$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa File: ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa (raw, json) Hash identifier: IiD2p8t4/upxH6j9OsyCCOfmflv+4BQh+0ekLmzwBo4= Subject key identifier: 69:07:E8:D3:AC:9B:95:8E:79:EE:6B:10:98:94:A3:5B:AC:3C:C6:68 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AC60DAD315A1EEF28CBF5CA0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa Signing time: Sun 26 Jan 2025 14:00:52 +0000 ROA not before: Sun 26 Jan 2025 14:00:52 +0000 ROA not after: Sat 26 Apr 2025 13:00:52 +0000 asID: 11404 IP address blocks: 23.27.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:60:da:d3:15:a1:ee:f2:8c:bf:5c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 26 14:00:52 2025 GMT Not After : Apr 26 13:00:52 2025 GMT Subject: CN=1ecb074f-e6df-4ab8-ad03-ed5c6866a1a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:30:d2:d2:2b:0f:dc:2c:e0:8a:85:3e:99:e0: 4d:1b:be:22:e1:f4:8e:6b:ae:e6:53:84:1b:60:ea: f7:83:d3:6f:39:9e:51:5f:ed:9a:94:b8:59:e0:a4: ac:6d:58:ee:e9:27:41:4b:eb:8f:3e:63:1d:62:9e: 52:e7:fb:27:4f:54:b4:6b:66:b5:5b:7f:8e:a6:8e: de:a5:28:3b:1e:6a:74:53:43:1f:fd:f3:d2:f9:1d: 4e:67:d5:04:2e:28:12:a0:ea:5b:f0:56:03:4a:a0: 34:41:7e:28:71:6d:78:1a:65:75:55:6a:95:b4:07: 4d:05:54:51:c6:cc:9a:ab:3d:66:da:f9:9e:6a:48: a8:19:da:70:83:23:b0:18:9f:e1:0c:cc:4d:ae:5d: 39:7e:94:84:c7:45:de:da:90:9d:b2:83:e0:a1:59: 6a:89:89:0c:4e:cf:6b:fa:7a:9c:22:df:96:5d:e5: 73:fe:ed:89:3c:37:5f:0a:f6:44:71:ef:14:33:a5: 8f:29:cc:80:36:9f:7b:9d:4f:03:77:21:00:13:ca: 6b:29:29:2b:ae:0b:e0:47:a6:f9:94:16:0b:72:57: d2:f4:07:90:72:2c:b8:9c:fe:5c:bd:ba:aa:cd:44: 19:ab:50:14:7e:24:d4:10:54:35:94:36:f0:dd:87: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:E8:D3:AC:9B:95:8E:79:EE:6B:10:98:94:A3:5B:AC:3C:C6:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ba7ae8d2-8c37-359d-93dd-a2e86b6b4141.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:ee:99:78:07:2f:e0:1c:35:ba:64:10:bc:cd:cd:33:b2:5c: aa:0c:fb:fe:fa:ad:9d:ee:7d:41:c2:68:67:15:67:f8:32:37: e2:3c:61:76:89:1f:dc:f0:81:56:f2:87:51:8f:94:73:5a:ae: 52:73:97:30:8e:0d:1b:b7:3c:4e:23:44:a9:7a:f7:b8:16:60: 66:9b:80:23:af:c2:03:f8:ab:ac:1b:ff:ae:15:0b:f1:78:b3: 76:d4:ef:de:c8:fa:b7:1b:52:a3:6a:13:fe:da:9a:96:14:31: 74:8f:e4:a5:11:3a:9e:ad:9b:f2:26:57:b2:27:67:c5:d9:08: 9a:c8:e7:1c:88:03:a8:fd:6f:bf:14:05:38:98:42:48:a1:97: cc:b8:1f:86:51:92:7b:98:2f:1f:35:73:e7:39:c6:57:23:83: 2c:6a:af:1e:ab:b9:cb:a7:a3:b8:2c:25:aa:6b:4d:05:59:1f: 21:41:78:89:e0:db:59:18:07:2a:6e:4a:e9:e2:39:90:f0:0f: cd:8b:8e:d9:71:05:4f:99:b4:78:61:ff:34:cf:12:47:28:94: 95:82:48:ce:4c:b0:6e:7f:d8:03:99:e8:86:90:6c:b0:4a:37: 7d:b9:16:1c:22:fa:c1:42:93:07:75:eb:27:c3:c2:5e:83:d9: fd:e4:81:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisYNrTFaHu8oy/XKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNjE0MDA1MloXDTI1MDQyNjEzMDA1MlowLzEtMCsGA1UEAxMk MWVjYjA3NGYtZTZkZi00YWI4LWFkMDMtZWQ1YzY4NjZhMWE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTDS0isP3CzgioU+meBNG74i4fSOa67mU4Qb YOr3g9NvOZ5RX+2alLhZ4KSsbVju6SdBS+uPPmMdYp5S5/snT1S0a2a1W3+Opo7e pSg7Hmp0U0Mf/fPS+R1OZ9UELigSoOpb8FYDSqA0QX4ocW14GmV1VWqVtAdNBVRR xsyaqz1m2vmeakioGdpwgyOwGJ/hDMxNrl05fpSEx0Xe2pCdsoPgoVlqiYkMTs9r +nqcIt+WXeVz/u2JPDdfCvZEce8UM6WPKcyANp97nU8DdyEAE8prKSkrrgvgR6b5 lBYLclfS9AeQciy4nP5cvbqqzUQZq1AUfiTUEFQ1lDbw3YcRYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkH6NOsm5WOee5rEJiUo1usPMZoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmE3YWU4ZDItOGMzNy0z NTlkLTkzZGQtYTJlODZiNmI0MTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJnumXgHL+AcNbpkELzNzTOyXKoM+/76rZ3ufUHCaGcVZ/gyN+I8YXaJ H9zwgVbyh1GPlHNarlJzlzCODRu3PE4jRKl697gWYGabgCOvwgP4q6wb/64VC/F4 s3bU797I+rcbUqNqE/7ampYUMXSP5KUROp6tm/ImV7InZ8XZCJrI5xyIA6j9b78U BTiYQkihl8y4H4ZRknuYLx81c+c5xlcjgyxqrx6rucuno7gsJaprTQVZHyFBeIng 21kYBypuSuniOZDwD82LjtlxBU+ZtHhh/zTPEkcolJWCSM5MsG5/2AOZ6IaQbLBK N325Fhwi+sFCkwd16yfDwl6D2f3kgbo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:34:54 2025 by rpki-client