$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/60e04562-f2fb-3849-9a67-53c58b761d82.roa File: 60e04562-f2fb-3849-9a67-53c58b761d82.roa (raw, json) Hash identifier: Ce3SUeDGH/aYxHA6LRcKLgP0RSv8+3LtmIRJ6ubU3O8= Subject key identifier: FB:29:54:B7:28:2B:47:BA:7D:E5:AA:FF:29:BD:0E:E0:E3:6C:86:A1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2BA4515CA0612FC4760E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/60e04562-f2fb-3849-9a67-53c58b761d82.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 23.27.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:a4:51:5c:a0:61:2f:c4:76:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=66f09240-83d3-40ec-ab2d-c7aa51dbbbcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7c:47:48:0a:47:11:df:83:d6:e8:0b:c9:96: b3:04:4d:f4:b9:f2:79:34:f3:e0:7f:a8:7a:0b:f5: 8b:96:e0:19:5e:68:cb:56:10:96:1c:9d:fc:c6:35: 2b:86:d6:cf:e6:6b:9a:1b:2c:3b:9f:28:9f:f6:83: 5d:3c:87:c0:e6:38:07:97:9e:86:4b:0e:50:8e:75: 62:d7:bd:fd:d4:78:ba:00:6a:35:45:bb:33:d3:06: ba:f7:c0:4d:67:66:77:b4:3f:8b:1e:62:c6:4e:cd: 9e:08:7a:e3:84:be:c1:f2:7e:6b:eb:18:33:3e:9c: 16:9e:6b:62:b1:1d:b3:ea:6a:43:0e:a1:f8:2d:ef: 0c:94:bd:3e:a7:04:6b:e6:c1:fb:05:96:2d:63:45: 1f:8b:f6:9e:b1:3d:7f:93:7b:86:94:4f:1e:c9:d3: 97:41:04:aa:71:32:93:a8:ba:6a:36:fc:e0:6a:1b: 7f:86:61:13:d8:e6:2c:06:f1:ce:52:e5:b8:d8:80: f7:4f:b1:66:7d:db:c3:4b:e0:b5:d5:7f:65:ce:37: 5a:4a:f2:d2:82:3f:35:7e:60:3c:48:aa:28:79:7b: 87:70:bf:69:86:86:5d:e5:32:c6:16:e9:31:a7:31: fd:6f:ad:1b:ca:7f:22:c6:6e:0e:9f:cc:72:76:bd: 6a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:29:54:B7:28:2B:47:BA:7D:E5:AA:FF:29:BD:0E:E0:E3:6C:86:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/60e04562-f2fb-3849-9a67-53c58b761d82.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:6e:40:6b:69:a6:bb:ce:41:6c:df:2e:a3:15:9f:f9:a8:53: 92:45:b1:de:53:2a:e5:0b:06:86:77:74:08:79:59:ad:90:cf: 9b:e1:93:42:81:ad:09:ce:18:bb:00:a7:c8:9c:1a:32:5f:0f: 05:10:f7:ae:5a:04:61:fc:ec:f2:b9:a0:e2:03:9a:df:24:6c: 5a:68:34:c5:b1:96:e6:b1:3a:e1:16:45:8d:9e:c6:ea:26:0b: 2c:bf:98:72:e7:ac:cb:3f:fd:93:49:af:61:8c:3f:fd:93:9f: 4d:23:8c:33:2b:cd:96:e3:5a:ef:72:67:b5:20:a4:1d:d7:0a: 0d:95:26:d8:19:d1:74:1c:bc:4c:d2:b2:c6:3e:10:7a:5b:84: f0:94:b4:9a:40:a1:70:df:3e:19:a7:72:61:f5:3f:02:b1:e8: 53:61:20:b2:ef:36:00:58:c9:52:15:fa:be:1e:a3:95:cc:1c: 4d:c1:d0:60:00:6b:ae:3e:aa:2a:32:f5:df:6a:a4:6a:9b:fe: 54:47:2f:ef:8f:63:78:62:c0:7c:fb:61:1b:52:d7:43:40:21: ef:a5:41:fa:7e:ed:72:35:7d:9f:5f:8e:bf:9f:a1:7c:3b:17: 02:59:92:ab:15:7a:91:6c:a3:58:bd:8d:3f:52:3f:68:d3:0b: 2a:b1:9f:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6RRXKBhL8R2DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk NjZmMDkyNDAtODNkMy00MGVjLWFiMmQtYzdhYTUxZGJiYmNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXxHSApHEd+D1ugLyZazBE30ufJ5NPPgf6h6 C/WLluAZXmjLVhCWHJ38xjUrhtbP5muaGyw7nyif9oNdPIfA5jgHl56GSw5QjnVi 17391Hi6AGo1Rbsz0wa698BNZ2Z3tD+LHmLGTs2eCHrjhL7B8n5r6xgzPpwWnmti sR2z6mpDDqH4Le8MlL0+pwRr5sH7BZYtY0Ufi/aesT1/k3uGlE8eydOXQQSqcTKT qLpqNvzgaht/hmET2OYsBvHOUuW42ID3T7FmfdvDS+C11X9lzjdaSvLSgj81fmA8 SKooeXuHcL9phoZd5TLGFukxpzH9b60byn8ixm4On8xydr1qCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPspVLcoK0e6feWq/ym9DuDjbIahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjBlMDQ1NjItZjJmYi0z ODQ5LTlhNjctNTNjNThiNzYxZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtuQGtpprvOQWzfLqMVn/moU5JFsd5TKuULBoZ3dAh5Wa2Qz5vhk0KB rQnOGLsAp8icGjJfDwUQ965aBGH87PK5oOIDmt8kbFpoNMWxluaxOuEWRY2exuom Cyy/mHLnrMs//ZNJr2GMP/2Tn00jjDMrzZbjWu9yZ7UgpB3XCg2VJtgZ0XQcvEzS ssY+EHpbhPCUtJpAoXDfPhmncmH1PwKx6FNhILLvNgBYyVIV+r4eo5XMHE3B0GAA a64+qioy9d9qpGqb/lRHL++PY3hiwHz7YRtS10NAIe+lQfp+7XI1fZ9fjr+foXw7 FwJZkqsVepFso1i9jT9SP2jTCyqxnzU= -----END CERTIFICATE-----Generated at Fri Apr 4 22:58:08 2025 by rpki-client