$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9e61fa-983e-3190-8dcd-2ecd0eb97f07.roa File: 2d9e61fa-983e-3190-8dcd-2ecd0eb97f07.roa (raw, json) Hash identifier: xR0OifGmdqhlVsYGaN+x7D+J5o/2xrM90vFJShy4uhg= Subject key identifier: 60:BD:24:34:B8:35:AA:92:C9:F3:89:8C:F6:22:55:0E:94:0E:36:89 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848FEBBD6CE76CAC3D0E71BDB00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9e61fa-983e-3190-8dcd-2ecd0eb97f07.roa Signing time: Tue 25 Feb 2025 02:00:39 +0000 ROA not before: Tue 25 Feb 2025 02:00:39 +0000 ROA not after: Mon 26 May 2025 01:00:39 +0000 asID: 36829 IP address blocks: 23.27.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 05 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fe:bb:d6:ce:76:ca:c3:d0:e7:1b:db:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 25 02:00:39 2025 GMT Not After : May 26 01:00:39 2025 GMT Subject: CN=91a3dbde-051a-4175-b4f8-51b13a9d4d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:c9:83:fe:c5:01:66:35:50:07:4a:1e:dd: 15:d3:40:69:c9:b3:31:e1:a7:aa:38:a5:88:30:15: c6:f0:e7:1a:41:0d:91:8e:c7:01:5a:1f:01:22:e1: ad:2c:b1:4a:59:e3:18:e3:76:62:9c:08:10:46:e9: 6b:84:6b:be:4e:5d:38:66:77:98:64:93:f5:70:9c: 29:3a:8b:b4:62:d4:40:44:e4:a3:7e:8b:7d:ec:5f: ce:71:f1:da:04:d1:f4:10:fa:e2:ce:21:dd:fc:8f: 70:0f:6d:55:5b:cc:5d:9d:0b:0a:f1:29:34:ca:49: b3:40:a7:96:38:c7:7a:e6:80:20:14:12:22:c5:0a: eb:60:a2:3e:e3:38:9d:b7:88:fb:b9:47:40:b5:4e: 1e:21:11:72:35:6e:f2:65:0a:73:66:ff:fe:18:63: d9:5b:00:3e:91:a5:27:40:93:74:25:0c:00:f0:5a: b4:4b:e2:9b:3b:cc:89:0e:41:ac:08:6c:89:74:1c: 3b:d6:a0:79:47:be:88:15:9b:00:1f:ca:ca:9f:89: 06:ad:14:b7:22:4a:b3:66:79:4c:30:05:64:81:41: 02:74:63:ea:e8:34:de:4b:78:ad:2f:97:af:fd:bb: 6a:7e:b1:8f:ca:b9:89:dc:1f:4d:09:54:1c:67:2c: c2:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:BD:24:34:B8:35:AA:92:C9:F3:89:8C:F6:22:55:0E:94:0E:36:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d9e61fa-983e-3190-8dcd-2ecd0eb97f07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:7e:79:ea:cb:46:e5:6a:a3:cb:ed:57:1b:bb:e4:ef:7c:f0: 73:d1:51:83:e0:57:9f:dc:7a:d8:c0:9e:85:8d:a5:46:b5:12: ad:30:53:c2:4d:5e:5d:e6:1d:36:37:c0:82:53:3c:9e:4a:3a: 85:e7:1e:94:b3:21:28:28:53:e1:51:4f:be:50:75:db:b5:27: a6:92:9b:ed:65:e8:a9:5c:cb:6c:b9:a6:4d:04:d7:aa:06:d8: d7:29:c0:bb:9e:d5:51:de:06:67:80:4d:40:f8:24:d2:a5:2b: b7:90:17:05:61:f9:e4:1d:44:9a:f6:7e:64:cf:68:c3:ff:95: b1:1d:60:e7:a4:3e:a5:84:fe:cc:5c:7d:4d:a8:e6:41:a0:a8: 65:44:1c:8e:10:42:b4:df:1e:4c:64:d9:95:ed:4e:ae:6f:96: 9c:53:ff:4f:ce:86:0f:ca:c0:59:bc:e9:d1:2e:6a:2f:a7:08: 1a:d9:59:9f:83:24:6c:97:44:c6:e2:19:c5:0c:a5:6f:2c:5d: 47:b8:0a:42:b1:3d:7b:26:d6:82:a1:5a:d7:89:c6:5a:95:0b: 8d:30:8f:18:fa:2a:f9:e4:e9:a9:df:5d:36:8d:e1:7a:d1:c7: 35:fd:af:be:b7:97:6b:3f:6f:a0:a9:d8:94:02:cb:3b:ab:da: af:99:b3:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj+u9bOdsrD0Ocb2wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyNTAyMDAzOVoXDTI1MDUyNjAxMDAzOVowLzEtMCsGA1UEAxMk OTFhM2RiZGUtMDUxYS00MTc1LWI0ZjgtNTFiMTNhOWQ0ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz7Jg/7FAWY1UAdKHt0V00BpybMx4aeqOKWI MBXG8OcaQQ2RjscBWh8BIuGtLLFKWeMY43ZinAgQRulrhGu+Tl04ZneYZJP1cJwp Oou0YtRAROSjfot97F/OcfHaBNH0EPriziHd/I9wD21VW8xdnQsK8Sk0ykmzQKeW OMd65oAgFBIixQrrYKI+4zidt4j7uUdAtU4eIRFyNW7yZQpzZv/+GGPZWwA+kaUn QJN0JQwA8Fq0S+KbO8yJDkGsCGyJdBw71qB5R76IFZsAH8rKn4kGrRS3IkqzZnlM MAVkgUECdGPq6DTeS3itL5ev/btqfrGPyrmJ3B9NCVQcZyzCDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGC9JDS4NaqSyfOJjPYiVQ6UDjaJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmQ5ZTYxZmEtOTgzZS0z MTkwLThkY2QtMmVjZDBlYjk3ZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGx+eerLRuVqo8vtVxu75O988HPRUYPgV5/cetjAnoWNpUa1Eq0wU8JN Xl3mHTY3wIJTPJ5KOoXnHpSzISgoU+FRT75Qddu1J6aSm+1l6Klcy2y5pk0E16oG 2NcpwLue1VHeBmeATUD4JNKlK7eQFwVh+eQdRJr2fmTPaMP/lbEdYOekPqWE/sxc fU2o5kGgqGVEHI4QQrTfHkxk2ZXtTq5vlpxT/0/Ohg/KwFm86dEuai+nCBrZWZ+D JGyXRMbiGcUMpW8sXUe4CkKxPXsm1oKhWteJxlqVC40wjxj6Kvnk6anfXTaN4XrR xzX9r763l2s/b6Cp2JQCyzur2q+Zs6s= -----END CERTIFICATE-----Generated at Fri Apr 4 16:33:29 2025 by rpki-client