$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d08160b6-731b-3f44-9860-f735a11b0989.roa File: d08160b6-731b-3f44-9860-f735a11b0989.roa (raw, json) Hash identifier: +WkCVFXZKcdc8Sd89Esy4sBcwFdChVLNQlhkwO3BoFg= Subject key identifier: 31:BC:12:13:F3:68:52:A5:9F:86:4F:BA:1B:CD:4B:1C:0E:90:F0:0E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858489FD0A1D184B883FDB22DE880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d08160b6-731b-3f44-9860-f735a11b0989.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 7018 IP address blocks: 23.27.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:a1:d1:84:b8:83:fd:b2:2d:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=656a1263-9f0f-4598-bd6e-bbdfa72407cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6b:bd:21:00:66:67:cf:e1:db:62:4a:55:07: 0b:e2:3e:b9:56:b5:2f:b7:b1:94:27:77:62:56:91: fb:25:42:e8:73:6b:fd:c9:a2:44:4d:a6:7a:d5:14: 1c:0b:07:55:86:17:59:ab:cc:e7:88:32:c4:2a:85: 30:34:a1:fd:95:68:a5:e2:55:49:e6:29:38:39:53: 2b:60:59:b0:3c:e9:d7:fc:9e:8c:f4:d5:c8:f4:f4: 74:6b:b8:09:fb:1f:0b:c0:b3:da:a0:3d:e9:e5:7b: ee:34:2b:55:96:39:2b:6f:b2:15:e4:34:b3:5a:09: da:02:b5:80:66:94:db:f6:2b:92:51:0b:71:18:e4: e0:15:ec:54:4e:a0:54:26:e5:76:b9:3c:75:9d:c9: 2b:0b:cc:b0:da:43:f6:fc:2d:84:c0:16:85:14:0a: 52:90:35:5a:12:9b:4a:9b:61:99:10:ca:0c:8a:ce: d3:a8:a7:0c:c7:d9:89:f4:33:ca:c8:00:b6:37:bc: e9:d8:6b:9a:2a:5d:14:c9:33:80:a6:a2:e2:b4:2c: 27:f4:02:ef:5c:b4:8b:a6:bd:93:1a:10:9f:b8:ce: f0:be:4c:5f:57:ff:d7:1d:7f:22:7a:51:4a:0a:ef: eb:18:8e:21:8e:d0:40:f1:e5:1e:97:53:7d:5f:e5: e5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:BC:12:13:F3:68:52:A5:9F:86:4F:BA:1B:CD:4B:1C:0E:90:F0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d08160b6-731b-3f44-9860-f735a11b0989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:f8:73:ae:f1:62:cf:e1:66:29:83:f3:b5:c7:f9:bf:88:54: 8b:a9:b4:4f:9b:58:2b:75:96:f2:d3:76:31:a3:2e:56:9c:43: e8:11:07:88:02:35:e0:2f:3e:64:39:d6:a9:91:ee:03:11:2a: f2:6c:f2:11:24:1f:97:73:14:6d:94:8f:c8:2d:f2:a7:aa:3e: bd:4b:44:76:5f:a0:bb:78:33:4d:72:94:5e:7f:4b:91:14:f4: 37:56:c7:2f:bd:a0:3f:6b:cf:e7:f5:d2:db:9f:14:da:1b:fb: 37:47:8f:37:d0:f9:01:ef:e2:75:72:9a:31:ff:b5:87:8d:c6: 25:83:39:00:87:a1:53:c4:32:27:89:99:c9:19:68:6e:1e:0f: c2:02:bc:58:10:dc:57:25:79:f8:43:db:3d:bb:2b:6f:79:6f: f1:dc:30:6d:f2:eb:e7:e5:89:21:4b:6d:7c:3e:cd:c1:b3:0e: c9:c5:2b:f8:02:05:af:e9:ce:cc:40:59:24:48:54:1a:fd:74: 5a:26:ad:34:ff:de:fb:2c:67:0a:49:ee:4a:c5:04:9e:61:26: 3e:a7:0c:bc:29:e4:4c:a4:e3:fa:64:17:71:64:fd:99:b4:c0: 56:a9:85:8e:1e:81:d0:a4:65:cf:f0:06:59:8b:ab:e3:48:55: cb:f8:4d:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0KHRhLiD/bIt6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk NjU2YTEyNjMtOWYwZi00NTk4LWJkNmUtYmJkZmE3MjQwN2NmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGu9IQBmZ8/h22JKVQcL4j65VrUvt7GUJ3di VpH7JULoc2v9yaJETaZ61RQcCwdVhhdZq8zniDLEKoUwNKH9lWil4lVJ5ik4OVMr YFmwPOnX/J6M9NXI9PR0a7gJ+x8LwLPaoD3p5XvuNCtVljkrb7IV5DSzWgnaArWA ZpTb9iuSUQtxGOTgFexUTqBUJuV2uTx1nckrC8yw2kP2/C2EwBaFFApSkDVaEptK m2GZEMoMis7TqKcMx9mJ9DPKyAC2N7zp2GuaKl0UyTOApqLitCwn9ALvXLSLpr2T GhCfuM7wvkxfV//XHX8ielFKCu/rGI4hjtBA8eUel1N9X+XlLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDG8EhPzaFKln4ZPuhvNSxwOkPAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDA4MTYwYjYtNzMxYi0z ZjQ0LTk4NjAtZjczNWExMWIwOTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/4c67xYs/hZimD87XH+b+IVIuptE+bWCt1lvLTdjGjLlacQ+gRB4gC NeAvPmQ51qmR7gMRKvJs8hEkH5dzFG2Uj8gt8qeqPr1LRHZfoLt4M01ylF5/S5EU 9DdWxy+9oD9rz+f10tufFNob+zdHjzfQ+QHv4nVymjH/tYeNxiWDOQCHoVPEMieJ mckZaG4eD8ICvFgQ3FclefhD2z27K295b/HcMG3y6+fliSFLbXw+zcGzDsnFK/gC Ba/pzsxAWSRIVBr9dFomrTT/3vssZwpJ7krFBJ5hJj6nDLwp5Eyk4/pkF3Fk/Zm0 wFaphY4egdCkZc/wBlmLq+NIVcv4TbQ= -----END CERTIFICATE-----Generated at Wed Apr 9 16:08:51 2025 by rpki-client