$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa File: 87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa (raw, json) Hash identifier: QbDWKrzODJJpzVyjHPLOEw4In6saMy8ok+CQl2Ex3NM= Subject key identifier: 4A:C1:A1:D0:0E:4A:F4:4D:D6:67:03:23:DA:48:60:6F:25:45:A7:D9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B85B70ED6268AA4FA8A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 20473 IP address blocks: 23.27.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:85:b7:0e:d6:26:8a:a4:fa:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=b8e5a142-b975-45b8-a079-84c0945a1005 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:0a:03:d4:36:e0:b1:c0:f4:7f:fb:35:e3: bf:a8:2d:1f:d2:b9:f7:b5:17:42:1a:d4:31:e6:9d: c7:1b:79:e2:d0:aa:16:11:1b:8e:bb:38:a3:b5:d2: 48:d9:f2:bb:85:a1:a3:40:70:81:ab:c4:e2:5f:44: 5a:a3:6e:48:f4:62:72:64:37:e6:af:5a:07:f9:8e: d9:48:71:2e:0c:76:c1:17:48:03:43:15:7b:2c:f6: 46:f4:58:9d:23:1e:43:b9:c1:f4:4a:a9:db:97:78: 96:a7:9b:ed:93:10:37:a5:c8:b9:10:d6:47:9e:c5: d0:09:64:44:c6:5f:18:80:67:fd:8a:0f:99:68:2b: 5c:d3:c8:ed:f7:4a:a4:50:1a:74:44:da:20:ac:70: ea:6e:0c:a8:db:26:63:f7:9c:c2:93:7c:83:09:9f: 95:ee:ff:b7:bf:a0:97:af:09:07:78:82:c3:b8:ab: 93:6c:82:ac:62:b6:df:e8:6a:ec:ce:30:7f:94:81: 25:cf:f6:8f:46:0e:19:a7:c8:9c:d6:45:43:e1:7e: 0a:6a:03:ea:a9:43:61:60:17:c9:ac:71:05:1f:97: 3d:b6:b8:6f:1f:f2:6d:ea:f0:c6:eb:90:5a:f3:66: ed:cc:48:9b:42:3d:e0:91:9e:ae:bf:04:2c:65:9c: a4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:C1:A1:D0:0E:4A:F4:4D:D6:67:03:23:DA:48:60:6F:25:45:A7:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/87a8cd7e-cc1e-3c5d-9aa4-5583c6b02ff9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:bd:46:51:fa:94:51:8d:5e:c6:d8:25:dc:d7:e8:00:05:7a: 58:47:54:4d:a2:0a:a6:87:c0:6e:46:89:3b:7d:2e:55:34:82: 59:14:98:5c:16:c7:4d:50:f4:de:ab:f1:24:74:99:32:0f:91: 11:51:65:74:03:12:03:99:50:4e:98:04:e9:9b:eb:25:37:76: 88:8b:03:07:77:05:7f:ba:62:2a:0e:9f:f6:30:38:14:09:5a: 21:83:8f:2e:02:23:97:39:4e:1a:08:02:30:b1:19:e3:8f:63: ac:ce:9a:26:7b:a2:49:b5:21:fb:22:cb:dc:12:dd:8d:a4:93: cd:cf:27:6f:cb:8a:7c:93:27:8a:49:80:7f:c0:0c:43:ab:94: 5e:01:b7:77:fe:86:b0:9a:fe:3b:0d:9e:d6:15:27:85:b4:3d: e9:f5:4a:70:36:6b:bd:9e:61:b3:0f:ef:70:bb:9f:9a:40:1a: 4c:f2:20:d9:1c:96:2a:bb:0a:64:27:29:c3:ba:d1:31:e9:a9: 5a:ce:d5:5c:e4:b1:25:e2:56:34:88:26:72:9e:c8:7e:90:4e: 24:82:ff:d1:1b:5e:33:66:54:be:13:55:0d:e1:25:20:90:02: d8:8c:6b:6e:87:2f:ee:0a:79:97:d2:a5:f6:4e:d7:a0:b5:ff: 54:01:fa:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4W3DtYmiqT6igAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YjhlNWExNDItYjk3NS00NWI4LWEwNzktODRjMDk0NWExMDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwgKA9Q24LHA9H/7NeO/qC0f0rn3tRdCGtQx 5p3HG3ni0KoWERuOuzijtdJI2fK7haGjQHCBq8TiX0Rao25I9GJyZDfmr1oH+Y7Z SHEuDHbBF0gDQxV7LPZG9FidIx5DucH0Sqnbl3iWp5vtkxA3pci5ENZHnsXQCWRE xl8YgGf9ig+ZaCtc08jt90qkUBp0RNogrHDqbgyo2yZj95zCk3yDCZ+V7v+3v6CX rwkHeILDuKuTbIKsYrbf6GrszjB/lIElz/aPRg4Zp8ic1kVD4X4KagPqqUNhYBfJ rHEFH5c9trhvH/Jt6vDG65Ba82btzEibQj3gkZ6uvwQsZZykMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErBodAOSvRN1mcDI9pIYG8lRafZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODdhOGNkN2UtY2MxZS0z YzVkLTlhYTQtNTU4M2M2YjAyZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+9RlH6lFGNXsbYJdzX6AAFelhHVE2iCqaHwG5GiTt9LlU0glkUmFwW x01Q9N6r8SR0mTIPkRFRZXQDEgOZUE6YBOmb6yU3doiLAwd3BX+6YioOn/YwOBQJ WiGDjy4CI5c5ThoIAjCxGeOPY6zOmiZ7okm1Ifsiy9wS3Y2kk83PJ2/LinyTJ4pJ gH/ADEOrlF4Bt3f+hrCa/jsNntYVJ4W0Pen1SnA2a72eYbMP73C7n5pAGkzyINkc liq7CmQnKcO60THpqVrO1VzksSXiVjSIJnKeyH6QTiSC/9EbXjNmVL4TVQ3hJSCQ AtiMa26HL+4KeZfSpfZO16C1/1QB+ko= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:59 2025 by rpki-client