$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27e978ac-8581-3e54-9ec5-a4cbd3398bb4.roa File: 27e978ac-8581-3e54-9ec5-a4cbd3398bb4.roa (raw, json) Hash identifier: PHteHSgzPenJKVieGWijh7YU7UFoRmySrSJ0g7nM5Bw= Subject key identifier: 67:E0:4B:50:82:D4:4C:5C:D3:FD:85:7B:7D:FF:73:EF:EE:77:AC:01 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B729C2F8D763DF4EC8D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27e978ac-8581-3e54-9ec5-a4cbd3398bb4.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 23.27.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:72:9c:2f:8d:76:3d:f4:ec:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=9041c700-09ab-4560-8356-bd688e445612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:d4:66:8a:77:46:39:ee:af:bf:e2:73:4c: bb:20:3b:78:b4:62:c6:08:b8:70:c9:17:b7:7a:5a: ff:8c:47:e7:6c:a8:4b:ad:69:10:e4:36:1b:91:d2: 64:fc:14:a3:93:06:b6:74:3e:ad:01:01:c1:43:cd: 82:13:89:3b:37:d3:d9:24:64:1e:5a:f0:ef:d4:c5: b7:8e:79:76:2b:7c:f5:3f:db:50:c8:d2:be:d8:8a: 3c:d0:20:2e:dc:da:7d:6f:f9:e9:e7:50:30:37:41: 81:2b:b6:06:b7:97:bb:1e:c0:de:aa:93:a1:a6:21: 5f:98:ff:28:c7:c6:61:7a:13:55:c8:1f:c9:8f:f6: c9:ad:7b:df:8b:c5:95:41:77:d8:60:c6:ce:08:34: d9:94:3f:a9:cf:89:af:73:39:49:87:2d:c8:42:51: 1c:9f:3f:f4:cd:11:1d:37:49:5d:90:05:d9:35:88: 0f:41:a2:c1:e3:44:7f:5f:8f:9e:9a:2c:6d:af:8c: c6:ea:21:1b:6d:71:bb:1c:c6:87:8a:d7:d2:23:02: 96:39:22:c1:38:60:19:9e:2f:e8:da:ad:56:16:61: bb:d2:a0:26:a3:85:a8:69:c8:ba:e7:1e:e1:80:e0: 30:30:dd:41:b8:e0:5f:51:8b:63:7e:08:67:40:f0: 93:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:E0:4B:50:82:D4:4C:5C:D3:FD:85:7B:7D:FF:73:EF:EE:77:AC:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/27e978ac-8581-3e54-9ec5-a4cbd3398bb4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:1a:0e:62:91:50:af:f3:44:71:ee:55:57:2a:d5:e0:ff:f9: 68:cc:2e:1d:4e:0f:54:fc:39:62:1b:06:2e:7c:34:0e:9a:a1: 42:02:1d:3d:c4:3a:25:4d:91:2d:70:38:15:cb:3b:0a:0b:d6: 20:c6:12:32:cc:e4:7c:43:47:85:b7:87:eb:f4:86:1d:1c:2d: ae:79:51:67:dc:9e:f2:14:48:2e:d6:b6:e4:4a:7a:33:0c:aa: 94:c4:fd:07:78:f0:87:f5:2e:15:1b:da:7f:61:f3:85:bf:ac: b9:a5:29:7b:e7:93:1f:36:68:61:65:1b:2e:98:a9:56:04:ae: b9:4e:79:19:3e:f2:4f:32:22:c6:66:7e:08:3c:a0:14:1e:04: 49:1d:fe:e7:55:17:3d:ed:5c:2f:9a:a7:4d:35:ed:28:b6:0f: 01:0c:2d:8d:af:eb:b0:5a:96:ee:ff:06:82:21:0c:30:9a:b7: 1c:03:de:ef:50:eb:f7:dd:68:07:bf:ac:eb:87:3f:30:73:5f: 1c:cc:00:78:83:df:ce:ad:77:01:2e:e3:af:4e:57:b3:31:25: 96:a4:43:4c:07:a6:fe:78:17:5a:b7:d2:b9:bb:46:1e:f0:d5: 1e:d0:92:1a:ca:0e:05:32:3b:e8:30:46:f6:69:ac:93:fa:cd: b9:52:5c:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3KcL412PfTsjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OTA0MWM3MDAtMDlhYi00NTYwLTgzNTYtYmQ2ODhlNDQ1NjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0A/UZop3Rjnur7/ic0y7IDt4tGLGCLhwyRe3 elr/jEfnbKhLrWkQ5DYbkdJk/BSjkwa2dD6tAQHBQ82CE4k7N9PZJGQeWvDv1MW3 jnl2K3z1P9tQyNK+2Io80CAu3Np9b/np51AwN0GBK7YGt5e7HsDeqpOhpiFfmP8o x8ZhehNVyB/Jj/bJrXvfi8WVQXfYYMbOCDTZlD+pz4mvczlJhy3IQlEcnz/0zREd N0ldkAXZNYgPQaLB40R/X4+emixtr4zG6iEbbXG7HMaHitfSIwKWOSLBOGAZni/o 2q1WFmG70qAmo4Woaci65x7hgOAwMN1BuOBfUYtjfghnQPCTAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfgS1CC1Exc0/2Fe33/c+/ud6wBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjdlOTc4YWMtODU4MS0z ZTU0LTllYzUtYTRjYmQzMzk4YmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4aDmKRUK/zRHHuVVcq1eD/+WjMLh1OD1T8OWIbBi58NA6aoUICHT3E OiVNkS1wOBXLOwoL1iDGEjLM5HxDR4W3h+v0hh0cLa55UWfcnvIUSC7WtuRKejMM qpTE/Qd48If1LhUb2n9h84W/rLmlKXvnkx82aGFlGy6YqVYErrlOeRk+8k8yIsZm fgg8oBQeBEkd/udVFz3tXC+ap0017Si2DwEMLY2v67Balu7/BoIhDDCatxwD3u9Q 6/fdaAe/rOuHPzBzXxzMAHiD386tdwEu469OV7MxJZakQ0wHpv54F1q30rm7Rh7w 1R7QkhrKDgUyO+gwRvZprJP6zblSXFc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:58:41 2025 by rpki-client