$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba5275a4-cccd-3971-a397-4636fb638c5d.roa File: ba5275a4-cccd-3971-a397-4636fb638c5d.roa (raw, json) Hash identifier: 5Zqo9FtYGnYkFbBcSssXIF5Pgdmle8WtZDVjiA58cok= Subject key identifier: 02:DA:37:46:C0:B1:E2:B0:0A:95:3C:0C:C2:D0:4F:92:DC:21:A2:FB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AC60DA2B9E914A5340480100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba5275a4-cccd-3971-a397-4636fb638c5d.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 400899 IP address blocks: 23.27.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:da:2b:9e:91:4a:53:40:48:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=602cab89-b489-4cc4-8937-4be8853c5e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:75:f1:ab:ff:b4:e6:c6:8d:c9:80:98:15:7e: df:3c:78:8e:e0:20:a1:c7:3b:47:b5:2e:80:2b:20: eb:42:81:c4:b0:b3:7d:40:5b:a4:20:ec:cd:9e:23: 1e:0b:7f:2f:0f:7a:e4:26:c4:c3:c2:c4:d6:99:53: be:2d:53:11:7f:f8:ef:0b:b8:fb:46:42:9f:a3:d8: 3d:b5:52:17:a2:aa:97:76:3d:6b:6e:b8:51:ed:3e: af:63:b8:48:05:0e:fe:b8:ea:b5:28:3b:7d:74:22: ea:97:be:61:bd:b8:02:14:aa:24:eb:3a:f5:b3:db: b2:06:de:04:bb:d1:d9:01:24:84:1e:d8:c8:94:52: 8b:46:c8:61:f6:1a:0f:cb:4d:ac:10:17:a3:86:cb: 69:ea:af:9a:5e:5d:78:b8:3d:09:09:6b:14:7b:72: e9:3c:10:13:da:4e:e4:93:75:66:9d:19:9b:c7:b8: 3e:bb:b1:8b:66:84:b6:4a:0c:64:98:62:7c:3b:74: 02:d9:5f:d2:b2:95:14:88:8d:75:0a:42:e8:92:64: ed:8c:98:00:ce:0c:17:6e:06:12:92:59:4f:95:66: 6a:f9:22:b1:d0:81:a0:ec:83:30:07:97:55:20:9e: d0:02:77:90:08:51:79:2b:fc:3e:4d:4b:93:93:36: 6d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:DA:37:46:C0:B1:E2:B0:0A:95:3C:0C:C2:D0:4F:92:DC:21:A2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba5275a4-cccd-3971-a397-4636fb638c5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:e8:44:48:d2:ce:ac:10:58:19:1b:03:2b:15:98:c6:8d:0b: 1f:b2:92:81:f0:18:60:c8:d4:1d:3c:66:81:5b:9b:60:f9:a6: df:7a:43:87:75:ea:bb:09:9e:a0:47:a3:c1:fb:83:14:07:7a: 7a:c4:de:fe:79:28:b7:c0:49:cf:ec:26:00:85:4d:aa:32:b2: 8e:85:17:99:ae:1b:dc:fa:16:72:05:19:a3:de:e8:ad:15:33: e7:d0:64:88:1f:c0:04:00:7e:7c:2f:c6:44:d5:6f:a4:5c:7b: 81:38:40:9b:cb:83:fe:4b:d6:6d:59:47:28:75:e1:af:e7:f0: 0f:3c:aa:25:4a:8a:68:e3:25:79:27:b1:16:be:aa:16:f7:ea: 00:b1:7b:90:dc:54:f9:ba:a7:8b:64:1f:01:78:19:4f:9f:a8: e7:c5:70:4a:dc:99:04:ef:9b:a6:d5:94:d9:9c:6d:87:cb:5f: 34:a7:cf:70:80:01:c0:bd:eb:d5:79:69:f1:c9:27:e9:ad:94: 1d:01:45:37:2b:8b:8a:47:26:f4:3f:7a:54:eb:4f:ce:ac:25: 29:18:4a:43:15:44:09:81:6e:45:ec:ca:7b:c1:ee:d7:02:5f: 64:4b:43:c5:85:ec:cd:21:5d:c5:13:33:cd:fe:d2:e4:42:23: 25:46:08:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNornpFKU0BIAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk NjAyY2FiODktYjQ4OS00Y2M0LTg5MzctNGJlODg1M2M1ZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHXxq/+05saNyYCYFX7fPHiO4CChxztHtS6A KyDrQoHEsLN9QFukIOzNniMeC38vD3rkJsTDwsTWmVO+LVMRf/jvC7j7RkKfo9g9 tVIXoqqXdj1rbrhR7T6vY7hIBQ7+uOq1KDt9dCLql75hvbgCFKok6zr1s9uyBt4E u9HZASSEHtjIlFKLRshh9hoPy02sEBejhstp6q+aXl14uD0JCWsUe3LpPBAT2k7k k3VmnRmbx7g+u7GLZoS2SgxkmGJ8O3QC2V/SspUUiI11CkLokmTtjJgAzgwXbgYS kllPlWZq+SKx0IGg7IMwB5dVIJ7QAneQCFF5K/w+TUuTkzZtZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFALaN0bAseKwCpU8DMLQT5LcIaL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmE1Mjc1YTQtY2NjZC0z OTcxLWEzOTctNDYzNmZiNjM4YzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACToREjSzqwQWBkbAysVmMaNCx+ykoHwGGDI1B08ZoFbm2D5pt96Q4d1 6rsJnqBHo8H7gxQHenrE3v55KLfASc/sJgCFTaoyso6FF5muG9z6FnIFGaPe6K0V M+fQZIgfwAQAfnwvxkTVb6Rce4E4QJvLg/5L1m1ZRyh14a/n8A88qiVKimjjJXkn sRa+qhb36gCxe5DcVPm6p4tkHwF4GU+fqOfFcErcmQTvm6bVlNmcbYfLXzSnz3CA AcC969V5afHJJ+mtlB0BRTcri4pHJvQ/elTrT86sJSkYSkMVRAmBbkXsynvB7tcC X2RLQ8WF7M0hXcUTM83+0uRCIyVGCF0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:04 2025 by rpki-client