$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa File: b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa (raw, json) Hash identifier: amcKap1gJb4J06MtW4efAK/HsLIBW9yKLG8pgGCZNYg= Subject key identifier: C0:1E:99:0E:4D:2F:62:08:17:9A:96:A9:9B:ED:FC:E9:BB:E6:2B:66 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848FBF127B8319D969FC6F7CA60 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa Signing time: Mon 24 Feb 2025 02:00:38 +0000 ROA not before: Mon 24 Feb 2025 02:00:38 +0000 ROA not after: Sun 25 May 2025 01:00:38 +0000 asID: 134351 IP address blocks: 23.27.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fb:f1:27:b8:31:9d:96:9f:c6:f7:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 24 02:00:38 2025 GMT Not After : May 25 01:00:38 2025 GMT Subject: CN=8f950a40-1615-41ea-93d5-8496f47197c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:4e:12:dc:a3:da:c0:3c:64:3d:1d:7b:4c:fe: ca:eb:9f:d2:9f:1d:f5:4e:36:d9:f6:fa:e3:28:6b: b9:dd:79:64:e0:04:38:de:1e:65:3a:6f:1d:29:b6: b2:05:8b:4f:2f:51:a5:9a:a2:e4:4d:32:1d:94:3d: d9:2a:f2:b5:9a:73:c1:24:f6:a3:b2:f8:47:6a:19: 6b:88:a6:56:25:31:84:f1:1a:7f:42:d6:4c:83:c1: 11:02:46:9a:cb:46:e3:c9:28:38:f9:fc:61:09:2a: bb:39:04:5e:2e:4e:f5:57:a6:aa:7a:3d:88:46:52: da:cd:a8:8e:e6:5b:b9:bc:13:ed:45:37:a9:fb:c5: 19:34:cf:a7:a8:ec:af:41:e4:0e:9c:41:cd:18:e4: 71:b8:86:c6:8f:fe:b4:34:0b:7a:4e:8a:c0:7d:1e: 68:57:b4:78:e7:a7:b0:ee:ec:67:34:ec:58:a3:78: f1:57:ca:7e:11:ac:e7:21:e9:3e:1f:05:a5:7f:1c: 41:82:bf:4d:64:23:05:8b:67:76:13:fa:7a:e9:99: fe:4e:69:99:0b:1c:80:f0:92:b8:0d:15:86:9b:37: a5:be:af:e9:f4:54:07:63:1f:4c:5b:a6:a9:67:e9: ed:77:a1:39:68:92:4d:f3:e2:3e:c1:c3:41:2a:ae: 9f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:1E:99:0E:4D:2F:62:08:17:9A:96:A9:9B:ED:FC:E9:BB:E6:2B:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b2f6fada-cdf4-33ef-aa90-5c9b04fe3710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:fa:6f:2d:1d:a7:67:e4:59:16:7c:3a:39:fe:58:35:3b:03: 07:22:b7:fc:55:be:65:80:00:a6:2b:b3:83:35:ee:b0:cd:cd: a5:3b:3b:2f:92:7e:b5:b9:04:62:51:39:1c:a9:b5:6b:57:bf: 10:f8:d9:f8:af:de:c2:ae:be:ba:8a:b1:0e:10:e3:ce:6e:34: 98:69:6b:92:9e:f9:04:79:89:3a:73:32:63:7e:15:33:cb:4a: 55:79:92:b7:47:d0:0f:b8:5b:e3:53:43:95:b6:b2:18:80:4d: f8:c5:b4:3b:a6:a3:22:78:b8:f0:31:fa:26:c6:c6:92:b9:e7: c1:a0:21:da:b3:cf:ac:a7:a6:55:40:f5:a8:6a:7a:6f:d3:1d: 3a:ae:58:96:b6:62:92:b7:6f:28:c5:4f:2c:c4:dc:43:02:16: 7c:93:52:c6:db:47:42:58:23:07:ca:bd:0e:56:49:31:66:92: 3f:0e:37:ac:53:75:b8:d4:5d:4f:de:da:44:4a:de:2e:43:7f: 95:b2:90:89:ae:0a:94:f9:df:4e:94:4a:0a:b0:22:7a:99:fe: 39:37:d1:93:88:6e:13:03:76:5c:2f:e6:7e:50:2e:77:7e:58: f6:75:4b:f5:ae:ac:09:48:45:27:17:55:c7:f0:ef:94:27:5e: 90:9b:2f:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj78Se4MZ2Wn8b3ymAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyNDAyMDAzOFoXDTI1MDUyNTAxMDAzOFowLzEtMCsGA1UEAxMk OGY5NTBhNDAtMTYxNS00MWVhLTkzZDUtODQ5NmY0NzE5N2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoE4S3KPawDxkPR17TP7K65/Snx31TjbZ9vrj KGu53Xlk4AQ43h5lOm8dKbayBYtPL1GlmqLkTTIdlD3ZKvK1mnPBJPajsvhHahlr iKZWJTGE8Rp/QtZMg8ERAkaay0bjySg4+fxhCSq7OQReLk71V6aqej2IRlLazaiO 5lu5vBPtRTep+8UZNM+nqOyvQeQOnEHNGORxuIbGj/60NAt6TorAfR5oV7R456ew 7uxnNOxYo3jxV8p+EaznIek+HwWlfxxBgr9NZCMFi2d2E/p66Zn+TmmZCxyA8JK4 DRWGmzelvq/p9FQHYx9MW6apZ+ntd6E5aJJN8+I+wcNBKq6fkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAemQ5NL2IIF5qWqZvt/Om75itmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjJmNmZhZGEtY2RmNC0z M2VmLWFhOTAtNWM5YjA0ZmUzNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD6by0dp2fkWRZ8Ojn+WDU7Awcit/xVvmWAAKYrs4M17rDNzaU7Oy+S frW5BGJRORyptWtXvxD42fiv3sKuvrqKsQ4Q485uNJhpa5Ke+QR5iTpzMmN+FTPL SlV5krdH0A+4W+NTQ5W2shiATfjFtDumoyJ4uPAx+ibGxpK558GgIdqzz6ynplVA 9ahqem/THTquWJa2YpK3byjFTyzE3EMCFnyTUsbbR0JYIwfKvQ5WSTFmkj8ON6xT dbjUXU/e2kRK3i5Df5WykImuCpT5306USgqwInqZ/jk30ZOIbhMDdlwv5n5QLnd+ WPZ1S/WurAlIRScXVcfw75QnXpCbLxc= -----END CERTIFICATE-----Generated at Sat Apr 5 04:42:23 2025 by rpki-client