$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1363c336-c5ef-37cf-b7b5-88cc5c648909.roa File: 1363c336-c5ef-37cf-b7b5-88cc5c648909.roa (raw, json) Hash identifier: JWzdiC90330CNSa7TkdyHnES65ErpQr+Dy3jvZJboak= Subject key identifier: AD:C8:0C:FC:9F:1E:FE:0E:24:EE:43:72:DA:F0:D1:9A:33:36:3E:81 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D641197CA1EFCF6228233180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1363c336-c5ef-37cf-b7b5-88cc5c648909.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 7018 IP address blocks: 23.27.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:19:7c:a1:ef:cf:62:28:23:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=1b77bfa7-6596-48aa-a751-04e9edc3a611 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:d7:de:5b:54:87:e4:86:e4:03:46:ba:4b: 94:f2:22:2c:9f:4a:59:10:4f:6d:c6:46:97:c6:7f: a0:32:5f:ef:61:62:e7:e6:b7:77:8c:35:4b:63:12: a0:e4:ea:2d:ca:e3:4b:3d:62:0f:2b:e3:59:b3:66: d4:71:2b:e6:ff:90:7a:91:a1:ba:07:af:0b:ee:74: de:df:2a:d7:a3:7f:15:af:f9:ff:41:84:7e:ff:f9: c7:f7:0b:50:a7:b5:56:ea:0c:2f:37:16:d5:c4:1d: 31:24:93:8a:a3:84:3e:bf:09:6c:1f:fd:4b:44:f7: f0:34:6e:64:df:76:94:7c:16:82:5a:f0:2f:41:a2: b3:e6:0c:89:e8:ba:d4:93:e7:0e:43:04:0f:d4:f5: e7:cb:89:27:a0:63:4e:4d:8b:80:62:b1:0a:b3:e7: 2f:c2:ef:eb:1c:59:ed:d6:a3:07:90:ae:93:47:8d: 28:74:c9:22:48:18:51:6d:9d:48:37:04:86:cf:18: 2b:ed:83:13:b1:ae:ba:eb:60:fe:b8:d0:02:1a:82: 94:9d:5d:5a:e1:9b:32:28:29:37:2a:86:01:58:94: b6:03:36:66:82:50:a3:17:93:54:99:7a:20:c5:da: c5:70:ea:a7:5e:2a:ba:80:c1:21:cf:88:3c:9c:69: 5c:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C8:0C:FC:9F:1E:FE:0E:24:EE:43:72:DA:F0:D1:9A:33:36:3E:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1363c336-c5ef-37cf-b7b5-88cc5c648909.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:56:84:8f:4b:71:fd:c2:eb:09:d9:a0:ef:8d:73:a3:40:0a: 53:65:f5:e1:22:c3:32:8d:2e:bb:62:9b:eb:46:42:43:45:99: c4:c8:bc:c3:ca:a6:3d:8f:e2:ca:59:03:b3:33:46:48:8c:f8: e2:6b:74:b1:4f:5f:e3:a3:d8:85:0b:41:93:91:e4:97:da:28: d1:1f:86:21:81:19:0b:19:a8:75:86:77:7c:c4:ab:8b:d8:e7: 79:5a:93:45:83:0a:14:45:41:33:f3:ee:8b:3c:9d:31:74:2c: 26:c3:36:2f:cf:64:95:17:59:dd:ba:a5:7d:12:4d:47:e0:3e: 72:84:aa:cc:79:9b:4a:fd:26:7c:b8:82:b0:ba:4f:d5:ba:4f: 2c:3a:e0:19:7c:19:04:e7:92:7f:e6:d7:4c:af:54:92:87:bd: 60:ad:d6:73:69:05:4e:c5:23:a4:08:46:75:12:9e:6b:a7:2f: f6:d5:d7:b2:2f:b6:48:41:51:f6:55:2a:7c:27:de:be:dd:35: 0b:81:77:74:b7:f5:bc:c5:44:74:62:32:b3:57:2c:cc:46:28: d8:66:10:19:b8:27:9e:6b:39:27:e2:70:d5:7a:d6:4b:5f:3d: ae:f8:2a:e8:fd:5e:95:44:c0:a9:ad:b6:35:b1:94:39:32:c8: d2:27:c9:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQRl8oe/PYigjMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk MWI3N2JmYTctNjU5Ni00OGFhLWE3NTEtMDRlOWVkYzNhNjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcTX3ltUh+SG5ANGukuU8iIsn0pZEE9txkaX xn+gMl/vYWLn5rd3jDVLYxKg5OotyuNLPWIPK+NZs2bUcSvm/5B6kaG6B68L7nTe 3yrXo38Vr/n/QYR+//nH9wtQp7VW6gwvNxbVxB0xJJOKo4Q+vwlsH/1LRPfwNG5k 33aUfBaCWvAvQaKz5gyJ6LrUk+cOQwQP1PXny4knoGNOTYuAYrEKs+cvwu/rHFnt 1qMHkK6TR40odMkiSBhRbZ1INwSGzxgr7YMTsa6662D+uNACGoKUnV1a4ZsyKCk3 KoYBWJS2AzZmglCjF5NUmXogxdrFcOqnXiq6gMEhz4g8nGlcEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3IDPyfHv4OJO5Dctrw0ZozNj6BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTM2M2MzMzYtYzVlZi0z N2NmLWI3YjUtODhjYzVjNjQ4OTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZWhI9Lcf3C6wnZoO+Nc6NAClNl9eEiwzKNLrtim+tGQkNFmcTIvMPK pj2P4spZA7MzRkiM+OJrdLFPX+Oj2IULQZOR5JfaKNEfhiGBGQsZqHWGd3zEq4vY 53lak0WDChRFQTPz7os8nTF0LCbDNi/PZJUXWd26pX0STUfgPnKEqsx5m0r9Jny4 grC6T9W6Tyw64Bl8GQTnkn/m10yvVJKHvWCt1nNpBU7FI6QIRnUSnmunL/bV17Iv tkhBUfZVKnwn3r7dNQuBd3S39bzFRHRiMrNXLMxGKNhmEBm4J55rOSficNV61ktf Pa74Kuj9XpVEwKmttjWxlDkyyNInyZA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:06 2025 by rpki-client