$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa File: ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa (raw, json) Hash identifier: 3wZo+Gk89ogPLhjkMjrXIgjEPChuEEak2WJ1se65S6E= Subject key identifier: 52:F0:A8:06:BC:05:E7:44:2F:45:D0:C3:63:4E:5C:2C:43:DA:22:DD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584827C54FD5AF83A0FFB1128D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 149440 IP address blocks: 23.27.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:4f:d5:af:83:a0:ff:b1:12:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=4e8d3e80-6e3a-4afc-9f59-7c3a60b6cf8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:95:f4:af:29:72:68:6a:01:af:0a:26:a7:eb: ef:6d:75:54:31:6a:9f:ae:29:49:70:f0:73:5c:34: b5:a5:22:bd:01:a2:29:86:b9:c0:cb:99:ce:21:d6: 85:0d:60:04:2e:93:93:73:3d:eb:89:38:51:93:4b: 8c:93:3e:4b:65:a8:a3:b5:e9:78:a7:60:72:43:38: 47:4b:5b:21:58:cf:bd:ae:32:8b:73:d1:e1:4e:e4: 62:30:85:50:0e:15:fd:0f:61:4e:1c:57:2b:14:ec: 41:9c:b0:15:f9:6d:92:ea:2b:5a:47:54:51:2b:ab: db:3c:1a:b5:9a:bb:46:eb:0a:d3:fa:50:6d:75:fe: e5:cd:4b:7d:50:5e:00:6f:4d:a2:f2:8e:e2:bc:b3: 33:26:38:71:9b:12:fa:15:2c:8a:03:66:6d:27:4a: 6b:d9:9e:74:1d:38:98:9c:b9:18:c0:9f:16:53:1a: 58:9a:16:4e:66:98:c6:e5:4c:2b:23:cf:ba:e6:f1: fb:a7:15:9f:d8:39:61:03:ce:20:10:e1:d8:73:fd: a4:9f:f0:a0:85:50:e4:96:cc:15:79:7b:cb:61:8b: 80:3c:a2:09:c8:6b:57:ea:fc:e7:f0:85:6b:6c:88: 97:39:d2:1f:60:ad:34:5e:8f:20:1d:95:c6:13:38: bf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:F0:A8:06:BC:05:E7:44:2F:45:D0:C3:63:4E:5C:2C:43:DA:22:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab0a3a9f-7d49-3593-a98c-5b4145964c0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:fa:8e:60:69:a4:93:cf:c7:02:46:94:68:b7:c9:fc:a8:f2: 0e:91:2b:02:b8:b0:fa:93:41:27:c6:fb:9f:83:e6:6e:b0:a6: 7d:bf:77:bb:55:fe:f6:0b:76:0a:d6:e0:64:43:79:f7:77:45: 60:b3:48:15:f6:67:33:18:25:b3:70:1c:5e:f8:3a:9d:81:0c: 70:7d:95:21:bd:77:59:5a:39:3f:26:86:e1:99:76:df:2b:4e: 87:81:42:b1:ed:2e:3b:aa:bf:07:b6:4e:d8:a3:27:58:85:66: e5:7e:96:09:ae:f3:2a:f0:7b:07:28:21:ee:dd:67:b4:2c:eb: 5e:a9:f9:2c:ab:7f:9a:a5:30:8d:2c:dd:81:da:61:63:5f:fa: 6a:c6:69:8d:af:2b:82:38:ea:d0:67:a8:c1:43:fa:04:fe:7c: 6e:8e:46:24:ed:3d:d8:43:a4:0b:17:19:e8:65:7e:3b:0f:bb: 50:ce:22:db:ba:43:d8:24:e8:91:9a:e8:ed:ca:d0:cf:01:71: 03:8c:91:2c:da:e5:0f:5d:c9:92:3a:e2:b1:ee:d1:d7:fd:c3: 5c:44:4c:32:ed:40:6b:16:04:69:ed:61:ea:a7:3c:64:07:8b: d5:3e:d6:67:0e:99:c1:d3:3f:07:a8:48:ac:f7:6f:e3:84:66: 4c:24:2f:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgnxU/Vr4Og/7ESjQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk NGU4ZDNlODAtNmUzYS00YWZjLTlmNTktN2MzYTYwYjZjZjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJX0rylyaGoBrwomp+vvbXVUMWqfrilJcPBz XDS1pSK9AaIphrnAy5nOIdaFDWAELpOTcz3riThRk0uMkz5LZaijtel4p2ByQzhH S1shWM+9rjKLc9HhTuRiMIVQDhX9D2FOHFcrFOxBnLAV+W2S6itaR1RRK6vbPBq1 mrtG6wrT+lBtdf7lzUt9UF4Ab02i8o7ivLMzJjhxmxL6FSyKA2ZtJ0pr2Z50HTiY nLkYwJ8WUxpYmhZOZpjG5UwrI8+65vH7pxWf2DlhA84gEOHYc/2kn/CghVDklswV eXvLYYuAPKIJyGtX6vzn8IVrbIiXOdIfYK00Xo8gHZXGEzi/6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFLwqAa8BedEL0XQw2NOXCxD2iLdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWIwYTNhOWYtN2Q0OS0z NTkzLWE5OGMtNWI0MTQ1OTY0YzBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADH6jmBppJPPxwJGlGi3yfyo8g6RKwK4sPqTQSfG+5+D5m6wpn2/d7tV /vYLdgrW4GRDefd3RWCzSBX2ZzMYJbNwHF74Op2BDHB9lSG9d1laOT8mhuGZdt8r ToeBQrHtLjuqvwe2TtijJ1iFZuV+lgmu8yrwewcoIe7dZ7Qs616p+Syrf5qlMI0s 3YHaYWNf+mrGaY2vK4I46tBnqMFD+gT+fG6ORiTtPdhDpAsXGehlfjsPu1DOItu6 Q9gk6JGa6O3K0M8BcQOMkSza5Q9dyZI64rHu0df9w1xETDLtQGsWBGntYeqnPGQH i9U+1mcOmcHTPweoSKz3b+OEZkwkL+U= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:38 2025 by rpki-client