$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9b697a1-2713-3a15-ad66-7b94e223f9b3.roa File: f9b697a1-2713-3a15-ad66-7b94e223f9b3.roa (raw, json) Hash identifier: G+JC6qSMmFtcqb0T33q15Qjf6f73dl3oiZQkAw9DTCU= Subject key identifier: 43:CA:AF:1D:6B:71:A1:B5:26:30:10:AF:48:7B:8A:14:32:D2:82:94 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2BA4EB4CEBC0CCF685F000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9b697a1-2713-3a15-ad66-7b94e223f9b3.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 23.27.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:a4:eb:4c:eb:c0:cc:f6:85:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=14683447-c234-456b-a81f-54e7a85a8094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:c9:a4:2c:f5:96:7b:90:eb:28:e3:b2:21:0d: f5:9f:c8:63:e8:e5:64:22:b3:be:01:e2:d2:9e:50: 8d:66:fa:23:a9:dd:91:8d:44:8e:ce:fd:d2:3e:07: c8:c6:b4:5e:d1:cb:98:e3:ea:e6:68:62:26:29:97: 4e:33:d1:8c:7f:d1:01:42:75:37:20:7d:52:1c:82: a7:a3:6d:96:06:c0:da:a1:95:b5:98:f7:9e:e1:6b: f8:5f:d9:cb:ed:1b:6f:16:e4:2d:0b:fc:30:b4:7c: c2:61:31:ee:08:42:e4:17:d3:78:32:2a:a6:53:85: aa:8e:bf:dd:a9:ee:0e:d0:97:3b:5d:ea:22:39:3d: be:5d:ff:d5:33:8b:f7:4c:05:ea:03:80:c5:c8:8b: a2:e0:4c:17:6c:b6:d6:a9:79:bb:81:39:80:8b:49: 0b:4d:8c:99:05:7f:f4:f1:41:ca:1d:e2:cd:a8:f5: 24:72:c4:c1:3f:85:8d:aa:a4:95:68:65:3a:1a:ba: ed:ce:0c:70:dd:c9:76:0c:b1:cc:b8:7a:7a:40:c2: b1:91:e1:e7:02:7e:b3:72:b6:0b:5f:9c:9c:92:d7: 4a:71:5b:6e:7c:12:23:5c:de:2f:19:f3:7c:5a:13: 5b:56:91:19:e9:1e:c2:b8:d5:3d:6a:55:5b:e0:29: a9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:CA:AF:1D:6B:71:A1:B5:26:30:10:AF:48:7B:8A:14:32:D2:82:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9b697a1-2713-3a15-ad66-7b94e223f9b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:73:9e:36:96:68:7a:ee:73:b5:8b:02:60:c4:0b:6c:36:c5: 78:40:e7:a6:1b:36:54:0f:a1:9b:22:b5:8c:80:fd:86:e5:42: 0b:85:a5:86:3a:79:dd:a8:f6:81:5f:98:b7:4c:92:b8:38:05: a6:11:e8:d6:c6:8a:c2:bb:ae:97:51:1d:ac:fa:5a:14:df:ab: 60:de:4f:1c:c2:6a:bb:77:2c:a5:6c:c1:ac:98:b7:14:6e:7f: 9b:25:68:3e:17:aa:b1:2c:47:ad:0b:dc:37:05:00:6e:f0:e4: 27:02:79:c8:5c:9c:67:c5:58:28:94:a9:d1:05:1b:35:a7:a4: 56:91:0a:ad:ec:c7:eb:25:f1:aa:e6:7b:83:20:96:24:cc:79: 8c:09:8e:13:dc:06:af:7e:c4:16:27:88:ec:d6:88:2f:87:de: 33:1c:92:41:28:09:2e:13:93:6f:85:ff:c5:a3:7f:67:b5:a8: 09:be:22:c6:00:7a:61:b7:05:ba:9a:26:da:98:99:da:99:fe: d3:cd:d0:5a:56:89:5a:4a:51:6b:5d:53:fd:05:d7:0d:57:73: a5:c8:df:47:54:19:00:b4:a0:e0:59:4f:75:94:f3:90:6f:4d: aa:03:9a:bf:4b:f4:0a:b7:2e:ab:6f:a6:f9:5b:55:01:54:4b: fe:25:30:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK6TrTOvAzPaF8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MTQ2ODM0NDctYzIzNC00NTZiLWE4MWYtNTRlN2E4NWE4MDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4smkLPWWe5DrKOOyIQ31n8hj6OVkIrO+AeLS nlCNZvojqd2RjUSOzv3SPgfIxrRe0cuY4+rmaGImKZdOM9GMf9EBQnU3IH1SHIKn o22WBsDaoZW1mPee4Wv4X9nL7RtvFuQtC/wwtHzCYTHuCELkF9N4MiqmU4Wqjr/d qe4O0Jc7XeoiOT2+Xf/VM4v3TAXqA4DFyIui4EwXbLbWqXm7gTmAi0kLTYyZBX/0 8UHKHeLNqPUkcsTBP4WNqqSVaGU6Grrtzgxw3cl2DLHMuHp6QMKxkeHnAn6zcrYL X5ycktdKcVtufBIjXN4vGfN8WhNbVpEZ6R7CuNU9alVb4CmpEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEPKrx1rcaG1JjAQr0h7ihQy0oKUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjliNjk3YTEtMjcxMy0z YTE1LWFkNjYtN2I5NGUyMjNmOWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhznjaWaHruc7WLAmDEC2w2xXhA56YbNlQPoZsitYyA/YblQguFpYY6 ed2o9oFfmLdMkrg4BaYR6NbGisK7rpdRHaz6WhTfq2DeTxzCart3LKVswayYtxRu f5slaD4XqrEsR60L3DcFAG7w5CcCechcnGfFWCiUqdEFGzWnpFaRCq3sx+sl8arm e4MgliTMeYwJjhPcBq9+xBYniOzWiC+H3jMckkEoCS4Tk2+F/8Wjf2e1qAm+IsYA emG3BbqaJtqYmdqZ/tPN0FpWiVpKUWtdU/0F1w1Xc6XI30dUGQC0oOBZT3WU85Bv TaoDmr9L9Aq3LqtvpvlbVQFUS/4lMAw= -----END CERTIFICATE-----Generated at Sat Apr 5 04:35:47 2025 by rpki-client