$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c789f670-4cc3-3248-a1de-9f0da0358a6d.roa File: c789f670-4cc3-3248-a1de-9f0da0358a6d.roa (raw, json) Hash identifier: eOx/+KbUwVbamHHeJxsgpOy8dyZjWp8/VlGKJz9a8S8= Subject key identifier: 6D:01:7E:5E:09:2C:F6:A9:0A:B5:D6:D0:72:C8:D8:28:3D:F2:C8:1F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584858A0418431F3B432D3FB3300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c789f670-4cc3-3248-a1de-9f0da0358a6d.roa Signing time: Fri 27 Dec 2024 14:00:52 +0000 ROA not before: Fri 27 Dec 2024 14:00:52 +0000 ROA not after: Thu 27 Mar 2025 13:00:52 +0000 asID: 12083 IP address blocks: 23.27.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:58:a0:41:84:31:f3:b4:32:d3:fb:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 27 14:00:52 2024 GMT Not After : Mar 27 13:00:52 2025 GMT Subject: CN=3f23cd98-4d67-42d9-951e-b23eb8baddbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:52:bd:0d:17:6e:56:cb:2b:24:9e:88:71:73: 09:53:b1:c0:a0:93:c6:a5:c7:62:d1:28:e1:27:80: a5:24:4f:d1:35:b7:c5:10:b8:03:63:26:f4:54:8b: cc:3b:cc:1e:cb:d3:71:98:7b:4c:34:1e:d4:8f:2a: 9f:d3:e2:f2:c0:ff:86:05:e5:2a:31:a0:73:eb:71: 9e:e1:27:32:9a:8d:f5:eb:25:90:28:77:36:a0:aa: ad:ec:60:3c:d2:29:4b:d8:0a:65:37:d1:68:ec:b0: bf:3b:b2:39:71:ed:8d:33:9d:e0:7a:be:66:cb:cb: 38:e6:5f:59:78:6d:a7:07:8b:47:d0:54:5d:05:0b: c6:d9:53:ff:c7:53:f7:14:02:99:75:a6:38:20:87: f3:7e:00:76:65:3d:d5:b6:a2:73:8f:cf:aa:b8:8e: 7f:39:3a:0c:39:96:a0:b2:43:e2:d9:71:35:a3:66: 57:bb:04:86:6a:bd:50:f4:9a:1a:86:21:6d:3a:2f: 91:90:0f:12:47:a4:2f:8e:0c:9f:e8:76:db:4f:be: cc:ff:bc:fd:33:dc:68:aa:25:6f:ac:fa:4f:44:11: af:ee:e8:51:60:66:42:d8:2c:04:8b:85:c1:fe:9f: e5:a2:91:f9:67:0c:a6:d1:58:89:b0:e8:43:77:75: 41:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:01:7E:5E:09:2C:F6:A9:0A:B5:D6:D0:72:C8:D8:28:3D:F2:C8:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c789f670-4cc3-3248-a1de-9f0da0358a6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:f1:4e:a6:52:f0:04:14:ef:51:d5:27:bf:dc:e3:35:fd:31: 08:24:df:86:c0:f5:da:19:f9:a1:92:94:54:3b:52:56:30:61: b3:79:d7:3d:37:52:83:67:68:54:88:cf:91:e9:2f:8a:a6:34: 21:8f:23:28:a9:8d:c3:1e:b7:05:07:57:72:0e:5c:33:7d:3f: a3:d6:ef:d0:c5:7c:5b:ae:68:36:9e:3a:ba:29:82:d5:fa:dc: dc:a4:14:6e:77:eb:10:09:3c:48:25:cc:ba:91:de:c8:4e:7a: 17:4c:7a:f0:16:0f:3c:6c:68:d3:b2:fa:fe:83:bd:30:65:ec: 59:9c:fe:6c:fb:19:c7:79:73:0e:1c:5a:d1:a4:7f:61:ca:46: 77:76:00:14:cd:31:7d:04:56:fa:64:7c:dc:18:37:9f:4f:0c: a0:76:d9:c3:3c:77:c9:57:a0:ad:c9:1e:1f:00:6a:5c:f6:97: 9e:42:a4:e2:73:34:bd:20:9a:47:3c:12:5f:dc:8a:1f:4f:32: 68:2d:1b:7e:18:60:be:76:fe:01:e7:e3:a5:4a:15:f4:fb:4f: 82:ee:c7:1f:69:c2:5b:71:29:f8:39:b4:85:7f:78:91:37:cb: 61:e6:cc:96:9b:79:9c:6e:cb:f9:df:ef:8f:2e:58:4c:bb:ae: bd:e2:c7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhYoEGEMfO0MtP7MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIyNzE0MDA1MloXDTI1MDMyNzEzMDA1MlowLzEtMCsGA1UEAxMk M2YyM2NkOTgtNGQ2Ny00MmQ5LTk1MWUtYjIzZWI4YmFkZGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1K9DRduVssrJJ6IcXMJU7HAoJPGpcdi0Sjh J4ClJE/RNbfFELgDYyb0VIvMO8wey9NxmHtMNB7Ujyqf0+LywP+GBeUqMaBz63Ge 4Scymo316yWQKHc2oKqt7GA80ilL2AplN9Fo7LC/O7I5ce2NM53ger5my8s45l9Z eG2nB4tH0FRdBQvG2VP/x1P3FAKZdaY4IIfzfgB2ZT3VtqJzj8+quI5/OToMOZag skPi2XE1o2ZXuwSGar1Q9JoahiFtOi+RkA8SR6Qvjgyf6HbbT77M/7z9M9xoqiVv rPpPRBGv7uhRYGZC2CwEi4XB/p/lopH5Zwym0ViJsOhDd3VBIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0Bfl4JLPapCrXW0HLI2Cg98sgfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzc4OWY2NzAtNGNjMy0z MjQ4LWExZGUtOWYwZGEwMzU4YTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/xTqZS8AQU71HVJ7/c4zX9MQgk34bA9doZ+aGSlFQ7UlYwYbN51z03 UoNnaFSIz5HpL4qmNCGPIyipjcMetwUHV3IOXDN9P6PW79DFfFuuaDaeOropgtX6 3NykFG536xAJPEglzLqR3shOehdMevAWDzxsaNOy+v6DvTBl7Fmc/mz7Gcd5cw4c WtGkf2HKRnd2ABTNMX0EVvpkfNwYN59PDKB22cM8d8lXoK3JHh8Aalz2l55CpOJz NL0gmkc8El/cih9PMmgtG34YYL52/gHn46VKFfT7T4Luxx9pwltxKfg5tIV/eJE3 y2HmzJabeZxuy/nf748uWEy7rr3ix5E= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:41 2025 by rpki-client