$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa File: b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa (raw, json) Hash identifier: 78FnRZB+ehM67BJ4PfZRTVV8G8GWFFQlPvCh0eeAAu4= Subject key identifier: 18:96:3A:11:18:BB:67:D4:78:4B:70:B4:4F:09:0D:FA:32:D8:F0:AE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD3A128544DED1EAF0C2133D0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 49770 IP address blocks: 23.27.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:28:54:4d:ed:1e:af:0c:21:33:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=d6b94018-f156-4f11-8e57-a6fb586bd5e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e3:e9:7e:f3:05:38:ed:4f:bc:5a:9d:d3:b1: 73:8d:59:af:16:ad:00:7d:d3:e7:14:bd:04:38:53: 35:7f:7a:a5:da:37:18:ff:9e:b8:ad:de:76:80:b2: 40:06:5c:80:a7:89:4d:59:c3:45:a2:15:9e:7d:fa: a1:fa:67:79:7b:4d:6b:67:3e:ea:78:14:4f:b3:ef: 0a:ba:1f:c6:90:2a:f9:c8:39:33:90:db:59:c6:40: 98:3d:6f:8c:7e:73:55:ab:a4:7f:5b:48:7e:c9:b9: a6:25:83:91:5e:8e:aa:cd:1f:a7:29:10:b0:1e:86: 30:50:96:82:d7:5e:f7:38:dc:29:81:9c:ef:5d:ab: 4f:38:dd:d6:3e:f2:c2:65:fb:67:a4:d0:29:9d:45: 58:9d:28:d5:56:c0:3f:c3:8e:9c:43:39:a3:60:07: af:a9:de:ae:9c:42:bd:5e:c0:87:e1:d7:5a:32:f3: bb:a0:80:b1:2f:91:7e:93:85:04:a5:15:f8:5f:af: 25:e1:17:0d:60:58:e1:07:a4:3c:aa:4f:53:13:68: 45:51:71:d9:b5:f8:c4:7b:02:a1:a1:09:65:11:06: 46:3e:ec:19:d6:f4:a3:1e:80:fa:26:50:bf:ed:60: b0:64:84:36:6b:50:78:d3:fd:69:a4:ff:56:2e:11: c6:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:96:3A:11:18:BB:67:D4:78:4B:70:B4:4F:09:0D:FA:32:D8:F0:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b0fa1258-8a40-395c-8ce3-c8a5f01f304f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1b:03:53:41:a2:eb:28:2e:d9:61:b1:01:5d:1a:03:02:4c: c8:62:84:6a:35:6b:06:e1:b8:75:68:8a:7e:80:b9:15:0d:76: 88:e8:bc:2f:02:d1:db:0b:f1:49:72:f3:cb:8a:6e:5a:1e:a1: b3:1e:a9:aa:ea:d8:0d:b9:ca:92:b5:bd:cf:24:1d:71:e3:39: 86:bf:ed:8e:53:48:6f:9d:f3:24:d7:3a:da:48:72:12:b7:77: 60:d4:87:0e:29:db:af:fa:38:b0:33:2e:7f:1f:12:15:83:ef: 56:da:0a:cc:4b:0c:45:95:fd:a8:b2:55:e6:b3:cf:90:07:9b: 4b:9a:b2:7a:ee:ee:52:0f:e8:e3:fe:b2:17:b2:93:59:30:bb: 45:ed:58:2f:08:0f:98:66:e5:a2:4f:b5:cb:97:4a:36:0c:c3: db:8e:af:d5:40:a3:8a:3e:f1:dd:49:b2:6e:95:21:36:1b:58: bb:1d:e8:ec:07:18:f0:1e:c4:be:91:5b:4d:de:8b:32:9f:83: cd:b3:7b:f9:8c:35:77:78:42:8b:be:ae:64:bb:e0:be:8f:ad: 95:42:f9:84:23:08:85:4d:b0:d7:40:74:df:00:3f:f0:c2:ad: 8d:f4:7b:26:61:56:08:d4:61:2b:71:f4:0a:d6:6a:79:b6:47: e6:f4:e2:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToShUTe0erwwhM9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDZiOTQwMTgtZjE1Ni00ZjExLThlNTctYTZmYjU4NmJkNWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+PpfvMFOO1PvFqd07FzjVmvFq0AfdPnFL0E OFM1f3ql2jcY/564rd52gLJABlyAp4lNWcNFohWeffqh+md5e01rZz7qeBRPs+8K uh/GkCr5yDkzkNtZxkCYPW+MfnNVq6R/W0h+ybmmJYORXo6qzR+nKRCwHoYwUJaC 1173ONwpgZzvXatPON3WPvLCZftnpNApnUVYnSjVVsA/w46cQzmjYAevqd6unEK9 XsCH4ddaMvO7oICxL5F+k4UEpRX4X68l4RcNYFjhB6Q8qk9TE2hFUXHZtfjEewKh oQllEQZGPuwZ1vSjHoD6JlC/7WCwZIQ2a1B40/1ppP9WLhHGxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBiWOhEYu2fUeEtwtE8JDfoy2PCuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjBmYTEyNTgtOGE0MC0z OTVjLThjZTMtYzhhNWYwMWYzMDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxu9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG4bA1NBousoLtlhsQFdGgMCTMhihGo1awbhuHVoin6AuRUNdojovC8C 0dsL8Uly88uKbloeobMeqarq2A25ypK1vc8kHXHjOYa/7Y5TSG+d8yTXOtpIchK3 d2DUhw4p26/6OLAzLn8fEhWD71baCsxLDEWV/aiyVeazz5AHm0uasnru7lIP6OP+ sheyk1kwu0XtWC8ID5hm5aJPtcuXSjYMw9uOr9VAo4o+8d1Jsm6VITYbWLsd6OwH GPAexL6RW03eizKfg82ze/mMNXd4Qou+rmS74L6PrZVC+YQjCIVNsNdAdN8AP/DC rY30eyZhVgjUYStx9ArWanm2R+b04rg= -----END CERTIFICATE-----Generated at Sat Aug 23 17:34:23 2025 by rpki-client