$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa0d6861-9f68-3101-8e11-76d7c0d120bf.roa File: fa0d6861-9f68-3101-8e11-76d7c0d120bf.roa (raw, json) Hash identifier: EYG9c4bwXN66PZrKtTV6pHIEX4BhtusUCMYkpNEQ064= Subject key identifier: 24:E8:B7:E1:57:AC:1D:FF:04:AA:73:B1:70:B7:48:AA:7A:23:99:B2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584967EC2D4C00D27899514A6860 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa0d6861-9f68-3101-8e11-76d7c0d120bf.roa Signing time: Thu 03 Apr 2025 18:17:57 +0000 ROA not before: Thu 03 Apr 2025 18:17:57 +0000 ROA not after: Wed 02 Jul 2025 18:17:57 +0000 asID: 401152 IP address blocks: 23.27.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:ec:2d:4c:00:d2:78:99:51:4a:68:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 18:17:57 2025 GMT Not After : Jul 2 18:17:57 2025 GMT Subject: CN=aecc9a7c-22b2-447a-9202-b297b6f1a74e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:dc:1f:85:89:56:68:2e:3b:06:37:18:6a:72: dd:a0:52:e5:f4:26:c6:1e:a1:e7:81:84:f0:f9:39: d4:74:39:29:c3:5f:31:a8:b3:81:7f:41:b7:ff:4f: 89:e0:d2:ba:cb:f4:65:01:5f:dc:e9:e4:5b:01:2b: 5c:17:27:91:8f:75:13:3d:16:3a:f2:0a:f8:e4:a1: 70:8b:06:47:26:8e:30:de:c1:1e:ce:7f:34:a6:d5: 49:dc:81:22:fd:68:3c:9d:87:52:40:d9:5b:38:d2: fb:60:61:9c:3a:f1:f2:d3:65:e6:7a:46:f9:62:4e: 8b:4a:01:5b:a5:d7:4d:94:b7:35:d1:56:7c:60:86: 38:c6:9d:91:d7:fd:9e:8c:05:1a:73:f4:7b:ac:00: 17:71:f2:82:78:1b:50:61:c1:f4:70:40:77:1e:57: 28:a6:e2:c9:59:16:39:57:43:19:f0:36:df:c7:f2: 4f:05:73:a1:91:00:aa:26:34:a2:b7:26:d4:f9:0a: e5:b8:a1:e9:2a:39:2e:33:df:86:ff:42:39:1e:22: 29:1f:79:38:d3:7d:a0:60:15:e9:28:0e:d8:95:c9: 99:bc:c8:9f:60:4c:8c:7b:e2:1b:17:6b:14:f8:ae: 78:a2:ea:8e:7d:47:6c:d0:ab:db:f2:a8:5c:5c:f8: aa:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E8:B7:E1:57:AC:1D:FF:04:AA:73:B1:70:B7:48:AA:7A:23:99:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa0d6861-9f68-3101-8e11-76d7c0d120bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:e3:e5:bd:db:6c:9a:5e:60:a8:c0:fb:0d:db:e1:3b:26:7f: f8:a7:b5:29:67:ba:7c:06:26:06:3d:fc:0b:74:87:85:f4:fe: 44:f1:45:80:d0:e7:8d:20:c9:68:cb:9b:45:8d:42:74:93:56: 5f:ef:36:25:18:fa:1e:61:fa:a1:0e:46:05:60:1e:e4:d0:d1: f0:99:60:45:75:0c:62:57:62:f8:02:8a:16:02:6a:7c:4c:0a: 07:a2:52:a1:00:50:b7:c7:d4:8a:89:cb:a2:cc:e1:65:01:1f: b5:20:7a:42:dc:dc:7f:f3:45:51:a0:da:50:7f:26:06:c0:9a: 14:1f:8c:62:2e:c4:04:3f:c3:88:4c:59:4d:99:6f:c8:34:f0: cc:64:3b:d6:1e:0d:44:59:44:ff:ec:a0:15:2e:40:eb:7e:8d: fb:e8:fd:5c:16:b1:f3:17:3e:d1:5c:1f:80:36:5a:de:d0:61: c7:c2:58:59:35:75:ab:7a:3a:7b:36:3d:e4:44:06:b1:6d:b0: d3:83:3d:7b:c2:5e:db:6c:cf:78:57:2f:95:35:76:cd:8d:13: ee:e7:a9:05:3f:c5:56:21:bf:58:00:77:4a:19:f7:e1:64:54: 60:00:31:b9:14:64:6a:77:e6:6a:2b:62:5a:d0:71:83:20:77: ad:9b:2f:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln7C1MANJ4mVFKaGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzE4MTc1N1oXDTI1MDcwMjE4MTc1N1owLzEtMCsGA1UEAxMk YWVjYzlhN2MtMjJiMi00NDdhLTkyMDItYjI5N2I2ZjFhNzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNwfhYlWaC47BjcYanLdoFLl9CbGHqHngYTw +TnUdDkpw18xqLOBf0G3/0+J4NK6y/RlAV/c6eRbAStcFyeRj3UTPRY68gr45KFw iwZHJo4w3sEezn80ptVJ3IEi/Wg8nYdSQNlbONL7YGGcOvHy02Xmekb5Yk6LSgFb pddNlLc10VZ8YIY4xp2R1/2ejAUac/R7rAAXcfKCeBtQYcH0cEB3HlcopuLJWRY5 V0MZ8Dbfx/JPBXOhkQCqJjSitybU+QrluKHpKjkuM9+G/0I5HiIpH3k4032gYBXp KA7YlcmZvMifYEyMe+IbF2sU+K54ouqOfUds0Kvb8qhcXPiqgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTot+FXrB3/BKpzsXC3SKp6I5myMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmEwZDY4NjEtOWY2OC0z MTAxLThlMTEtNzZkN2MwZDEyMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxu/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjj5b3bbJpeYKjA+w3b4Tsmf/intSlnunwGJgY9/At0h4X0/kTxRYDQ 540gyWjLm0WNQnSTVl/vNiUY+h5h+qEORgVgHuTQ0fCZYEV1DGJXYvgCihYCanxM CgeiUqEAULfH1IqJy6LM4WUBH7UgekLc3H/zRVGg2lB/JgbAmhQfjGIuxAQ/w4hM WU2Zb8g08MxkO9YeDURZRP/soBUuQOt+jfvo/VwWsfMXPtFcH4A2Wt7QYcfCWFk1 dat6Ons2PeREBrFtsNODPXvCXttsz3hXL5U1ds2NE+7nqQU/xVYhv1gAd0oZ9+Fk VGAAMbkUZGp35morYlrQcYMgd62bL2M= -----END CERTIFICATE-----Generated at Sat Apr 5 03:01:58 2025 by rpki-client