$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4aca9b1-d196-3cff-b72b-59dbd81c3f7b.roa File: b4aca9b1-d196-3cff-b72b-59dbd81c3f7b.roa (raw, json) Hash identifier: 1sfla4vTn6ToAzfo+slT0fl7GETjT7hDm2Wk69+GuWs= Subject key identifier: CD:84:12:D5:88:30:A4:DC:7D:57:43:1A:3F:66:1C:36:DC:A1:17:D0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848EF614D473D45B6D43DB15A80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4aca9b1-d196-3cff-b72b-59dbd81c3f7b.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 15083 IP address blocks: 23.27.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:4d:47:3d:45:b6:d4:3d:b1:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=4b51b901-2068-4b18-8950-d141e9e5c86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f5:63:af:8b:ba:dd:9a:c3:b9:d3:47:13:df: d3:67:cc:16:28:64:31:3c:50:0e:eb:dc:4f:9c:db: 0f:97:f0:dd:69:0b:83:d5:0d:63:aa:26:df:d9:55: ae:22:4c:cb:d7:c0:3a:03:9c:29:89:c2:fd:54:75: d8:4b:b2:11:cf:50:32:d2:fe:e3:de:e8:37:6c:c9: f3:85:9c:74:26:1f:29:a8:fd:8b:02:1c:5e:5b:15: 4d:90:a1:70:5c:55:ac:cf:fd:da:f4:6b:78:e7:af: 11:0b:59:f3:c7:12:aa:31:42:8e:2f:22:11:83:fe: de:20:93:a9:b5:5c:c0:aa:c5:a5:f0:c9:18:91:35: a7:17:87:f1:46:0a:15:a0:84:17:16:47:23:19:75: 00:19:fd:ad:bd:ba:19:94:cb:6b:9b:af:11:ed:d0: b6:21:05:f1:ea:ab:b6:a5:59:4a:a6:ac:aa:f4:0c: d2:17:2b:fe:db:57:1e:55:28:5d:42:49:71:81:bd: 47:2f:0f:2a:f4:78:c7:98:49:58:70:de:f3:12:fc: e5:a9:b3:cc:e8:5d:f8:a8:b3:6d:c6:77:91:3c:bd: aa:8a:b6:a5:82:89:82:d4:a8:36:c3:4f:18:1c:56: a6:c8:de:ee:cb:4c:4b:87:d0:01:bf:59:5b:6e:fe: a8:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:84:12:D5:88:30:A4:DC:7D:57:43:1A:3F:66:1C:36:DC:A1:17:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4aca9b1-d196-3cff-b72b-59dbd81c3f7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:17:ab:85:6d:cf:b5:3a:ba:4a:cc:b3:15:78:b0:7b:4c:43: 73:75:e0:0b:e3:52:4f:2a:e5:a3:bd:42:4c:e2:07:63:61:4c: 47:0d:31:e7:af:60:18:30:b4:f0:40:fb:6a:d3:b2:85:be:a1: d2:7f:72:78:b5:b1:24:7e:c2:2b:50:10:21:5a:16:0a:4f:4b: 7d:78:6d:b4:e4:72:0d:77:9f:c7:73:e7:f2:19:14:12:65:66: df:a9:d2:8b:5b:ea:93:ff:83:14:18:23:97:2e:2f:d7:31:ac: 20:51:86:1b:e2:be:ef:36:63:9a:bd:53:20:58:5d:5c:b0:13: cc:56:9b:9b:79:1f:be:87:28:ca:6e:90:de:64:12:96:d9:31: c6:b1:4e:1e:a4:ca:7f:57:ca:ee:a5:74:c9:97:ba:02:7d:2b: ac:f0:76:13:5c:a0:9d:b2:b7:34:8b:b8:ae:75:fa:06:9b:42: 8b:85:ff:96:a6:fc:d8:ac:ae:c0:99:6f:ac:a2:b7:ac:37:2d: 7a:cb:57:a1:e7:ca:e5:9d:13:1c:bf:45:b7:d3:39:9b:7b:e2: 55:10:f3:91:f5:0b:91:39:bf:d7:ee:27:0a:d6:91:a5:5f:29: e9:dc:99:a3:31:a5:5f:c3:a2:06:bd:2b:e0:dd:13:70:78:6a: fa:82:3b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYU1HPUW21D2xWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NGI1MWI5MDEtMjA2OC00YjE4LTg5NTAtZDE0MWU5ZTVjODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9PVjr4u63ZrDudNHE9/TZ8wWKGQxPFAO69xP nNsPl/DdaQuD1Q1jqibf2VWuIkzL18A6A5wpicL9VHXYS7IRz1Ay0v7j3ug3bMnz hZx0Jh8pqP2LAhxeWxVNkKFwXFWsz/3a9Gt4568RC1nzxxKqMUKOLyIRg/7eIJOp tVzAqsWl8MkYkTWnF4fxRgoVoIQXFkcjGXUAGf2tvboZlMtrm68R7dC2IQXx6qu2 pVlKpqyq9AzSFyv+21ceVShdQklxgb1HLw8q9HjHmElYcN7zEvzlqbPM6F34qLNt xneRPL2qiralgomC1Kg2w08YHFamyN7uy0xLh9ABv1lbbv6ogQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM2EEtWIMKTcfVdDGj9mHDbcoRfQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjRhY2E5YjEtZDE5Ni0z Y2ZmLWI3MmItNTlkYmQ4MWMzZjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADMXq4Vtz7U6ukrMsxV4sHtMQ3N14AvjUk8q5aO9QkziB2NhTEcNMeev YBgwtPBA+2rTsoW+odJ/cni1sSR+witQECFaFgpPS314bbTkcg13n8dz5/IZFBJl Zt+p0otb6pP/gxQYI5cuL9cxrCBRhhvivu82Y5q9UyBYXVywE8xWm5t5H76HKMpu kN5kEpbZMcaxTh6kyn9Xyu6ldMmXugJ9K6zwdhNcoJ2ytzSLuK51+gabQouF/5am /NisrsCZb6yit6w3LXrLV6HnyuWdExy/RbfTOZt74lUQ85H1C5E5v9fuJwrWkaVf KencmaMxpV/Doga9K+DdE3B4avqCO0s= -----END CERTIFICATE-----Generated at Fri Mar 14 10:30:06 2025 by rpki-client