$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b0f6550-5cde-34d7-ae94-da593abf4681.roa File: 5b0f6550-5cde-34d7-ae94-da593abf4681.roa (raw, json) Hash identifier: qbtkKoopHw41jwRK8br84cXVThHABOMuJuUukx5CP3M= Subject key identifier: 62:31:CB:49:47:9D:75:3A:2E:90:8D:82:ED:C2:58:F7:D9:36:BA:29 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858492CAF28FC8D0A7A7890760E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b0f6550-5cde-34d7-ae94-da593abf4681.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 149440 IP address blocks: 23.27.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:af:28:fc:8d:0a:7a:78:90:76:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=ab6fc2dc-75d2-4809-b6d1-2c54a05291bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:98:8c:2b:92:96:92:bd:04:7d:ba:fa:cb:a7: ea:6e:1f:79:5f:41:7b:f0:3a:99:94:7d:d9:0d:d9: ea:87:b3:3e:23:dd:c6:43:dd:bb:06:1e:a3:fc:d7: 7d:8e:16:0b:29:70:e6:a6:43:a1:fa:45:84:be:12: a1:c9:d7:70:57:c5:6a:96:5f:ac:fd:4b:67:60:29: 05:0c:e3:63:fb:98:ef:04:e0:9b:56:91:f3:f8:87: e4:c0:1e:e4:fb:6f:68:53:41:71:ab:3c:4d:fc:9e: f4:c3:3e:ba:e4:82:54:e9:e2:c0:d0:c5:af:7d:69: f8:8d:a0:d1:8f:28:9e:01:16:37:32:21:bf:9d:66: 10:73:77:4f:e3:36:4a:be:c3:bd:18:d4:59:9a:61: 6d:f2:9f:38:d9:2e:40:5d:22:e1:7c:7a:17:08:84: a8:d4:1a:18:57:30:ce:52:bb:43:3d:d0:d1:66:8d: 05:6e:32:c8:4f:58:75:32:52:67:d6:18:8f:c8:b9: 55:57:1b:74:bb:84:a5:8a:b0:46:c2:67:05:18:a4: cf:16:47:21:c8:21:22:c8:4e:66:0d:f9:43:a3:01: ae:fd:0c:0d:ea:b3:aa:f3:6e:8d:a9:48:15:ef:49: 92:7b:2d:fc:44:d2:8d:2a:a5:0f:03:8a:71:64:89: a3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:31:CB:49:47:9D:75:3A:2E:90:8D:82:ED:C2:58:F7:D9:36:BA:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b0f6550-5cde-34d7-ae94-da593abf4681.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:7c:bd:7f:e2:d9:d4:d2:7d:c3:8f:68:7f:65:74:1c:72:dc: 87:83:82:ed:c2:9c:52:4f:2e:a5:5c:8d:5e:e4:9c:d7:e0:9e: ab:e5:0a:1b:46:aa:bf:6d:7c:62:31:db:d8:24:95:7f:ad:cf: db:0f:ec:5a:f3:00:5b:76:0f:e4:e5:f3:19:32:73:df:bd:3c: ca:82:d1:e9:9f:52:08:e9:2a:07:4a:ec:0d:77:00:81:0d:9b: e1:a0:b9:3e:6a:67:2a:d9:90:b9:85:3e:28:ca:85:e1:01:20: 9a:18:ca:12:0e:28:05:84:a9:e9:4f:0a:96:89:d6:2b:64:bc: 7d:85:80:76:0c:4e:66:df:23:da:39:08:0f:bc:76:0d:aa:66: ba:c5:5a:88:94:b3:b2:67:5c:0b:9b:fa:b6:ca:bb:56:56:26: e7:78:37:75:bb:68:ef:b8:22:e3:ff:3d:a7:5c:6b:45:c0:e8: 23:55:88:b1:80:71:b4:97:d7:6c:90:ed:71:8e:b9:6b:b9:ed: dd:c7:21:db:f9:7e:de:d3:9e:3d:8d:2a:54:e4:96:84:e5:27: c7:34:51:7d:1a:ee:0e:1f:3d:14:08:58:fb:35:88:40:e0:c6: 8d:4c:37:ea:42:17:28:79:37:4a:b0:7b:8f:60:d6:d6:20:46: b6:49:bc:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEksryj8jQp6eJB2DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YWI2ZmMyZGMtNzVkMi00ODA5LWI2ZDEtMmM1NGEwNTI5MWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopiMK5KWkr0Efbr6y6fqbh95X0F78DqZlH3Z Ddnqh7M+I93GQ927Bh6j/Nd9jhYLKXDmpkOh+kWEvhKhyddwV8Vqll+s/UtnYCkF DONj+5jvBOCbVpHz+IfkwB7k+29oU0FxqzxN/J70wz665IJU6eLA0MWvfWn4jaDR jyieARY3MiG/nWYQc3dP4zZKvsO9GNRZmmFt8p842S5AXSLhfHoXCISo1BoYVzDO UrtDPdDRZo0FbjLIT1h1MlJn1hiPyLlVVxt0u4SlirBGwmcFGKTPFkchyCEiyE5m DflDowGu/QwN6rOq826NqUgV70mSey38RNKNKqUPA4pxZImjTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGIxy0lHnXU6LpCNgu3CWPfZNropMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWIwZjY1NTAtNWNkZS0z NGQ3LWFlOTQtZGE1OTNhYmY0NjgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG58vX/i2dTSfcOPaH9ldBxy3IeDgu3CnFJPLqVcjV7knNfgnqvlChtG qr9tfGIx29gklX+tz9sP7FrzAFt2D+Tl8xkyc9+9PMqC0emfUgjpKgdK7A13AIEN m+GguT5qZyrZkLmFPijKheEBIJoYyhIOKAWEqelPCpaJ1itkvH2FgHYMTmbfI9o5 CA+8dg2qZrrFWoiUs7JnXAub+rbKu1ZWJud4N3W7aO+4IuP/Padca0XA6CNViLGA cbSX12yQ7XGOuWu57d3HIdv5ft7Tnj2NKlTkloTlJ8c0UX0a7g4fPRQIWPs1iEDg xo1MN+pCFyh5N0qwe49g1tYgRrZJvDk= -----END CERTIFICATE-----Generated at Sat Apr 5 00:37:25 2025 by rpki-client