$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b3b3530-568e-3a19-b56c-99f0f9f74866.roa File: 2b3b3530-568e-3a19-b56c-99f0f9f74866.roa (raw, json) Hash identifier: hmhZQAF7bb3RTS+M+Ewyf4amZyhqYr5S4h4l2wsrb34= Subject key identifier: 3F:CB:A5:E4:BF:D1:47:84:46:B6:68:5E:6F:DD:FC:90:1A:21:18:E1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584968B42A6F6C85C2049EEE4780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b3b3530-568e-3a19-b56c-99f0f9f74866.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 149440 IP address blocks: 23.27.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:2a:6f:6c:85:c2:04:9e:ee:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=1b16ce88-eae1-4e76-8494-c4b90b8fb2c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:60:ee:bf:06:4d:6e:0c:ac:6b:13:58:05:0a: 95:c6:6b:cf:d7:28:6e:79:58:60:a0:5e:77:8b:68: f8:83:3d:52:76:1b:80:72:74:c9:52:31:3d:62:b2: ad:90:97:be:c0:9f:1e:fb:24:31:47:57:93:54:8d: 97:41:30:7c:d0:f0:d0:bc:1a:9d:d8:22:01:e2:b0: ad:56:e1:62:bb:6b:7b:69:12:89:93:f7:a6:40:4b: 2d:5d:b8:21:b8:5d:2e:a5:1b:cb:9a:0a:ac:01:25: 55:95:01:42:07:ad:e1:9e:24:f1:59:65:f6:9a:0c: 92:2a:5e:86:e0:7c:9a:13:59:6c:f6:95:c3:01:be: c2:b2:39:c5:d9:1e:89:48:d8:0b:57:72:4f:d6:c5: 36:6e:e4:4c:72:54:9a:10:27:d9:b3:3e:f1:79:87: a9:7b:fc:6d:4d:68:4a:bb:ef:e5:d0:f5:b5:45:10: 92:ec:15:ab:2c:42:37:b4:f0:bd:3a:cc:9d:48:bb: 28:b3:53:72:08:01:5d:2c:10:d1:4a:2c:54:51:54: 6e:57:6a:e1:fe:b7:cd:96:fe:3d:66:12:2c:1c:a3: 75:1b:a3:7c:ee:46:cb:cb:08:42:38:ad:55:c1:1f: 08:1c:60:f8:bf:9e:c9:78:cd:ce:ab:43:96:3e:67: ef:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CB:A5:E4:BF:D1:47:84:46:B6:68:5E:6F:DD:FC:90:1A:21:18:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b3b3530-568e-3a19-b56c-99f0f9f74866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:4e:14:e3:4f:ef:a0:f7:a6:1c:ed:47:b2:ab:0b:64:18:c3: 60:fd:f0:e0:30:eb:45:a0:96:28:a9:96:b6:c6:69:87:1f:91: 59:46:ae:91:47:b1:4b:0b:02:9b:13:0b:3b:2c:6c:25:db:24: 14:02:77:84:09:6c:79:c4:3d:c0:d4:28:ef:57:af:47:b9:98: 73:ba:5e:a9:d2:9b:09:20:74:ff:b4:98:90:cd:6e:a6:00:58: 19:28:38:a7:53:26:79:70:62:f7:3c:4d:89:2a:19:3c:83:ad: b6:22:bb:2e:ca:b7:d0:b0:06:0f:de:52:28:97:67:29:92:40: 10:dc:2f:9b:69:dd:1d:e8:57:e0:e4:75:8d:32:c2:ab:06:de: 06:08:10:4f:03:23:77:d3:8a:1f:33:bf:89:ae:17:07:5b:b6: 22:d6:7c:f5:8e:3a:51:94:7a:6b:0e:88:20:e7:ad:a7:48:5c: f7:2b:7a:4c:e0:05:7c:0d:60:6d:3c:0c:ce:e3:f3:3b:e2:93: 26:a4:35:22:f7:f2:bb:4d:df:dc:6d:4d:2a:c3:1a:c3:cf:e2: 5f:af:ee:1f:67:93:fd:30:ed:e8:02:69:0a:e5:e7:51:da:2d: ba:4d:7f:82:36:b6:ab:0a:16:a1:27:e6:79:05:c7:16:10:54: 69:56:a1:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCpvbIXCBJ7uR4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk MWIxNmNlODgtZWFlMS00ZTc2LTg0OTQtYzRiOTBiOGZiMmMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mDuvwZNbgysaxNYBQqVxmvP1yhueVhgoF53 i2j4gz1SdhuAcnTJUjE9YrKtkJe+wJ8e+yQxR1eTVI2XQTB80PDQvBqd2CIB4rCt VuFiu2t7aRKJk/emQEstXbghuF0upRvLmgqsASVVlQFCB63hniTxWWX2mgySKl6G 4HyaE1ls9pXDAb7CsjnF2R6JSNgLV3JP1sU2buRMclSaECfZsz7xeYepe/xtTWhK u+/l0PW1RRCS7BWrLEI3tPC9OsydSLsos1NyCAFdLBDRSixUUVRuV2rh/rfNlv49 ZhIsHKN1G6N87kbLywhCOK1VwR8IHGD4v57JeM3Oq0OWPmfv/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/LpeS/0UeERrZoXm/d/JAaIRjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmIzYjM1MzAtNTY4ZS0z YTE5LWI1NmMtOTlmMGY5Zjc0ODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpOFONP76D3phztR7KrC2QYw2D98OAw60WgliiplrbGaYcfkVlGrpFH sUsLApsTCzssbCXbJBQCd4QJbHnEPcDUKO9Xr0e5mHO6XqnSmwkgdP+0mJDNbqYA WBkoOKdTJnlwYvc8TYkqGTyDrbYiuy7Kt9CwBg/eUiiXZymSQBDcL5tp3R3oV+Dk dY0ywqsG3gYIEE8DI3fTih8zv4muFwdbtiLWfPWOOlGUemsOiCDnradIXPcrekzg BXwNYG08DM7j8zvikyakNSL38rtN39xtTSrDGsPP4l+v7h9nk/0w7egCaQrl51Ha LbpNf4I2tqsKFqEn5nkFxxYQVGlWocg= -----END CERTIFICATE-----Generated at Sat Apr 5 04:33:56 2025 by rpki-client