$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5020ced7-ff99-3265-af5b-0a53b1efbe37.roa File: 5020ced7-ff99-3265-af5b-0a53b1efbe37.roa (raw, json) Hash identifier: a8ptd0ZFjjIPB55+t9PSgMVJneBqu2OZLq5gxVytCps= Subject key identifier: 42:E1:5B:D4:1A:48:71:E6:94:7A:E0:02:D0:56:4A:E9:01:2A:10:AC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A480AE001D676C9C69871C520 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5020ced7-ff99-3265-af5b-0a53b1efbe37.roa Signing time: Mon 23 Jun 2025 01:00:49 +0000 ROA not before: Mon 23 Jun 2025 01:00:49 +0000 ROA not after: Sun 21 Sep 2025 01:00:49 +0000 asID: 401152 IP address blocks: 23.27.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:48:0a:e0:01:d6:76:c9:c6:98:71:c5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 23 01:00:49 2025 GMT Not After : Sep 21 01:00:49 2025 GMT Subject: CN=bf60cc5a-0661-4359-98cd-1eb01ce08295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c4:2f:26:fb:88:d3:7d:4f:7b:e2:9a:21:6e: 67:2c:e4:3c:04:a6:82:61:c2:65:88:37:1c:0c:0a: 04:32:64:2b:89:89:0a:c4:27:c7:f8:5b:f8:1b:87: ac:00:02:7d:70:f5:28:83:ac:48:7f:7c:72:b3:e6: 6f:e1:86:a1:ef:a8:90:fd:5a:d1:a6:04:d8:92:c9: c7:af:14:b7:d0:c7:a9:3c:4b:92:05:42:6d:db:c6: 12:df:c9:fe:24:a6:28:d9:82:9d:2d:d2:ef:89:97: 60:20:75:73:f3:8e:81:78:bb:1e:aa:9e:30:cb:9d: 3b:cc:25:55:a7:7f:f6:3e:dc:fa:7f:f7:01:43:16: 04:11:c3:bc:2a:16:f7:97:b3:73:5e:32:09:fd:90: 95:de:c2:d5:be:4e:99:ca:1c:d3:c7:6a:ee:03:d7: ec:d4:9e:d4:66:3c:01:68:0c:f6:17:81:4e:2f:e5: 58:4d:e2:9e:75:13:1a:fd:b9:80:97:1b:5c:41:9f: eb:8f:44:1f:60:b4:db:90:cb:c0:d9:7b:c1:0c:86: 16:1f:40:b6:c6:67:ca:0e:92:5c:c6:45:7e:c8:d4: 6c:21:84:d1:61:25:a1:ff:c2:1c:ae:7a:53:18:e4: e8:bd:32:c1:cb:ae:23:e4:be:64:f4:9c:dd:ef:5a: e2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:E1:5B:D4:1A:48:71:E6:94:7A:E0:02:D0:56:4A:E9:01:2A:10:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5020ced7-ff99-3265-af5b-0a53b1efbe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:81:ac:df:fb:5a:1f:36:ff:0d:95:98:72:f8:22:3a:b8:2e: 32:fe:3a:47:04:40:23:70:c5:d7:7d:0f:eb:93:b7:58:8b:f6: 20:47:f1:63:51:ce:93:11:d9:82:6d:39:12:88:b1:49:79:72: 50:25:da:0a:3b:3d:e8:5e:3f:ba:3a:54:9c:3e:53:84:8d:6a: d6:29:0a:24:a7:4a:dc:a1:44:5c:aa:07:61:ea:47:12:c8:6f: 97:2a:00:7c:ef:0f:68:21:8f:66:28:4b:f7:3d:46:e5:b1:86: 86:39:7c:ca:b5:5a:0e:e0:6d:ec:da:47:a3:a1:f1:da:bc:15: 2a:88:39:bd:86:60:30:ca:02:fb:05:ac:31:58:00:f8:df:aa: c2:06:64:72:d8:60:fc:5f:3f:9b:e6:40:96:73:5a:8a:15:94: fb:5e:45:a4:4f:b9:e1:4a:3f:90:c1:08:c9:f2:d9:4d:c9:01: 5d:93:f3:cc:f5:25:f9:f9:61:5f:b5:1f:15:a8:0e:7c:6f:7a: be:19:fe:77:44:d5:88:8f:55:38:2a:fd:a8:49:22:29:2a:3a: 55:ea:c5:66:1c:3e:37:f0:75:02:54:16:43:8b:a3:e0:88:2b: 5b:0a:7f:0f:24:56:06:e1:42:f3:f4:72:18:07:48:e7:da:c4: e7:31:d8:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuAB1nbJxphxxSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk YmY2MGNjNWEtMDY2MS00MzU5LTk4Y2QtMWViMDFjZTA4Mjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQvJvuI031Pe+KaIW5nLOQ8BKaCYcJliDcc DAoEMmQriYkKxCfH+Fv4G4esAAJ9cPUog6xIf3xys+Zv4Yah76iQ/VrRpgTYksnH rxS30MepPEuSBUJt28YS38n+JKYo2YKdLdLviZdgIHVz846BeLseqp4wy507zCVV p3/2Ptz6f/cBQxYEEcO8Khb3l7NzXjIJ/ZCV3sLVvk6ZyhzTx2ruA9fs1J7UZjwB aAz2F4FOL+VYTeKedRMa/bmAlxtcQZ/rj0QfYLTbkMvA2XvBDIYWH0C2xmfKDpJc xkV+yNRsIYTRYSWh/8IcrnpTGOTovTLBy64j5L5k9Jzd71riCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELhW9QaSHHmlHrgAtBWSukBKhCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTAyMGNlZDctZmY5OS0z MjY1LWFmNWItMGE1M2IxZWZiZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+BrN/7Wh82/w2VmHL4Ijq4LjL+OkcEQCNwxdd9D+uTt1iL9iBH8WNR zpMR2YJtORKIsUl5clAl2go7PeheP7o6VJw+U4SNatYpCiSnStyhRFyqB2HqRxLI b5cqAHzvD2ghj2YoS/c9RuWxhoY5fMq1Wg7gbezaR6Oh8dq8FSqIOb2GYDDKAvsF rDFYAPjfqsIGZHLYYPxfP5vmQJZzWooVlPteRaRPueFKP5DBCMny2U3JAV2T88z1 Jfn5YV+1HxWoDnxver4Z/ndE1YiPVTgq/ahJIikqOlXqxWYcPjfwdQJUFkOLo+CI K1sKfw8kVgbhQvP0chgHSOfaxOcx2BU= -----END CERTIFICATE-----Generated at Sun Jun 29 16:34:06 2025 by rpki-client