$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a5d8639f-7421-331a-968f-3fe6326a97e5.roa File: a5d8639f-7421-331a-968f-3fe6326a97e5.roa (raw, json) Hash identifier: f4TMvlwjDW3qb/AWtmtsUYfQEovDri0htw6BlX7ktBE= Subject key identifier: 21:7C:22:97:E9:21:59:D7:8E:E5:B5:96:77:34:1D:38:E6:8A:CB:D3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2B9D0BCBCEE3106BA1B900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a5d8639f-7421-331a-968f-3fe6326a97e5.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 23.27.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9d:0b:cb:ce:e3:10:6b:a1:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=db2766a5-1f45-4486-bdae-546d9fd4a29e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c5:d9:45:c9:d5:40:80:32:4b:60:fd:51:65: a8:31:66:1f:af:7c:87:06:cb:ec:9e:33:d0:3d:10: 04:29:6b:4c:df:50:a1:e7:38:69:6a:a9:be:84:27: fe:6c:8d:f8:2c:44:e7:96:36:46:4a:5f:99:43:15: a8:fb:6f:c0:bb:74:bc:34:62:a2:48:b2:c3:86:8b: 4d:06:9d:8b:8a:c8:e8:3d:48:70:8d:cc:13:96:79: 9a:0b:a4:38:2b:b4:f4:d3:ca:86:e7:30:1b:a5:90: 6f:ad:a6:73:dc:75:7e:ad:1f:72:a2:91:d6:e1:6a: 9b:f8:99:89:89:b2:8c:9b:77:3c:ab:f4:78:db:cb: 59:02:83:4f:91:d4:f1:95:6d:19:c7:25:62:ea:be: f7:ab:03:df:88:04:d8:21:e9:52:04:d0:a6:e8:01: a7:7f:0a:3e:59:d6:80:0f:36:e4:87:f0:f3:d0:54: 31:0e:89:c3:2d:ee:90:f5:c3:bb:04:34:70:cf:be: 9c:c2:41:1b:45:4e:9d:2b:8b:ed:35:4b:f5:84:7d: ef:ff:0b:66:61:bb:93:37:f6:9e:83:ed:2a:ab:8d: c1:72:31:4e:18:02:2f:49:27:5f:f1:de:90:2a:7f: d6:be:12:58:c7:80:54:3e:bb:2f:b8:a3:48:0d:34: 19:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7C:22:97:E9:21:59:D7:8E:E5:B5:96:77:34:1D:38:E6:8A:CB:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a5d8639f-7421-331a-968f-3fe6326a97e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:36:4c:c4:fb:d8:9f:a4:85:d8:03:83:94:25:d7:72:0d:7f: 60:59:d0:bb:1c:66:9c:ec:00:34:4a:f8:6a:02:29:a3:19:9f: 56:dc:6b:bf:bd:2b:68:40:2f:b6:e1:86:49:ca:ea:4b:57:ed: c0:58:ab:01:b6:7d:04:a7:bc:a5:1e:1f:d7:17:29:31:6a:e9: 28:4f:76:3e:b2:04:a5:87:bf:ff:ef:8f:cc:5e:16:32:19:b4: 8a:6a:e8:cd:67:6b:dd:14:d2:4b:da:63:e9:b0:4d:f0:c9:5d: 84:7a:b5:c5:fc:ab:36:09:bd:29:04:cb:0c:ea:96:29:27:cb: 93:7d:3e:55:32:dd:e8:f7:3d:ee:32:be:b4:b3:31:be:d1:99: 13:2e:b6:68:19:af:c0:1b:88:ee:8d:94:f1:b4:6d:c6:7e:42: 2e:5f:8a:af:78:42:11:d5:d9:8e:b1:88:3e:97:87:1f:0a:da: aa:d6:be:53:c9:24:d3:c1:51:8d:78:cd:9e:11:cc:9a:4f:dc: 7d:66:38:38:43:49:db:b7:5b:d2:1d:fc:ee:31:eb:7a:c8:d4: ef:d7:0c:c4:9a:0c:da:bf:82:4a:b7:ab:61:ea:5d:a4:50:27: 3b:8b:b6:5a:71:8f:a9:02:55:2d:f3:ae:e6:4a:52:3c:da:c4: 02:f9:c8:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK50Ly87jEGuhuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk ZGIyNzY2YTUtMWY0NS00NDg2LWJkYWUtNTQ2ZDlmZDRhMjllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cXZRcnVQIAyS2D9UWWoMWYfr3yHBsvsnjPQ PRAEKWtM31Ch5zhpaqm+hCf+bI34LETnljZGSl+ZQxWo+2/Au3S8NGKiSLLDhotN Bp2LisjoPUhwjcwTlnmaC6Q4K7T008qG5zAbpZBvraZz3HV+rR9yopHW4Wqb+JmJ ibKMm3c8q/R428tZAoNPkdTxlW0ZxyVi6r73qwPfiATYIelSBNCm6AGnfwo+WdaA Dzbkh/Dz0FQxDonDLe6Q9cO7BDRwz76cwkEbRU6dK4vtNUv1hH3v/wtmYbuTN/ae g+0qq43BcjFOGAIvSSdf8d6QKn/WvhJYx4BUPrsvuKNIDTQZrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF8IpfpIVnXjuW1lnc0HTjmisvTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTVkODYzOWYtNzQyMS0z MzFhLTk2OGYtM2ZlNjMyNmE5N2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc2TMT72J+khdgDg5Ql13INf2BZ0LscZpzsADRK+GoCKaMZn1bca7+9 K2hAL7bhhknK6ktX7cBYqwG2fQSnvKUeH9cXKTFq6ShPdj6yBKWHv//vj8xeFjIZ tIpq6M1na90U0kvaY+mwTfDJXYR6tcX8qzYJvSkEywzqlikny5N9PlUy3ej3Pe4y vrSzMb7RmRMutmgZr8AbiO6NlPG0bcZ+Qi5fiq94QhHV2Y6xiD6Xhx8K2qrWvlPJ JNPBUY14zZ4RzJpP3H1mODhDSdu3W9Id/O4x63rI1O/XDMSaDNq/gkq3q2HqXaRQ JzuLtlpxj6kCVS3zruZKUjzaxAL5yE8= -----END CERTIFICATE-----Generated at Sat Apr 5 02:42:46 2025 by rpki-client