$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa65255d-2751-3ceb-8865-9f14f1ccd05d.roa File: fa65255d-2751-3ceb-8865-9f14f1ccd05d.roa (raw, json) Hash identifier: uZrJ0alvXJJ+65pn/bhp+uDtcw8niA9E0gtc1wkeKRg= Subject key identifier: BD:D4:F7:75:C1:1F:8F:C1:F4:31:5B:5B:94:C7:9B:DB:C3:00:49:2B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584965E97F3B5D731D75C6084880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa65255d-2751-3ceb-8865-9f14f1ccd05d.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 212238 IP address blocks: 23.27.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:7f:3b:5d:73:1d:75:c6:08:48:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=a1d600d4-e3d0-4036-96f2-4315434124d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:42:c4:91:39:6c:b3:37:bc:a1:f2:62:52:0d: a9:92:94:8b:63:fc:ce:b8:cd:4b:d9:3e:fc:19:8e: e5:cb:90:6e:dd:2c:00:43:6e:68:d6:b0:fc:be:aa: 39:6b:00:db:71:73:9c:13:6c:f5:32:45:cd:15:7b: d9:4b:91:46:3a:02:bb:64:d5:f6:8c:bb:a0:c6:eb: 01:ba:b9:52:c4:9b:a3:f3:40:58:99:da:4d:f1:69: a8:62:a3:79:30:96:69:b7:3a:90:ab:25:91:84:43: 06:47:78:22:77:11:d2:e6:e8:67:db:25:a4:f2:e7: 9a:2e:58:2b:b4:be:3d:74:80:bf:11:96:b8:c4:fb: fc:b5:9f:3e:34:b4:27:91:4e:ab:f8:60:3f:a8:50: c6:1a:45:a6:d2:c8:8d:37:7e:9b:b2:73:c9:73:31: 53:5d:74:ba:5a:dc:87:03:bb:03:32:09:a9:ea:5c: 6f:4b:f4:d4:57:b1:fa:92:c7:bd:be:cb:f5:7f:d9: 7a:bc:05:d5:6d:b2:16:c0:2d:38:1f:3d:4b:19:f0: 2d:3b:80:47:d9:8c:ec:65:e4:89:40:82:3b:53:9d: 48:5f:71:f3:fd:1b:17:9a:f6:2c:5d:29:89:22:19: 5a:e2:25:54:d6:29:6c:3e:cc:73:04:23:3e:00:e3: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:D4:F7:75:C1:1F:8F:C1:F4:31:5B:5B:94:C7:9B:DB:C3:00:49:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa65255d-2751-3ceb-8865-9f14f1ccd05d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ef:27:b7:f3:bb:4d:49:1e:94:7e:3a:dd:47:cc:a3:7b:30: 98:3f:f4:e2:d0:c6:7d:60:7a:93:5e:53:8d:0c:0c:6a:40:c7: a1:4c:dd:ca:82:47:a9:3e:ec:f0:4a:aa:a6:75:fa:3d:23:cd: 30:75:ad:05:ee:e9:75:5f:06:a2:37:76:06:21:24:00:42:bb: 4f:4c:ac:78:7c:17:8c:fd:27:20:a9:2c:4c:34:8b:ab:45:cb: 6d:e4:6b:95:7f:e4:a4:44:64:17:62:a7:c1:12:34:a6:bd:97: 95:8f:30:22:11:57:75:8f:c3:ac:aa:a0:86:f3:ba:f6:6e:a4: fc:e4:bd:52:3a:a4:01:2e:ec:e6:ec:c5:83:b4:1c:ed:b1:c6: da:bb:1d:f5:65:2d:9b:02:a9:e1:3b:36:8e:6b:3f:67:6c:a1: 67:4a:b5:ec:99:8c:1c:b2:43:ed:72:64:2b:39:78:2b:4a:3a: 11:8c:2c:f6:19:d2:5d:88:89:19:01:3f:47:63:80:31:ee:86: 0a:c4:df:4c:d1:e2:f7:ad:7b:a1:53:cd:55:de:63:37:8c:1e: 8c:35:25:00:86:c9:04:7a:7e:f7:6b:00:eb:b8:78:6a:95:f5: 59:32:f6:26:df:48:b5:84:ea:be:7f:21:6d:db:91:a4:e5:d2: c2:d2:b9:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6X87XXMddcYISIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk YTFkNjAwZDQtZTNkMC00MDM2LTk2ZjItNDMxNTQzNDEyNGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkLEkTlssze8ofJiUg2pkpSLY/zOuM1L2T78 GY7ly5Bu3SwAQ25o1rD8vqo5awDbcXOcE2z1MkXNFXvZS5FGOgK7ZNX2jLugxusB urlSxJuj80BYmdpN8WmoYqN5MJZptzqQqyWRhEMGR3gidxHS5uhn2yWk8ueaLlgr tL49dIC/EZa4xPv8tZ8+NLQnkU6r+GA/qFDGGkWm0siNN36bsnPJczFTXXS6WtyH A7sDMgmp6lxvS/TUV7H6kse9vsv1f9l6vAXVbbIWwC04Hz1LGfAtO4BH2YzsZeSJ QII7U51IX3Hz/RsXmvYsXSmJIhla4iVU1ilsPsxzBCM+AOMNTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL3U93XBH4/B9DFbW5THm9vDAEkrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmE2NTI1NWQtMjc1MS0z Y2ViLTg4NjUtOWYxNGYxY2NkMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrvJ7fzu01JHpR+Ot1HzKN7MJg/9OLQxn1gepNeU40MDGpAx6FM3cqC R6k+7PBKqqZ1+j0jzTB1rQXu6XVfBqI3dgYhJABCu09MrHh8F4z9JyCpLEw0i6tF y23ka5V/5KREZBdip8ESNKa9l5WPMCIRV3WPw6yqoIbzuvZupPzkvVI6pAEu7Obs xYO0HO2xxtq7HfVlLZsCqeE7No5rP2dsoWdKteyZjByyQ+1yZCs5eCtKOhGMLPYZ 0l2IiRkBP0djgDHuhgrE30zR4vete6FTzVXeYzeMHow1JQCGyQR6fvdrAOu4eGqV 9Vky9ibfSLWE6r5/IW3bkaTl0sLSueA= -----END CERTIFICATE-----Generated at Sun Apr 6 11:56:50 2025 by rpki-client