18Ad/znF2mGpbYAF5vp0iWXgK/o2eSiuPHFS8iOUxEa2z6 dd8Iq75/ORiV/y3iSr6s8tU0llSdIyS+OBiZgnxFbdWYKiSgQun2JpNhXeU5nX70 bQSAnU/1xhMsnv9uX0zsH5bDnlEkNQGZPU7tm25x1WyScwANRbjIH6KueyNnjbN1 KMRKIoeuX077SSi94gWvdjD+xD9qj5g0YT8/H1sLPp9QyKkqpvC0+br+U52ZcdQJ snLtFG4AMbuFUYN4tRrI2JppMPdrP9XyZU2jvKwqZEQsojYg4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLZpk81037ShfNEGVMHASmpd7IxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWE3YWExZTItMmFhZC0z NzM5LThhMzUtOWU5MWNkZjg1YjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF+NHl6VQVNFO9Rkl7f5UI2WgKQAD5JXmTk8ikMPB/ZI1VromYWxi90H oofiiUgiy4VVNUqOm9i5xxATDNKQSdy56uj8HqCOd9QSKU+33WfdW0F0YDu10N5w TSGwBRCe6uG4EwF+9q1fwtQ74/9QIWShTqGx7mU4oZIeKrhR3mVW69kxINqvFpOk KEmbo4EXdEHTplPzaudMGpn5T1xXcaJXiVKAt6+Nz618si9ozBApf7hXnw+z8nUj CEssnWJ1d1ElvNjpzYl+LB67A9qY3u3rTWj7EpIKwIbTaG8V21TWbtMw94CytUFP 39gDfHG8kxf/d51Y642qKp8PsJvXihM= -----END CERTIFICATE-----Generated at Sun Jul 6 08:00:21 2025 by rpki-client