$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa File: f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa (raw, json) Hash identifier: gDlV7MVLSW+U1rc/FioE+JaD4Ls2kMIJpWVXvb+RVL0= Subject key identifier: 08:59:1E:54:64:0D:FB:72:C7:69:DF:95:DB:CB:0B:CC:86:B4:92:43 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8C0719221B601B166F00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 149440 IP address blocks: 23.27.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:8c:07:19:22:1b:60:1b:16:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=a21c749d-3b35-4893-926b-d08303f069e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:a7:2a:6b:52:fa:a4:fc:08:75:98:36:72: f4:b0:15:c1:2a:04:e0:fc:e0:10:5f:ce:69:ed:07: 33:a0:70:07:f2:8f:0b:5e:27:9e:65:d3:8c:05:86: b3:00:36:d7:0d:2b:0c:47:81:31:3f:c2:05:e9:c7: 2d:10:05:f4:f9:33:b8:94:ce:ae:fd:5a:41:81:6f: 77:9f:9d:30:0f:74:64:d1:c5:ea:e5:81:ba:0c:85: 19:29:50:86:cd:b7:ed:63:10:b3:9b:58:eb:f0:c7: 26:c0:b3:50:ca:14:fe:63:9c:e8:e2:9d:e3:60:64: 11:a4:64:48:e4:b0:37:a3:79:e9:6a:b5:31:3e:5e: c8:3c:3d:75:1b:f9:74:82:72:5f:cb:31:a3:ef:b0: de:e9:09:ae:24:83:b1:cb:98:c8:0f:05:51:a4:f6: c7:32:cf:57:ce:ab:5a:4a:06:55:6f:9d:1c:66:2a: 96:b2:c6:e4:49:f1:47:43:36:53:b6:a1:20:67:04: 2f:a4:a3:aa:bc:72:69:15:79:79:bd:f5:e9:b7:5c: f6:93:21:cc:dc:b9:dc:76:5f:4c:33:f2:af:55:5e: 42:34:91:55:93:b1:fa:9f:e5:e7:e7:05:79:e5:a9: 7f:59:e7:c9:4f:76:30:e6:55:28:39:b6:2b:ee:bd: 27:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:59:1E:54:64:0D:FB:72:C7:69:DF:95:DB:CB:0B:CC:86:B4:92:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:7d:19:8a:d6:74:da:55:36:c5:c8:48:7d:7e:ff:fb:8f:87: 97:ba:cf:da:7c:3d:92:37:1b:6f:bc:0b:8b:56:ef:d6:7d:69: 86:f2:1a:ed:99:af:91:8a:10:7d:aa:ba:60:2b:7a:b8:dc:92: 2e:d2:e4:ec:70:bc:68:29:43:63:02:0c:f8:a4:7b:32:28:72: 68:f0:89:01:94:c2:d0:9e:78:ef:6e:ee:58:aa:75:f6:83:f0: 2d:9d:52:17:5d:90:ca:39:99:4b:7f:9c:dc:48:6f:ac:4f:4a: d9:ad:80:59:66:a5:20:0a:89:ff:e8:f9:a7:41:c5:ad:76:01: 38:6e:40:a8:12:9e:8b:38:38:61:68:2d:50:3c:b2:0d:91:c6: 00:ad:1a:ce:d7:4f:97:78:db:5d:84:b0:6c:77:28:9d:1d:47: 5f:ab:1d:bd:28:e2:a8:cc:eb:c9:e7:95:26:5f:19:6d:40:4a: c0:6a:1b:15:31:fd:18:22:67:70:14:92:06:1f:97:11:29:6a: 98:4d:0e:c0:f4:c0:14:6f:a5:d0:af:68:95:7b:a7:74:1b:91: 19:0f:36:c6:cd:8a:35:0b:f8:3b:11:e5:01:dc:c7:dc:ab:48: 30:50:5e:a5:8a:8c:dc:cf:b7:a1:0d:95:91:a3:f2:55:d6:9e: b9:1e:52:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4wHGSIbYBsWbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YTIxYzc0OWQtM2IzNS00ODkzLTkyNmItZDA4MzAzZjA2OWUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YOnKmtS+qT8CHWYNnL0sBXBKgTg/OAQX85p 7QczoHAH8o8LXieeZdOMBYazADbXDSsMR4ExP8IF6cctEAX0+TO4lM6u/VpBgW93 n50wD3Rk0cXq5YG6DIUZKVCGzbftYxCzm1jr8McmwLNQyhT+Y5zo4p3jYGQRpGRI 5LA3o3nparUxPl7IPD11G/l0gnJfyzGj77De6QmuJIOxy5jIDwVRpPbHMs9Xzqta SgZVb50cZiqWssbkSfFHQzZTtqEgZwQvpKOqvHJpFXl5vfXpt1z2kyHM3Lncdl9M M/KvVV5CNJFVk7H6n+Xn5wV55al/WefJT3Yw5lUoObYr7r0newIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhZHlRkDftyx2nfldvLC8yGtJJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjEwY2UxYzEtMTJiMy0z NzFhLTkxMWItNWRjNDdjMWM0NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx9GYrWdNpVNsXISH1+//uPh5e6z9p8PZI3G2+8C4tW79Z9aYbyGu2Z r5GKEH2qumArerjcki7S5OxwvGgpQ2MCDPikezIocmjwiQGUwtCeeO9u7liqdfaD 8C2dUhddkMo5mUt/nNxIb6xPStmtgFlmpSAKif/o+adBxa12AThuQKgSnos4OGFo LVA8sg2RxgCtGs7XT5d4212EsGx3KJ0dR1+rHb0o4qjM68nnlSZfGW1ASsBqGxUx /RgiZ3AUkgYflxEpaphNDsD0wBRvpdCvaJV7p3QbkRkPNsbNijUL+DsR5QHcx9yr SDBQXqWKjNzPt6ENlZGj8lXWnrkeUnQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:35 2025 by rpki-client