$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98e3fd80-d9f4-3e39-bf93-3a20d6c6ac2e.roa File: 98e3fd80-d9f4-3e39-bf93-3a20d6c6ac2e.roa (raw, json) Hash identifier: tBUroOiuEVoZpFyPoQgpeizierNphuM72pfNYudDjxc= Subject key identifier: 1A:51:65:68:77:F1:FC:A4:A5:27:D7:C8:A3:F2:8D:B9:85:89:7C:46 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858493B2E8229280D66612E88D480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98e3fd80-d9f4-3e39-bf93-3a20d6c6ac2e.roa Signing time: Tue 18 Mar 2025 17:40:14 +0000 ROA not before: Tue 18 Mar 2025 17:40:14 +0000 ROA not after: Mon 16 Jun 2025 17:40:14 +0000 asID: 399646 IP address blocks: 23.27.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3b:2e:82:29:28:0d:66:61:2e:88:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 17:40:14 2025 GMT Not After : Jun 16 17:40:14 2025 GMT Subject: CN=1ceef0d4-a8e6-4b96-9ea4-17113b917000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:f5:9b:de:6d:76:c6:ca:3e:96:69:0c:db:62: 76:ca:7d:e2:55:2e:38:2b:31:71:ae:e4:27:c2:41: f3:d8:29:08:96:75:67:8c:2f:d3:78:65:0b:b4:2c: 7f:9d:2c:52:1a:07:68:c5:5e:34:df:53:a3:8c:a2: 80:6a:f2:cf:e8:a2:4a:6f:06:34:0e:51:60:7d:9c: ad:b3:2f:c6:cb:32:1c:a2:50:86:af:ea:61:c2:b6: 91:80:0b:15:44:98:54:8e:b8:9e:35:53:c4:41:b4: cd:fe:5f:ee:1e:ce:8a:66:e3:b4:82:45:74:d1:95: 95:a9:a3:23:36:61:7c:9f:62:06:38:83:11:1c:05: 44:61:27:9f:6b:b6:96:42:06:74:46:ce:79:82:e0: 18:be:87:b4:85:b1:95:76:9c:bd:de:24:d5:a3:ff: b2:9c:af:1b:71:95:06:94:58:5b:0e:69:bd:c1:d8: 05:0d:6a:d0:14:58:b3:2e:c8:8a:9b:62:a2:55:68: 76:19:96:fd:d4:a6:f0:8f:a0:75:94:2f:84:b9:1b: 42:88:a4:22:4f:89:b1:ff:d0:9f:6a:21:2f:4c:3b: cf:cc:c7:aa:76:29:44:c5:20:35:02:04:88:c1:0f: 64:c6:ad:d0:b7:95:47:4a:b2:1c:70:d3:0c:20:97: 45:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:51:65:68:77:F1:FC:A4:A5:27:D7:C8:A3:F2:8D:B9:85:89:7C:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/98e3fd80-d9f4-3e39-bf93-3a20d6c6ac2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3c:fd:40:62:f3:7e:01:72:c4:fe:ff:9e:b3:4a:a6:42:a4: 44:05:8f:c0:bb:02:07:43:39:69:01:5e:e3:a0:80:1c:e2:26: e1:a4:35:f5:b5:6d:99:0b:c0:c3:4c:6d:a2:38:37:df:3b:0f: e6:90:61:ee:9e:09:19:f6:f9:5b:43:37:50:b6:8e:2c:ba:0c: 80:7d:e3:87:42:cb:a9:37:08:0e:38:09:7a:ad:4e:17:89:9c: 14:61:6d:42:13:af:ac:ea:b5:ce:74:d6:0d:24:0d:93:5a:38: 98:f7:2a:19:f5:66:fe:b0:32:f0:7c:73:75:26:4a:42:78:24: 52:97:58:79:cb:1d:a7:4f:53:d7:c9:6e:17:69:6b:0a:65:8e: a3:35:6a:a3:7f:3a:89:cb:bc:ba:9f:bd:10:aa:13:d8:65:45: fb:46:08:b3:48:4a:8c:c7:aa:38:f4:5a:7b:a0:02:1d:29:0e: 01:a4:e0:91:51:63:c0:b3:62:98:58:49:41:a5:f1:87:7b:55: 76:8a:d6:75:6e:7b:bc:38:af:5f:ac:1d:3d:39:5c:ce:96:58: 90:b0:9c:b4:75:ad:16:e6:14:ef:93:68:ef:13:b0:69:0b:b5: f2:db:1e:4a:21:55:13:13:21:06:bb:b0:4c:89:70:05:c0:35: ee:b5:00:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk7LoIpKA1mYS6I1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxODE3NDAxNFoXDTI1MDYxNjE3NDAxNFowLzEtMCsGA1UEAxMk MWNlZWYwZDQtYThlNi00Yjk2LTllYTQtMTcxMTNiOTE3MDAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8vWb3m12xso+lmkM22J2yn3iVS44KzFxruQn wkHz2CkIlnVnjC/TeGULtCx/nSxSGgdoxV4031OjjKKAavLP6KJKbwY0DlFgfZyt sy/GyzIcolCGr+phwraRgAsVRJhUjrieNVPEQbTN/l/uHs6KZuO0gkV00ZWVqaMj NmF8n2IGOIMRHAVEYSefa7aWQgZ0Rs55guAYvoe0hbGVdpy93iTVo/+ynK8bcZUG lFhbDmm9wdgFDWrQFFizLsiKm2KiVWh2GZb91Kbwj6B1lC+EuRtCiKQiT4mx/9Cf aiEvTDvPzMeqdilExSA1AgSIwQ9kxq3Qt5VHSrIccNMMIJdFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpRZWh38fykpSfXyKPyjbmFiXxGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOThlM2ZkODAtZDlmNC0z ZTM5LWJmOTMtM2EyMGQ2YzZhYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA88/UBi834BcsT+/56zSqZCpEQFj8C7AgdDOWkBXuOggBziJuGkNfW1 bZkLwMNMbaI4N987D+aQYe6eCRn2+VtDN1C2jiy6DIB944dCy6k3CA44CXqtTheJ nBRhbUITr6zqtc501g0kDZNaOJj3Khn1Zv6wMvB8c3UmSkJ4JFKXWHnLHadPU9fJ bhdpawpljqM1aqN/OonLvLqfvRCqE9hlRftGCLNISozHqjj0WnugAh0pDgGk4JFR Y8CzYphYSUGl8Yd7VXaK1nVue7w4r1+sHT05XM6WWJCwnLR1rRbmFO+TaO8TsGkL tfLbHkohVRMTIQa7sEyJcAXANe61AAw= -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:34 2025 by rpki-client