$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa File: 5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa (raw, json) Hash identifier: LSkZQwLSJCxKdACrxpA++E3AFTzCVmMdbRWbZqDizv8= Subject key identifier: E9:CA:44:DE:0B:93:89:C5:0A:62:56:E4:AC:CC:F0:4C:4E:BC:C2:7B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B731D31853399F9ABFD00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 23.27.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:73:1d:31:85:33:99:f9:ab:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8dbb5992-b4f1-4e77-a600-eaa9224706ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:96:1b:48:80:29:6c:ef:c3:15:7e:38:b6: 1b:9f:b4:87:a2:e0:43:e4:da:74:d7:e6:63:a6:5f: 90:59:84:01:1b:fb:3f:df:84:5a:8a:17:f4:56:9b: 3c:e1:df:de:c8:59:84:f0:8b:69:68:c2:33:12:75: da:fa:ae:64:a4:64:0c:70:ad:91:84:9b:ad:50:71: 22:f2:c6:5a:ac:82:04:93:fb:55:be:dc:26:4b:1b: 85:33:d0:3f:48:0a:9d:6e:49:99:5c:77:b2:cc:ac: 5b:41:82:f9:1f:b1:91:84:19:71:0a:b2:c3:2a:b7: 65:7d:a2:50:e9:b5:36:d6:67:e7:36:18:57:52:5d: 8b:58:51:2a:18:d9:53:4b:0a:11:9c:e3:95:ae:75: 95:08:c4:7f:45:7d:c3:50:66:39:7d:9d:23:63:d7: 48:32:bb:b3:67:ff:88:11:06:cb:1c:7f:d6:b4:38: 54:b8:f3:72:12:7f:bd:16:6f:96:23:6a:3d:53:f8: 02:7c:1a:a0:b2:02:a5:4c:f4:af:4b:ee:98:08:0b: 76:db:27:30:9b:6b:73:c9:13:1c:58:c5:a6:5e:6a: af:69:c3:7d:03:50:f5:58:e1:be:aa:83:7b:7d:2e: f1:2b:9f:cf:10:1f:15:e8:04:57:c3:32:1b:cf:01: b7:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:CA:44:DE:0B:93:89:C5:0A:62:56:E4:AC:CC:F0:4C:4E:BC:C2:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5c70abe3-fda0-3b57-94ba-8ad0100b9379.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:16:aa:6f:f8:fa:77:9e:51:8c:31:51:1d:12:ac:4b:0d:41: 95:4f:14:0c:82:47:4e:47:df:d2:1b:b7:e0:ab:64:cd:c4:6e: bd:61:c0:80:5d:09:ba:c7:d7:b9:dd:ef:7c:18:03:51:f8:8d: 2d:50:30:ca:a3:f3:b9:5f:7d:50:02:af:3f:67:97:3d:01:17: 49:b7:33:16:1d:59:10:05:ad:06:eb:b6:64:1f:db:42:7a:0a: de:a6:be:11:05:99:70:f8:09:fd:82:d5:68:ff:bf:54:cf:1b: 58:85:a7:5a:77:99:f8:e8:8a:f5:a7:56:eb:1c:fc:74:0b:35: b0:14:b4:a6:bf:e3:3b:04:ca:a7:55:d3:b5:17:d0:b2:5c:64: 9c:44:10:fe:25:5c:27:2b:a9:b1:9e:19:9c:32:b1:ac:06:1f: f6:f0:d7:b9:5a:c9:b7:6a:34:51:58:4e:77:fb:3e:7d:17:52: d5:9c:7c:e6:8c:a2:97:e7:87:4d:ff:b0:e0:f6:56:22:18:4b: 81:5b:9c:3b:f6:bb:cc:c1:d2:f9:37:e1:39:fd:f9:fe:1c:34: c0:96:af:3d:ef:15:44:59:db:d4:fa:5b:2b:05:69:32:ae:89: 42:98:c6:13:dc:46:5b:8d:c5:cb:59:03:26:7d:9c:a2:05:2d: ac:42:f6:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3MdMYUzmfmr/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGRiYjU5OTItYjRmMS00ZTc3LWE2MDAtZWFhOTIyNDcwNmVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKCWG0iAKWzvwxV+OLYbn7SHouBD5Np01+Zj pl+QWYQBG/s/34Raihf0Vps84d/eyFmE8ItpaMIzEnXa+q5kpGQMcK2RhJutUHEi 8sZarIIEk/tVvtwmSxuFM9A/SAqdbkmZXHeyzKxbQYL5H7GRhBlxCrLDKrdlfaJQ 6bU21mfnNhhXUl2LWFEqGNlTSwoRnOOVrnWVCMR/RX3DUGY5fZ0jY9dIMruzZ/+I EQbLHH/WtDhUuPNyEn+9Fm+WI2o9U/gCfBqgsgKlTPSvS+6YCAt22ycwm2tzyRMc WMWmXmqvacN9A1D1WOG+qoN7fS7xK5/PEB8V6ARXwzIbzwG3twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOnKRN4Lk4nFCmJW5KzM8ExOvMJ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWM3MGFiZTMtZmRhMC0z YjU3LTk0YmEtOGFkMDEwMGI5Mzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwWqm/4+neeUYwxUR0SrEsNQZVPFAyCR05H39Ibt+CrZM3Ebr1hwIBd CbrH17nd73wYA1H4jS1QMMqj87lffVACrz9nlz0BF0m3MxYdWRAFrQbrtmQf20J6 Ct6mvhEFmXD4Cf2C1Wj/v1TPG1iFp1p3mfjoivWnVusc/HQLNbAUtKa/4zsEyqdV 07UX0LJcZJxEEP4lXCcrqbGeGZwysawGH/bw17laybdqNFFYTnf7Pn0XUtWcfOaM opfnh03/sOD2ViIYS4FbnDv2u8zB0vk34Tn9+f4cNMCWrz3vFURZ29T6WysFaTKu iUKYxhPcRluNxctZAyZ9nKIFLaxC9vc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:05 2025 by rpki-client