$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa File: 97f069c2-c90c-374b-a8f1-76ce951c6844.roa (raw, json) Hash identifier: tukCzq2qMArc1aLAB4E6BBnrw5HajRFnCV0mQG8ogL0= Subject key identifier: 1A:69:47:AF:F5:A3:4D:B3:5F:85:E5:F5:70:1A:5A:70:25:1C:55:75 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A4DA03EB78A86EBA89DC8E400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa Signing time: Wed 25 Jun 2025 01:00:49 +0000 ROA not before: Wed 25 Jun 2025 01:00:49 +0000 ROA not after: Tue 23 Sep 2025 01:00:49 +0000 asID: 214238 IP address blocks: 23.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:4d:a0:3e:b7:8a:86:eb:a8:9d:c8:e4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 25 01:00:49 2025 GMT Not After : Sep 23 01:00:49 2025 GMT Subject: CN=f4d53c49-4bcd-48e5-8e6f-d2d88dc1c3d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:e4:bc:8e:ee:e7:b5:7e:9e:fb:81:ca:23: 18:71:93:a8:82:63:0c:ec:22:dd:8b:a9:ba:e8:4a: 36:ac:bd:a4:8c:14:96:d5:fb:8f:fa:4b:cc:66:56: a8:d0:7d:bc:0f:d7:7d:e4:37:9d:12:a5:50:4f:22: 91:f6:28:1b:1d:7b:8f:7c:66:16:26:23:b0:df:4c: ec:3b:e2:e2:f0:5d:48:62:a6:27:83:9e:04:7c:72: f6:8e:66:b7:2b:e9:31:ce:50:c1:15:04:be:d4:a6: 10:f9:f2:3e:1b:24:21:5d:eb:e6:bd:2b:31:2c:e5: 73:22:50:c1:b1:0b:84:fe:0c:f2:f5:1f:2e:c2:98: 2b:40:c7:19:59:35:a1:2c:c1:61:21:25:5e:31:c0: da:d2:0a:75:2f:f1:96:1a:b9:1e:a7:35:02:ec:a1: 30:ce:f6:7c:52:cc:3e:39:56:5f:8d:b0:77:b7:d9: e3:c3:d4:cb:13:ec:f8:e3:b8:23:09:a7:cc:91:98: d3:ab:4d:57:3d:f0:67:fa:51:db:08:71:66:ea:b1: b6:c3:6e:4d:1b:31:ca:f9:8b:c3:f6:7e:ee:51:98: 5a:04:fe:67:75:0d:bc:60:fb:90:05:df:1c:9a:5b: 19:0f:e7:12:0c:2e:44:28:53:1c:27:05:19:f6:f9: 2a:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:69:47:AF:F5:A3:4D:B3:5F:85:E5:F5:70:1A:5A:70:25:1C:55:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b4:af:a8:40:5c:55:92:28:3a:fb:10:ae:c3:84:ca:88:d4: aa:f0:a9:f9:57:9c:bb:88:27:b5:fa:f0:5c:9e:36:e1:42:6b: b1:ac:45:f7:79:1d:85:b6:76:6c:57:8a:71:62:03:43:5f:fc: 89:fe:77:42:ef:d4:b5:24:59:e8:62:e5:40:f3:70:40:ff:69: 53:26:32:3b:5a:8e:45:50:af:d4:7b:af:ad:76:9f:0b:95:5b: 06:19:4b:fe:bb:d1:01:12:bf:42:f4:e1:52:6b:ef:95:40:3a: 38:64:8f:5b:b7:12:a2:6a:6d:89:e5:fe:f7:fd:9a:ba:19:21: 8a:e8:e6:57:b7:65:d9:6f:53:15:c7:bd:dc:04:7d:f9:26:d6: 11:23:13:6b:17:01:9c:3c:92:96:28:df:15:c7:4a:1e:0a:9c: 5c:35:11:7f:49:f0:79:cc:de:8f:68:7a:1b:ea:9d:12:e0:58: f8:30:fd:71:ab:66:ff:98:9b:7f:49:c1:f3:d3:11:af:b8:78: 5c:84:69:d6:58:87:59:44:66:a3:d4:ea:91:41:26:c3:8c:66: c6:26:2a:c1:1b:0f:20:e6:e7:e8:8d:9b:60:ad:db:c7:a9:a4: b7:70:57:99:5c:dd:e9:db:43:c7:41:f3:e6:c4:04:4d:56:dc: b0:b2:d2:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNoD63iobrqJ3I5AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYyNTAxMDA0OVoXDTI1MDkyMzAxMDA0OVowLzEtMCsGA1UEAxMk ZjRkNTNjNDktNGJjZC00OGU1LThlNmYtZDJkODhkYzFjM2QzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBLkvI7u57V+nvuByiMYcZOogmMM7CLdi6m6 6Eo2rL2kjBSW1fuP+kvMZlao0H28D9d95DedEqVQTyKR9igbHXuPfGYWJiOw30zs O+Li8F1IYqYng54EfHL2jma3K+kxzlDBFQS+1KYQ+fI+GyQhXevmvSsxLOVzIlDB sQuE/gzy9R8uwpgrQMcZWTWhLMFhISVeMcDa0gp1L/GWGrkepzUC7KEwzvZ8Usw+ OVZfjbB3t9njw9TLE+z447gjCafMkZjTq01XPfBn+lHbCHFm6rG2w25NGzHK+YvD 9n7uUZhaBP5ndQ28YPuQBd8cmlsZD+cSDC5EKFMcJwUZ9vkqDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBppR6/1o02zX4Xl9XAaWnAlHFV1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTdmMDY5YzItYzkwYy0z NzRiLWE4ZjEtNzZjZTk1MWM2ODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+0r6hAXFWSKDr7EK7DhMqI1KrwqflXnLuIJ7X68FyeNuFCa7GsRfd5 HYW2dmxXinFiA0Nf/In+d0Lv1LUkWehi5UDzcED/aVMmMjtajkVQr9R7r612nwuV WwYZS/670QESv0L04VJr75VAOjhkj1u3EqJqbYnl/vf9mroZIYro5le3ZdlvUxXH vdwEffkm1hEjE2sXAZw8kpYo3xXHSh4KnFw1EX9J8HnM3o9oehvqnRLgWPgw/XGr Zv+Ym39JwfPTEa+4eFyEadZYh1lEZqPU6pFBJsOMZsYmKsEbDyDm5+iNm2Ct28ep pLdwV5lc3enbQ8dB8+bEBE1W3LCy0oo= -----END CERTIFICATE-----Generated at Sun Jun 29 16:22:28 2025 by rpki-client