$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa File: 5acb3e17-f281-32e2-88a7-24f1b9182943.roa (raw, json) Hash identifier: spTiVhsvfIEttdhElF+lzk8AN4YRgGfnnediuHBrTVs= Subject key identifier: 9F:02:15:62:30:DD:86:20:F3:A5:84:AF:26:AE:A6:4D:67:21:6F:DA Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584908817CEF1E19F49849571540 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 149440 IP address blocks: 23.27.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:7c:ef:1e:19:f4:98:49:57:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ac5d7a30-53b0-499f-b186-d3a5bf4513f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:78:0d:8e:a5:1d:c3:16:bc:43:96:c7:b0:eb: e8:35:d6:52:e4:7c:55:87:7f:48:18:ac:fd:ee:8a: c4:02:fd:f6:9a:a6:27:c8:98:ff:6f:89:61:b5:4d: 13:28:89:14:25:5f:0f:9e:25:66:3b:dd:41:de:07: 8c:31:fd:c3:79:21:67:62:fa:3d:c2:01:f9:95:6d: a0:85:6d:6d:67:db:69:f0:19:c5:67:ff:2e:7b:19: d5:f8:f2:4d:c7:91:ef:52:00:7f:d1:36:b7:d2:03: 51:b3:2e:51:d4:ac:56:ec:29:93:c3:09:e0:2e:55: 7b:d1:3a:b0:4a:10:9e:bd:31:30:fe:21:d3:53:c9: c6:bf:9c:ed:0f:be:30:34:9b:8f:0d:a4:c0:c9:d1: 8f:6d:f8:63:a3:66:9d:c3:e4:dc:e0:79:a7:8a:7f: f2:cb:f5:1b:04:31:4a:31:f0:26:c7:16:8b:af:02: 3e:83:56:c1:c6:4e:5a:a6:34:1b:58:d1:e3:35:59: b7:98:38:2d:51:71:c3:37:a3:15:b8:3e:cb:67:09: aa:88:b5:84:b3:92:d8:d4:12:28:b1:2d:be:ba:70: 5e:c2:9b:6d:da:15:11:bd:28:da:fd:25:e4:6c:57: 62:04:f5:7d:74:2a:de:a8:50:4a:6d:d2:4a:ee:d4: f6:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:15:62:30:DD:86:20:F3:A5:84:AF:26:AE:A6:4D:67:21:6F:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5acb3e17-f281-32e2-88a7-24f1b9182943.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4c:c0:ce:7a:34:e3:c2:a0:a4:4d:de:45:21:8c:12:5c:eb: a2:e3:76:12:df:d3:60:72:f7:5b:17:9e:3d:88:d3:96:cc:e3: c6:95:07:6f:d9:19:6d:98:b1:79:c3:39:68:b2:89:e5:cf:b1: e8:5f:bf:c6:26:85:29:15:e4:f1:e6:8c:1b:d0:1f:e5:1e:d6: 99:b7:1b:59:5f:30:d8:45:b9:c8:31:7c:03:0c:4f:81:38:85: 3c:6c:15:38:ec:76:f4:41:e5:06:f4:b2:60:ab:50:f1:89:77: 38:6b:93:7c:05:c6:89:41:38:7c:8b:d6:3a:1e:53:e9:a9:3d: 3e:8d:ef:b4:ff:13:6e:fe:5a:22:d6:58:44:f0:f9:f8:7d:c8: 90:e0:7a:ad:a0:7f:bf:2e:e7:5b:1c:9e:d9:18:94:6e:1d:4c: 47:ea:f1:d8:21:5c:67:96:27:d0:93:c5:90:67:23:fc:0f:2f: b8:cb:c8:00:82:67:46:d2:a6:6c:50:f9:9c:c8:5f:fe:3c:2a: 4b:99:ba:da:94:50:90:47:d3:cf:68:c3:7d:b1:e6:df:ae:e1: 26:b6:67:e6:62:9a:46:ab:76:9b:82:76:e2:61:e0:76:c5:81: c9:28:39:70:ed:e2:67:50:dd:0a:58:b1:d3:de:02:ed:95:19: e2:21:80:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXzvHhn0mElXFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YWM1ZDdhMzAtNTNiMC00OTlmLWIxODYtZDNhNWJmNDUxM2Y5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3gNjqUdwxa8Q5bHsOvoNdZS5HxVh39IGKz9 7orEAv32mqYnyJj/b4lhtU0TKIkUJV8PniVmO91B3geMMf3DeSFnYvo9wgH5lW2g hW1tZ9tp8BnFZ/8uexnV+PJNx5HvUgB/0Ta30gNRsy5R1KxW7CmTwwngLlV70Tqw ShCevTEw/iHTU8nGv5ztD74wNJuPDaTAydGPbfhjo2adw+Tc4Hmnin/yy/UbBDFK MfAmxxaLrwI+g1bBxk5apjQbWNHjNVm3mDgtUXHDN6MVuD7LZwmqiLWEs5LY1BIo sS2+unBewptt2hURvSja/SXkbFdiBPV9dCreqFBKbdJK7tT2DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8CFWIw3YYg86WEryaupk1nIW/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWFjYjNlMTctZjI4MS0z MmUyLTg4YTctMjRmMWI5MTgyOTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhMwM56NOPCoKRN3kUhjBJc66LjdhLf02By91sXnj2I05bM48aVB2/Z GW2YsXnDOWiyieXPsehfv8YmhSkV5PHmjBvQH+Ue1pm3G1lfMNhFucgxfAMMT4E4 hTxsFTjsdvRB5Qb0smCrUPGJdzhrk3wFxolBOHyL1joeU+mpPT6N77T/E27+WiLW WETw+fh9yJDgeq2gf78u51scntkYlG4dTEfq8dghXGeWJ9CTxZBnI/wPL7jLyACC Z0bSpmxQ+ZzIX/48KkuZutqUUJBH089ow32x5t+u4Sa2Z+ZimkardpuCduJh4HbF gckoOXDt4mdQ3QpYsdPeAu2VGeIhgPg= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:26 2025 by rpki-client