$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/816b7d02-fc27-3aa3-afde-15348cea27a6.roa File: 816b7d02-fc27-3aa3-afde-15348cea27a6.roa (raw, json) Hash identifier: +Kt+7ETU7JoxhM6z8mtV7l0uY8mDeCgaxoquwgCgrl4= Subject key identifier: B0:3E:06:CF:D4:C2:E1:0D:7C:51:4B:A4:36:1B:05:25:F3:8D:0E:EE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B8F0D9667DB149797EF35080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/816b7d02-fc27-3aa3-afde-15348cea27a6.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 209854 IP address blocks: 23.27.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d9:66:7d:b1:49:79:7e:f3:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=afd05ced-e7e2-4add-a9f7-0a0c9fbaceea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d9:2c:b1:86:69:d2:37:00:76:cd:06:f2:64: 79:0f:78:e8:d6:78:08:17:a6:d0:b6:0a:ba:a7:96: bd:43:b7:d0:7a:29:0a:b5:06:4b:57:4d:bb:35:64: 6c:a0:05:4b:fb:a3:ca:f8:aa:5c:ea:a1:6c:12:10: 5e:38:07:eb:89:27:81:7e:a9:39:08:64:a0:a9:75: 0c:a3:02:c9:63:ba:df:5a:73:7f:6f:fd:01:b7:a9: 3d:80:1b:5d:4d:ff:f0:63:75:f2:4f:b6:26:99:14: 60:32:8e:86:3e:f0:c9:00:78:b9:65:15:40:90:0d: 10:39:0a:bf:0c:27:fc:d0:0d:75:1e:41:f6:7e:72: 90:58:85:ae:3d:e0:2d:51:b9:46:20:e3:2d:5c:41: 3e:16:1c:4a:86:d7:2f:04:62:dd:c8:24:b6:d8:88: fd:91:40:7d:c2:aa:fe:a4:01:81:49:38:61:f7:d3: ef:f7:37:03:6e:ec:d0:4d:d3:c2:b9:70:63:71:ab: 52:a9:e0:8c:08:16:c2:37:fb:86:ae:e0:a0:6c:15: 31:48:80:04:08:10:da:80:1a:8a:2c:cf:c1:e5:5b: 19:98:7f:4d:e4:49:7a:91:ab:c7:06:37:46:8a:c7: cd:8c:14:74:3c:7c:f0:b6:42:b6:f8:f4:06:bf:9e: ab:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:3E:06:CF:D4:C2:E1:0D:7C:51:4B:A4:36:1B:05:25:F3:8D:0E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/816b7d02-fc27-3aa3-afde-15348cea27a6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:77:28:39:08:88:84:54:0b:d4:e6:9e:c0:d3:fc:68:39:a3: 89:4d:70:d1:a9:77:87:7e:a9:d2:d3:be:62:11:b1:97:09:f8: 6a:74:16:b1:11:28:7d:8e:eb:51:e9:73:13:7e:ee:c0:e3:94: 23:ea:bb:fa:9c:e3:ea:e8:0a:19:31:c2:bc:a5:8a:56:48:da: a3:4c:7b:94:5b:7c:6e:7a:97:df:bd:a3:8c:16:fa:08:1b:3d: 3b:43:8b:53:85:0e:57:d9:43:e7:06:7c:af:63:63:bf:6f:f6: d7:c2:a2:11:d3:c0:92:58:d9:64:5f:7f:3a:6c:50:9c:6a:4b: 78:0a:80:d9:3b:27:ac:95:8f:03:b5:0f:be:bd:ab:ae:66:2f: 7f:5b:e3:92:be:b6:76:09:fe:d2:c5:89:a3:c7:b9:77:7d:d0: 9e:a1:80:2e:39:7b:c1:eb:ab:21:39:69:29:2d:29:90:8e:a8: fd:40:0e:e9:8e:9c:1e:4b:f1:11:af:0c:bf:5b:d1:7a:4a:44: b5:db:e6:50:e6:e1:35:55:90:ee:3a:9b:ea:c6:dd:46:48:d1: 95:b5:26:45:0f:5f:de:bd:c3:12:d0:b5:63:61:ea:f3:2d:04: 52:67:92:de:57:4b:ac:7a:36:03:6a:71:25:fd:8f:7f:9d:91: e4:57:9e:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NlmfbFJeX7zUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk YWZkMDVjZWQtZTdlMi00YWRkLWE5ZjctMGEwYzlmYmFjZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9kssYZp0jcAds0G8mR5D3jo1ngIF6bQtgq6 p5a9Q7fQeikKtQZLV027NWRsoAVL+6PK+Kpc6qFsEhBeOAfriSeBfqk5CGSgqXUM owLJY7rfWnN/b/0Bt6k9gBtdTf/wY3XyT7YmmRRgMo6GPvDJAHi5ZRVAkA0QOQq/ DCf80A11HkH2fnKQWIWuPeAtUblGIOMtXEE+FhxKhtcvBGLdyCS22Ij9kUB9wqr+ pAGBSThh99Pv9zcDbuzQTdPCuXBjcatSqeCMCBbCN/uGruCgbBUxSIAECBDagBqK LM/B5VsZmH9N5El6kavHBjdGisfNjBR0PHzwtkK2+PQGv56rwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA+Bs/UwuENfFFLpDYbBSXzjQ7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODE2YjdkMDItZmMyNy0z YWEzLWFmZGUtMTUzNDhjZWEyN2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZ3KDkIiIRUC9TmnsDT/Gg5o4lNcNGpd4d+qdLTvmIRsZcJ+Gp0FrER KH2O61HpcxN+7sDjlCPqu/qc4+roChkxwrylilZI2qNMe5RbfG56l9+9o4wW+ggb PTtDi1OFDlfZQ+cGfK9jY79v9tfCohHTwJJY2WRffzpsUJxqS3gKgNk7J6yVjwO1 D769q65mL39b45K+tnYJ/tLFiaPHuXd90J6hgC45e8HrqyE5aSktKZCOqP1ADumO nB5L8RGvDL9b0XpKRLXb5lDm4TVVkO46m+rG3UZI0ZW1JkUPX969wxLQtWNh6vMt BFJnkt5XS6x6NgNqcSX9j3+dkeRXngs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:45 2025 by rpki-client