$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/defde584-58c1-3c30-98f5-5394d9659811.roa File: defde584-58c1-3c30-98f5-5394d9659811.roa (raw, json) Hash identifier: qg/g0uWJzunRuEF1eY8vdqqG3t52B/g+/0aCMtgHK/s= Subject key identifier: 32:DF:5A:2E:34:48:66:44:16:A4:EA:03:54:D5:E6:A8:A9:C7:64:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858494039797BFB23DDF0D38AC580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/defde584-58c1-3c30-98f5-5394d9659811.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 2914 IP address blocks: 23.27.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:79:7b:fb:23:dd:f0:d3:8a:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=9f3c11d1-9638-456b-a51d-8cfbc987c974 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:3e:f5:9c:c4:ba:b1:07:7a:67:ea:25:78:79: fb:81:e4:39:00:b9:df:87:94:cc:d5:f4:5d:56:22: b3:5c:67:6a:8d:6f:4a:5e:58:40:29:1f:51:03:f0: 09:76:41:a1:ce:33:0e:59:57:bc:7c:00:11:32:1a: 55:7a:41:3c:49:5b:ed:48:cc:c7:ed:7e:f6:96:d4: 1e:d4:95:34:ea:c3:81:92:4b:c7:51:d5:8c:1d:ab: 3f:7c:84:8f:bb:c8:73:f9:98:98:8a:ba:46:22:bb: e6:d3:57:00:33:9e:7f:22:b6:37:41:1e:2d:8a:1c: 8c:26:32:b3:21:dc:56:08:f2:18:96:1b:6b:fa:2a: c3:7b:6b:a9:6f:f6:10:b2:17:4c:51:b8:56:80:9d: c9:7f:9a:8e:30:05:cc:b6:5e:61:e1:72:14:93:3e: 2c:72:34:4d:6e:bf:aa:e6:83:30:8d:12:7d:34:38: a6:bb:a8:60:af:3d:4a:33:4e:5d:23:de:99:7c:38: 49:f7:12:98:f5:88:39:89:9d:7c:8b:1c:c7:dd:7a: c1:a2:1d:30:97:ee:22:ee:2a:7f:88:6f:d4:b5:5e: 52:16:3a:02:73:20:41:a7:7f:79:8a:e5:33:a3:58: d1:70:96:df:f5:69:46:7b:60:77:51:5c:d1:04:28: 24:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DF:5A:2E:34:48:66:44:16:A4:EA:03:54:D5:E6:A8:A9:C7:64:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/defde584-58c1-3c30-98f5-5394d9659811.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:4a:2f:ab:9a:ef:d5:a6:b1:9b:bc:15:8d:7b:4d:65:b1:ce: 28:87:2c:0d:47:d1:b5:ca:ff:42:ed:c2:94:e9:b9:65:c3:90: 88:f7:f2:78:e2:7c:bf:a2:f8:59:20:d7:a0:0e:e7:4b:c1:5d: 76:fb:d1:6a:8c:67:9c:3e:6c:c6:89:70:2b:54:5a:6d:53:47: 27:b0:f7:28:d4:2d:71:06:7e:c5:f5:19:1e:69:d0:3e:2b:fe: 2e:53:bd:42:96:8e:89:c7:89:10:74:91:24:1f:e7:c0:ef:1c: 0f:b7:51:59:97:59:8c:02:75:5b:a2:45:ab:38:68:9c:22:d7: 91:e0:df:f7:30:2e:d2:ab:9b:d0:cb:68:dc:d4:7c:8b:0a:d1: 20:92:cf:aa:fc:54:7d:9c:b6:ec:ba:e2:8d:d1:2b:6f:d4:f0: 02:a6:96:f5:2e:4c:bc:13:ef:26:9a:77:08:0a:f2:5a:ee:d1: 4d:21:bb:0b:54:63:1c:a8:05:95:f9:fc:27:b6:16:17:6d:69: 6d:80:b4:4c:1f:45:af:68:a9:9f:34:24:6c:b0:a7:3f:a2:4e: 93:a7:0d:65:a3:7b:49:7e:47:c7:62:79:fe:69:70:75:58:91: 0e:39:ea:16:23:fa:31:30:5f:c7:58:df:49:18:d6:c6:f7:44: f4:34:09:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOXl7+yPd8NOKxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk OWYzYzExZDEtOTYzOC00NTZiLWE1MWQtOGNmYmM5ODdjOTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApj71nMS6sQd6Z+oleHn7geQ5ALnfh5TM1fRd ViKzXGdqjW9KXlhAKR9RA/AJdkGhzjMOWVe8fAARMhpVekE8SVvtSMzH7X72ltQe 1JU06sOBkkvHUdWMHas/fISPu8hz+ZiYirpGIrvm01cAM55/IrY3QR4tihyMJjKz IdxWCPIYlhtr+irDe2upb/YQshdMUbhWgJ3Jf5qOMAXMtl5h4XIUkz4scjRNbr+q 5oMwjRJ9NDimu6hgrz1KM05dI96ZfDhJ9xKY9Yg5iZ18ixzH3XrBoh0wl+4i7ip/ iG/UtV5SFjoCcyBBp395iuUzo1jRcJbf9WlGe2B3UVzRBCgkPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLfWi40SGZEFqTqA1TV5qipx2QCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGVmZGU1ODQtNThjMS0z YzMwLTk4ZjUtNTM5NGQ5NjU5ODExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIBKL6ua79WmsZu8FY17TWWxziiHLA1H0bXK/0LtwpTpuWXDkIj38nji fL+i+Fkg16AO50vBXXb70WqMZ5w+bMaJcCtUWm1TRyew9yjULXEGfsX1GR5p0D4r /i5TvUKWjonHiRB0kSQf58DvHA+3UVmXWYwCdVuiRas4aJwi15Hg3/cwLtKrm9DL aNzUfIsK0SCSz6r8VH2ctuy64o3RK2/U8AKmlvUuTLwT7yaadwgK8lru0U0huwtU YxyoBZX5/Ce2FhdtaW2AtEwfRa9oqZ80JGywpz+iTpOnDWWje0l+R8dief5pcHVY kQ456hYj+jEwX8dY30kY1sb3RPQ0Cek= -----END CERTIFICATE-----Generated at Fri Apr 4 23:03:23 2025 by rpki-client