$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa File: b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa (raw, json) Hash identifier: kQG8mVQb7GeBVnt17qjmo5gTkYC5aFYLsoexNPvhOWY= Subject key identifier: 36:46:42:A2:22:0E:CA:5B:05:9D:3A:C0:45:41:BE:66:DF:C1:6D:5E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584893EB2A160FC3BCCCA535C100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa Signing time: Fri 17 Jan 2025 19:44:32 +0000 ROA not before: Fri 17 Jan 2025 19:44:32 +0000 ROA not after: Thu 17 Apr 2025 18:44:32 +0000 asID: 396356 IP address blocks: 23.27.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:93:eb:2a:16:0f:c3:bc:cc:a5:35:c1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 17 19:44:32 2025 GMT Not After : Apr 17 18:44:32 2025 GMT Subject: CN=021ba33d-d0a5-4d6e-b1f1-c3d9b327e56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:93:da:20:06:66:0b:3a:52:f0:63:69:0c:ae: 37:32:6d:cb:11:0e:5c:04:2d:05:1f:80:cf:b0:a0: ca:cb:b2:06:0c:2c:ab:e3:6e:49:f5:c3:c8:eb:8e: cf:3c:13:69:bd:81:d8:69:90:6f:3e:03:d3:ab:f3: 38:82:77:09:dd:34:60:c9:e2:77:3e:4e:39:99:42: 1b:e0:6a:e7:9b:0a:2a:6d:ba:8a:5c:a9:bf:a5:84: a4:ee:59:0e:55:37:fc:a8:d4:fc:62:c1:a0:35:e7: 37:f3:0c:c3:45:e2:7a:e8:44:c2:36:2a:d0:22:0c: 17:34:c2:ec:1e:af:b4:c6:76:28:e6:f6:b6:dd:90: 43:b1:1b:a2:ee:1d:99:fa:d6:e3:1f:10:cb:58:e7: 98:f6:4d:b4:b1:90:be:bd:c3:fc:68:af:e4:b3:ba: ac:b3:b0:5e:cc:9c:53:a6:5b:07:09:6e:82:86:a8: 78:e1:c1:f7:5f:c1:89:ec:d3:dd:0f:4a:34:14:f3: 7f:d1:25:ce:b2:d5:f9:3e:48:3a:9c:74:00:91:51: e4:62:b9:66:fa:27:03:ba:35:77:9c:1c:cf:f0:21: 73:8d:e1:f8:36:1d:bd:f5:ca:26:81:60:8a:7f:ea: eb:a0:0c:61:17:44:28:22:d6:a6:8a:a1:8c:9a:1a: 1c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:46:42:A2:22:0E:CA:5B:05:9D:3A:C0:45:41:BE:66:DF:C1:6D:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b878c6c2-281e-3851-8f79-4fc4b2f5d39d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:09:64:ee:3e:cc:6a:b6:fa:6c:7d:58:7a:55:73:af:65:9e: 86:aa:b4:68:4e:b5:c0:32:02:55:7a:a7:78:ef:3c:6d:1d:6b: f2:b4:77:a7:88:19:d3:bc:fb:5c:0f:45:15:08:6e:8e:18:92: 49:8a:d2:f1:e8:69:ea:ba:4b:ff:42:ea:f9:73:c0:ce:17:83: 83:56:a9:d0:bd:11:f7:90:1a:2c:79:a9:ec:e1:ef:a7:13:31: 4e:f6:ff:57:cf:b4:e5:f0:7b:9e:8c:55:59:a3:8c:36:3b:e2: 9a:e7:70:43:87:af:12:71:18:7c:a9:41:01:02:98:c6:f5:53: df:a0:8a:07:5d:21:ef:bb:1b:e3:27:ce:12:33:f0:67:3d:1e: 24:b3:22:25:45:f1:99:b8:cf:00:8b:31:52:62:a3:8f:36:4f: 1c:43:9c:65:1c:b6:ac:d3:1c:1c:6c:c9:ba:99:d1:b9:49:f6: 47:e7:75:2c:52:29:30:b1:d5:75:6b:30:cb:bf:6c:c1:81:12: 2f:78:a6:1b:12:9d:96:d6:ee:90:e7:2e:a3:6c:af:f8:61:2d: c6:2c:20:26:a7:44:58:42:5e:84:f3:fe:f6:f7:12:2a:19:62: a1:fc:dd:3d:3a:a1:39:d0:bf:43:6f:8f:8f:9d:8e:56:4f:d3: b6:1d:5e:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiT6yoWD8O8zKU1wQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExNzE5NDQzMloXDTI1MDQxNzE4NDQzMlowLzEtMCsGA1UEAxMk MDIxYmEzM2QtZDBhNS00ZDZlLWIxZjEtYzNkOWIzMjdlNTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5PaIAZmCzpS8GNpDK43Mm3LEQ5cBC0FH4DP sKDKy7IGDCyr425J9cPI647PPBNpvYHYaZBvPgPTq/M4gncJ3TRgyeJ3Pk45mUIb 4GrnmwoqbbqKXKm/pYSk7lkOVTf8qNT8YsGgNec38wzDReJ66ETCNirQIgwXNMLs Hq+0xnYo5va23ZBDsRui7h2Z+tbjHxDLWOeY9k20sZC+vcP8aK/ks7qss7BezJxT plsHCW6Chqh44cH3X8GJ7NPdD0o0FPN/0SXOstX5Pkg6nHQAkVHkYrlm+icDujV3 nBzP8CFzjeH4Nh299comgWCKf+rroAxhF0QoItamiqGMmhoc2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZGQqIiDspbBZ06wEVBvmbfwW1eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjg3OGM2YzItMjgxZS0z ODUxLThmNzktNGZjNGIyZjVkMzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxveMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8JZO4+zGq2+mx9WHpVc69lnoaqtGhOtcAyAlV6p3jvPG0da/K0d6eI GdO8+1wPRRUIbo4YkkmK0vHoaeq6S/9C6vlzwM4Xg4NWqdC9EfeQGix5qezh76cT MU72/1fPtOXwe56MVVmjjDY74prncEOHrxJxGHypQQECmMb1U9+gigddIe+7G+Mn zhIz8Gc9HiSzIiVF8Zm4zwCLMVJio482TxxDnGUctqzTHBxsybqZ0blJ9kfndSxS KTCx1XVrMMu/bMGBEi94phsSnZbW7pDnLqNsr/hhLcYsICanRFhCXoTz/vb3EioZ YqH83T06oTnQv0Nvj4+djlZP07YdXl0= -----END CERTIFICATE-----Generated at Sat Apr 5 02:51:59 2025 by rpki-client