$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c789f670-4cc3-3248-a1de-9f0da0358a6d.roa File: c789f670-4cc3-3248-a1de-9f0da0358a6d.roa (raw, json) Hash identifier: ePbBw44zT6dRGWUIAjCGITtwFJNCqOcw9VG/g6XUYsA= Subject key identifier: 08:21:48:FE:35:7F:82:88:80:DC:7D:6A:D0:33:81:A4:C7:FE:7F:F5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF9515260FB7A18E79E7E5D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c789f670-4cc3-3248-a1de-9f0da0358a6d.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 12083 IP address blocks: 23.27.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:52:60:fb:7a:18:e7:9e:7e:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=12e83fea-8115-4250-886c-3db866039ec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:10:4a:1d:78:9a:33:14:03:94:ee:23:18:f9: f8:41:dd:c9:8e:91:cf:42:7d:e0:62:23:30:34:11: 7b:0a:15:00:84:f0:e4:f2:1b:82:41:37:01:0c:fb: 2e:50:97:6a:e3:ed:3d:60:be:6e:aa:bf:1b:72:f8: 50:6e:8e:2f:27:38:4a:87:05:42:c2:59:c8:6d:0a: 30:4f:11:fa:e2:c0:30:ce:bd:32:01:c4:7a:99:3f: d0:81:af:93:d1:f8:fd:96:da:bf:3b:d3:d6:ba:80: 4e:f1:d0:40:f2:d8:67:de:fe:6e:a0:1d:08:d0:47: 72:36:93:a2:29:e5:4b:76:6b:a4:0a:84:37:17:0f: 53:5f:63:ea:6e:a7:0d:09:1e:15:51:7e:51:c0:a1: eb:ed:7c:af:4e:cd:6e:8f:08:d2:b6:4f:9d:51:a4: ca:f3:75:e7:b5:65:3f:9c:47:10:83:f5:9a:0c:f7: d0:a6:ae:e4:e7:8f:e9:54:d3:bf:83:d3:e0:b8:7a: 03:87:03:bc:f3:34:98:a8:d2:0b:43:6f:79:6a:5b: 0c:d1:05:ff:b5:0d:8b:dd:9c:85:e2:98:3e:d5:32: 80:a2:37:c9:93:cf:e9:39:53:16:0b:83:c9:27:18: 40:31:77:82:36:2f:ca:64:2d:c9:1d:c1:44:fb:83: f9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:21:48:FE:35:7F:82:88:80:DC:7D:6A:D0:33:81:A4:C7:FE:7F:F5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c789f670-4cc3-3248-a1de-9f0da0358a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:2b:ae:c3:38:2a:7b:c9:a9:e4:9d:00:9b:e3:86:fa:1a:57: ad:86:88:af:e9:ac:d4:63:0f:a6:f5:ac:dd:80:ce:d6:e3:4f: e9:a9:db:1d:70:52:e4:61:39:d0:10:65:ba:53:29:a1:72:66: d7:bd:eb:5e:68:ef:16:3c:9f:88:82:8b:9b:c0:44:eb:28:2e: f6:db:f7:90:0f:19:08:b8:5a:21:44:3a:ab:79:5f:fc:3e:d5: 53:97:c7:da:b6:f9:5f:bf:7d:f2:07:34:53:8e:76:25:d9:b3: f3:b0:06:48:ac:e7:c1:2f:a6:39:38:3d:0e:16:26:0a:14:f9: fc:c3:26:c8:3e:87:be:0d:cf:46:9f:bb:45:1e:0f:70:1e:01: bd:b9:d2:89:56:60:b9:b5:1b:c5:e8:16:60:08:ac:37:db:11: 11:e9:40:31:59:ff:a4:e2:df:a2:59:13:8e:cd:cb:93:b6:4c: 80:26:a3:78:e6:fe:f8:b7:cd:f0:68:83:53:3d:2a:f2:ca:4a: 06:b1:0a:40:89:0e:fd:12:32:63:e4:d5:38:ca:67:cb:b6:98: e8:01:58:17:42:25:f2:6d:3f:83:8a:38:30:95:65:5c:44:d3: f0:08:f5:f7:68:3c:e1:42:1c:9a:ba:b7:45:5e:83:01:9d:b0: 68:73:fa:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UVJg+3oY555+XQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk MTJlODNmZWEtODExNS00MjUwLTg4NmMtM2RiODY2MDM5ZWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRBKHXiaMxQDlO4jGPn4Qd3JjpHPQn3gYiMw NBF7ChUAhPDk8huCQTcBDPsuUJdq4+09YL5uqr8bcvhQbo4vJzhKhwVCwlnIbQow TxH64sAwzr0yAcR6mT/Qga+T0fj9ltq/O9PWuoBO8dBA8thn3v5uoB0I0EdyNpOi KeVLdmukCoQ3Fw9TX2PqbqcNCR4VUX5RwKHr7XyvTs1ujwjStk+dUaTK83XntWU/ nEcQg/WaDPfQpq7k54/pVNO/g9PguHoDhwO88zSYqNILQ295alsM0QX/tQ2L3ZyF 4pg+1TKAojfJk8/pOVMWC4PJJxhAMXeCNi/KZC3JHcFE+4P5zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAghSP41f4KIgNx9atAzgaTH/n/1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzc4OWY2NzAtNGNjMy0z MjQ4LWExZGUtOWYwZGEwMzU4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAorrsM4KnvJqeSdAJvjhvoaV62GiK/prNRjD6b1rN2AztbjT+mp2x1w UuRhOdAQZbpTKaFyZte9615o7xY8n4iCi5vAROsoLvbb95APGQi4WiFEOqt5X/w+ 1VOXx9q2+V+/ffIHNFOOdiXZs/OwBkis58Evpjk4PQ4WJgoU+fzDJsg+h74Nz0af u0UeD3AeAb250olWYLm1G8XoFmAIrDfbERHpQDFZ/6Ti36JZE47Ny5O2TIAmo3jm /vi3zfBog1M9KvLKSgaxCkCJDv0SMmPk1TjKZ8u2mOgBWBdCJfJtP4OKODCVZVxE 0/AI9fdoPOFCHJq6t0VegwGdsGhz+sg= -----END CERTIFICATE-----Generated at Tue Aug 26 18:06:24 2025 by rpki-client