$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa File: 97f069c2-c90c-374b-a8f1-76ce951c6844.roa (raw, json) Hash identifier: dR2FbNGsPEuTC13Rc6f1N6hJsyZB243wSHAX/6O8Ifg= Subject key identifier: E1:7E:6A:BC:01:4A:C4:2B:F1:55:6E:34:90:14:C2:77:8D:4C:B4:B0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858496E498555DC1523EA08E4D400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa Signing time: Sun 06 Apr 2025 01:00:47 +0000 ROA not before: Sun 06 Apr 2025 01:00:47 +0000 ROA not after: Sat 05 Jul 2025 01:00:47 +0000 asID: 214238 IP address blocks: 23.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6e:49:85:55:dc:15:23:ea:08:e4:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 6 01:00:47 2025 GMT Not After : Jul 5 01:00:47 2025 GMT Subject: CN=edef91ce-77d5-4567-86b3-114365c991b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:45:89:94:60:c7:8c:4a:0d:ff:f6:80:ca:3c: e8:54:56:7f:be:1a:66:b9:35:13:dd:23:6d:c4:90: 97:4f:cf:6f:f5:f7:22:1b:38:50:7c:f8:be:88:54: cd:a5:f3:de:26:30:87:71:f2:a4:54:66:37:27:81: d1:73:9d:c0:40:8f:6c:50:19:3f:92:23:7d:b3:d4: a0:3e:62:21:ea:25:74:10:4f:5a:02:e7:09:eb:0c: 8d:6f:cf:3a:54:bc:f1:35:92:9e:06:69:0e:f4:ce: bc:97:47:4e:b0:80:9e:ca:76:f4:c2:d8:05:7f:fb: d8:77:96:e7:fc:16:4d:51:dd:ac:52:59:cf:c6:54: c6:dc:b4:7d:1e:cd:da:9e:7e:72:6e:64:56:5c:f5: f1:bc:31:da:55:31:5b:27:b3:a0:18:88:6f:84:0e: b7:01:6c:55:bc:d4:8e:e3:50:36:a1:39:2e:2c:bb: 44:bf:45:c0:b1:0f:be:1c:9d:38:59:1a:1b:ef:e6: 91:79:60:f1:54:ee:6a:65:49:ec:74:2b:6d:dc:74: f4:8d:ac:86:c4:f7:51:a9:e4:35:e6:34:67:00:96: 3d:9d:94:97:6d:11:de:d4:81:3a:5e:66:fd:5b:ae: dd:b9:66:64:24:08:13:45:5f:b9:b9:e7:3d:ed:73: 17:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:7E:6A:BC:01:4A:C4:2B:F1:55:6E:34:90:14:C2:77:8D:4C:B4:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/97f069c2-c90c-374b-a8f1-76ce951c6844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:5d:d6:ca:17:5d:d9:02:f6:2d:de:f7:87:db:04:b5:be:ae: ce:f4:e1:67:ce:b3:58:37:0a:c5:51:0d:1c:3e:3e:2f:7e:87: 4d:a5:af:6b:8a:d4:63:67:24:08:f6:be:85:4b:5e:54:0a:95: 49:68:56:66:bf:cb:96:ab:8b:8e:74:91:7a:53:d6:18:8e:68: 23:fa:59:c4:de:20:6b:7d:bc:dc:7d:46:90:c8:8e:6d:d4:f6: 68:f3:a3:cd:8f:6e:8d:61:2c:14:0b:33:3e:b6:05:96:62:ee: 95:35:3d:51:7d:bc:63:08:de:67:be:83:a4:67:73:18:0d:1f: e5:60:76:a0:a2:50:77:7a:ae:cb:13:69:6a:84:29:3d:e8:94: ef:62:c7:19:6a:a6:7e:70:0f:c6:0c:7d:5d:69:d4:46:ad:96: 7f:c2:e3:7f:7b:0e:ea:64:83:f3:9c:7c:fb:23:04:07:72:db: 99:59:f6:7c:76:fc:b5:6c:d3:a7:d4:33:ce:98:f5:f7:a8:2f: 79:c3:40:ba:e5:78:8b:c5:b4:73:66:6d:b0:46:84:94:db:3a: 43:91:4b:af:c2:00:70:e1:ca:54:fd:d2:38:3d:fb:b8:da:e0: 6a:ab:64:80:e8:8d:d1:fc:82:56:bf:19:20:bb:54:a5:32:ef: 2e:c3:5b:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEluSYVV3BUj6gjk1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwNjAxMDA0N1oXDTI1MDcwNTAxMDA0N1owLzEtMCsGA1UEAxMk ZWRlZjkxY2UtNzdkNS00NTY3LTg2YjMtMTE0MzY1Yzk5MWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEWJlGDHjEoN//aAyjzoVFZ/vhpmuTUT3SNt xJCXT89v9fciGzhQfPi+iFTNpfPeJjCHcfKkVGY3J4HRc53AQI9sUBk/kiN9s9Sg PmIh6iV0EE9aAucJ6wyNb886VLzxNZKeBmkO9M68l0dOsICeynb0wtgFf/vYd5bn /BZNUd2sUlnPxlTG3LR9Hs3ann5ybmRWXPXxvDHaVTFbJ7OgGIhvhA63AWxVvNSO 41A2oTkuLLtEv0XAsQ++HJ04WRob7+aReWDxVO5qZUnsdCtt3HT0jayGxPdRqeQ1 5jRnAJY9nZSXbRHe1IE6Xmb9W67duWZkJAgTRV+5uec97XMX3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOF+arwBSsQr8VVuNJAUwneNTLSwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTdmMDY5YzItYzkwYy0z NzRiLWE4ZjEtNzZjZTk1MWM2ODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFd1soXXdkC9i3e94fbBLW+rs704WfOs1g3CsVRDRw+Pi9+h02lr2uK 1GNnJAj2voVLXlQKlUloVma/y5ari450kXpT1hiOaCP6WcTeIGt9vNx9RpDIjm3U 9mjzo82Pbo1hLBQLMz62BZZi7pU1PVF9vGMI3me+g6RncxgNH+VgdqCiUHd6rssT aWqEKT3olO9ixxlqpn5wD8YMfV1p1Eatln/C4397Dupkg/OcfPsjBAdy25lZ9nx2 /LVs06fUM86Y9feoL3nDQLrleIvFtHNmbbBGhJTbOkORS6/CAHDhylT90jg9+7ja 4GqrZIDojdH8gla/GSC7VKUy7y7DW+0= -----END CERTIFICATE-----Generated at Wed Apr 9 01:00:14 2025 by rpki-client