$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa File: 8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa (raw, json) Hash identifier: ditAAk+YyW8VSfeo7GKBgCLuKiFjcGeltdQ2n0BaXO8= Subject key identifier: A8:DE:56:32:21:73:08:08:0B:78:38:3E:94:1F:D7:E9:C6:4A:84:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B8F0D99518F86DEAB7811A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa Signing time: Fri 31 Jan 2025 02:00:39 +0000 ROA not before: Fri 31 Jan 2025 02:00:39 +0000 ROA not after: Thu 01 May 2025 01:00:39 +0000 asID: 209854 IP address blocks: 23.27.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b8:f0:d9:95:18:f8:6d:ea:b7:81:1a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 31 02:00:39 2025 GMT Not After : May 1 01:00:39 2025 GMT Subject: CN=87ccc465-6bc9-420e-a7bf-e55adae7cb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:e5:3d:68:ad:0e:87:a7:e9:34:30:85:a0: 64:e9:18:a3:42:bd:6c:93:b6:51:73:d5:c5:aa:14: 0a:22:99:d0:64:22:29:28:24:1b:6a:1d:c7:45:ef: 6a:2f:ed:2d:49:d0:a0:e2:6b:8e:dc:32:44:12:3e: b7:9e:0a:d7:c4:f2:78:09:35:52:9e:b7:c0:0a:1b: 71:c3:40:95:d8:ac:e9:c2:48:8c:8e:fb:17:47:77: cb:55:79:e8:9b:d7:92:c1:ea:1f:03:50:d8:37:8d: e7:aa:48:ba:79:16:2e:f6:df:cb:88:97:d0:27:e2: 6f:3e:c3:ad:4f:6c:22:32:17:3e:b3:11:ee:76:97: 90:c5:3c:cd:0d:ae:e2:34:22:bb:58:d1:1c:7a:f6: 89:3b:68:80:c4:50:99:e7:ac:83:45:76:c3:ec:7b: 50:34:f5:da:eb:86:2c:26:8a:c3:c2:52:1e:e8:07: db:2d:c0:ae:a7:bf:0c:6c:28:cc:99:a0:ae:ae:79: ab:62:c7:2a:f5:52:6e:44:76:23:b8:3a:74:2f:ea: ba:22:ab:39:61:65:4a:19:b1:8b:9b:fc:0a:bf:73: 97:fe:24:b2:79:fd:4e:21:d6:3a:e9:1b:8c:b8:56: 08:20:7b:58:32:97:e5:9e:17:cd:87:a3:17:2b:ad: 72:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:DE:56:32:21:73:08:08:0B:78:38:3E:94:1F:D7:E9:C6:4A:84:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:44:b7:83:ad:a0:ac:11:a4:46:d9:6c:9a:d3:9b:da:f8:28: d2:51:fe:4f:05:1b:1f:94:4a:47:8a:f1:5e:ed:90:f6:23:54: e1:13:0d:b6:e1:f6:fb:fa:99:16:4e:85:13:de:b3:3e:25:6d: 9c:70:aa:06:2a:b2:3d:31:04:ec:6b:ce:d1:d1:ac:0c:ea:7e: 56:ff:33:7d:9b:97:d7:94:a7:37:35:39:98:3b:eb:c8:3b:84: 8a:2c:5c:05:98:7c:13:75:0c:1a:c6:a9:3a:6f:c6:4a:69:a2: d4:83:28:fc:45:20:33:fd:b7:4a:36:94:5a:65:64:b4:23:78: 07:a2:52:87:07:5b:23:aa:64:8f:bc:1a:c8:fd:f2:3e:9d:96: 76:73:9a:11:3f:2e:92:56:97:a2:d0:93:5b:d6:83:74:86:63: ea:31:58:e5:3f:c1:c4:f5:da:b3:45:fa:59:cb:f2:b0:db:7e: e9:27:3b:03:61:93:2b:a7:a4:de:66:a4:a4:93:e7:5e:f8:fa: 28:57:37:07:c3:c5:22:87:9f:a4:50:52:35:6c:29:f5:d2:a6: 62:07:55:fd:3f:57:46:51:9c:08:c1:db:41:73:7f:5f:82:70: ef:29:d0:4b:2a:c3:91:78:21:61:3f:9c:41:a3:2d:d2:74:15: 81:d5:af:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi48NmVGPht6reBGgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk ODdjY2M0NjUtNmJjOS00MjBlLWE3YmYtZTU1YWRhZTdjYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBHlPWitDoen6TQwhaBk6RijQr1sk7ZRc9XF qhQKIpnQZCIpKCQbah3HRe9qL+0tSdCg4muO3DJEEj63ngrXxPJ4CTVSnrfAChtx w0CV2KzpwkiMjvsXR3fLVXnom9eSweofA1DYN43nqki6eRYu9t/LiJfQJ+JvPsOt T2wiMhc+sxHudpeQxTzNDa7iNCK7WNEcevaJO2iAxFCZ56yDRXbD7HtQNPXa64Ys JorDwlIe6AfbLcCup78MbCjMmaCurnmrYscq9VJuRHYjuDp0L+q6Iqs5YWVKGbGL m/wKv3OX/iSyef1OIdY66RuMuFYIIHtYMpflnhfNh6MXK61yfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjeVjIhcwgIC3g4PpQf1+nGSoQHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODgyMmJiMWQtMmYyNC0z ZjRkLTllYzItNzQwOGY1MDNiOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNEt4OtoKwRpEbZbJrTm9r4KNJR/k8FGx+USkeK8V7tkPYjVOETDbbh 9vv6mRZOhRPesz4lbZxwqgYqsj0xBOxrztHRrAzqflb/M32bl9eUpzc1OZg768g7 hIosXAWYfBN1DBrGqTpvxkppotSDKPxFIDP9t0o2lFplZLQjeAeiUocHWyOqZI+8 Gsj98j6dlnZzmhE/LpJWl6LQk1vWg3SGY+oxWOU/wcT12rNF+lnL8rDbfuknOwNh kyunpN5mpKST5174+ihXNwfDxSKHn6RQUjVsKfXSpmIHVf0/V0ZRnAjB20Fzf1+C cO8p0Esqw5F4IWE/nEGjLdJ0FYHVr0o= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:09 2025 by rpki-client