$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22d1919e-52b9-3dd2-9d12-fc589df2a770.roa File: 22d1919e-52b9-3dd2-9d12-fc589df2a770.roa (raw, json) Hash identifier: yJIEolulfcaLDNy8wpgR/O1eqg70MrB5g3IEfTKdQuk= Subject key identifier: AE:7A:1A:89:05:B3:4D:95:94:79:0E:4E:A6:E0:7F:9C:FD:76:76:61 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABC18479726FE10F005C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22d1919e-52b9-3dd2-9d12-fc589df2a770.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44477 IP address blocks: 23.27.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c1:84:79:72:6f:e1:0f:00:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=60cd1042-3f8c-4fb5-a00a-3de1d0eca403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ed:81:1f:52:7b:37:5f:19:c0:77:fe:d7:c2: 53:f4:7a:18:de:2f:60:80:b4:e7:d6:e5:58:9f:03: 93:b8:7c:6d:f7:a9:1e:2d:63:09:50:48:96:ee:69: d2:8e:8c:34:88:d2:49:43:be:cb:f5:fe:ca:30:a1: 16:02:bc:ff:fa:27:0b:dc:12:2e:1c:e7:8a:b6:a6: bc:5e:0a:b9:51:21:58:2d:c5:17:d3:30:cb:21:df: a7:05:76:b9:e3:aa:f9:06:8f:8c:f7:c9:e5:ac:16: 32:4a:e4:ed:76:8d:3e:d6:99:d8:17:13:86:bb:7f: ce:d1:fe:dc:77:2c:41:ad:13:30:7c:af:37:2f:81: 4e:8b:dc:3e:99:34:af:95:79:74:2e:e3:fd:b5:e9: c2:d7:fa:99:9a:d9:89:a3:c7:33:8f:9c:4c:59:ef: da:e7:32:67:cc:e2:b5:55:e7:dc:a4:5d:ce:6b:0e: be:0b:f3:69:d0:f2:58:62:8c:5c:d2:3a:50:10:82: e3:71:74:b6:3a:61:37:3f:42:84:5d:2b:0d:b9:13: f3:70:0d:f8:38:30:95:1e:de:ab:6a:4c:94:30:06: f3:12:20:0f:a9:07:21:5c:9b:93:56:e5:4a:30:d9: 05:25:b3:74:f3:d0:e5:04:a1:a5:bc:d4:3c:2f:33: 04:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7A:1A:89:05:B3:4D:95:94:79:0E:4E:A6:E0:7F:9C:FD:76:76:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/22d1919e-52b9-3dd2-9d12-fc589df2a770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:4c:d3:d5:54:e2:bc:16:30:ff:cf:65:ad:ef:7a:0e:b7:81: 93:5f:11:d7:a9:9f:75:f2:38:23:b6:57:1d:4b:b5:03:67:9b: 1b:e5:b6:b7:47:8e:23:38:6b:53:26:d3:82:92:3e:49:21:24: 9a:d4:32:94:b4:89:e6:d2:c2:4d:c1:83:dd:40:a8:fd:5c:28: 86:7b:42:21:18:98:f2:15:71:ac:f8:dc:33:49:c4:dc:e1:07: 00:fa:0e:13:24:39:11:8b:29:76:08:a8:57:fd:0f:5d:01:fc: 66:fe:37:b0:be:12:8f:3e:8c:a7:18:a6:b3:b8:d0:57:aa:72: 56:30:09:a7:fc:3e:30:b1:42:10:b9:c7:f6:8d:8c:a7:d1:7a: 21:6c:05:cf:fc:c3:b7:65:3a:46:40:7b:0f:c9:85:c7:7a:8e: 77:ed:df:85:1c:2c:2b:b9:c1:a7:70:2d:01:03:72:a7:11:bb: cc:a4:5f:d9:ef:17:02:b3:77:99:be:8e:b7:e1:e1:78:22:15: 64:91:af:10:bf:ac:55:7a:ac:f5:ac:86:9f:08:fe:f1:66:90: 1e:42:fe:ef:a3:ab:f6:d8:7e:6f:1b:55:3e:94:f6:9e:55:a5: 69:96:d2:2c:52:34:7d:63:94:f9:22:24:a3:1e:4a:84:9f:7c: fc:4a:a2:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8GEeXJv4Q8AXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk NjBjZDEwNDItM2Y4Yy00ZmI1LWEwMGEtM2RlMWQwZWNhNDAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1O2BH1J7N18ZwHf+18JT9HoY3i9ggLTn1uVY nwOTuHxt96keLWMJUEiW7mnSjow0iNJJQ77L9f7KMKEWArz/+icL3BIuHOeKtqa8 Xgq5USFYLcUX0zDLId+nBXa546r5Bo+M98nlrBYySuTtdo0+1pnYFxOGu3/O0f7c dyxBrRMwfK83L4FOi9w+mTSvlXl0LuP9tenC1/qZmtmJo8czj5xMWe/a5zJnzOK1 VefcpF3Oaw6+C/Np0PJYYoxc0jpQEILjcXS2OmE3P0KEXSsNuRPzcA34ODCVHt6r akyUMAbzEiAPqQchXJuTVuVKMNkFJbN089DlBKGlvNQ8LzMEqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK56GokFs02VlHkOTqbgf5z9dnZhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjJkMTkxOWUtNTJiOS0z ZGQyLTlkMTItZmM1ODlkZjJhNzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINM09VU4rwWMP/PZa3veg63gZNfEdepn3XyOCO2Vx1LtQNnmxvltrdH jiM4a1Mm04KSPkkhJJrUMpS0iebSwk3Bg91AqP1cKIZ7QiEYmPIVcaz43DNJxNzh BwD6DhMkORGLKXYIqFf9D10B/Gb+N7C+Eo8+jKcYprO40FeqclYwCaf8PjCxQhC5 x/aNjKfReiFsBc/8w7dlOkZAew/Jhcd6jnft34UcLCu5wadwLQEDcqcRu8ykX9nv FwKzd5m+jrfh4XgiFWSRrxC/rFV6rPWshp8I/vFmkB5C/u+jq/bYfm8bVT6U9p5V pWmW0ixSNH1jlPkiJKMeSoSffPxKok8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:00 2025 by rpki-client