$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa File: ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa (raw, json) Hash identifier: Q4RfuoC3ae3xTSfKX8y6hc9/SEdrcWoElGaFluNtqkQ= Subject key identifier: E8:81:5B:19:3D:27:50:1E:C6:67:64:5C:56:D6:4D:AC:42:B7:9D:7F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848E2D1A6008218588E36F22680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa Signing time: Sat 15 Feb 2025 02:00:39 +0000 ROA not before: Sat 15 Feb 2025 02:00:39 +0000 ROA not after: Fri 16 May 2025 01:00:39 +0000 asID: 6939 IP address blocks: 23.27.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e2:d1:a6:00:82:18:58:8e:36:f2:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 15 02:00:39 2025 GMT Not After : May 16 01:00:39 2025 GMT Subject: CN=183658d2-e8ba-45ae-9f8c-662d06e49a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:be:80:0a:f3:d6:8f:05:b9:1b:da:6f:57: 95:bc:53:c8:5b:a8:3c:51:6d:ff:87:dd:14:3d:31: 69:32:8a:e1:9b:61:0b:aa:64:2f:89:a1:05:2f:b1: 59:f7:20:7a:22:04:be:fd:bd:d7:3e:3d:18:3b:d3: 3b:ee:6d:c2:18:33:7d:b3:8d:d3:2d:03:e7:2b:6c: 9d:48:c0:39:1b:5d:c0:b7:a3:b3:8f:5c:62:dd:64: 70:46:5c:81:bd:76:44:5f:19:4b:87:d5:33:2d:cb: d9:b1:47:9f:7f:4d:79:73:e8:ed:d3:64:de:9f:0e: 47:d2:2a:e7:e8:a2:37:4c:34:6b:4a:e0:43:8b:b7: de:30:aa:2d:f2:bb:03:21:0c:a8:f2:e1:7c:a2:41: 20:09:a5:e3:65:e7:eb:f0:7f:6c:3d:82:2c:ef:8b: 94:76:7b:b1:8a:85:19:d1:e6:44:ab:01:5b:50:92: 62:f4:9d:c5:4b:83:0c:94:e7:8a:29:be:2b:5d:b1: a5:b9:31:0e:d2:8f:e8:90:b9:d3:d5:a8:24:38:04: d7:0a:dc:53:03:53:69:b1:66:64:11:45:1a:5d:b0: 5a:04:ab:92:5e:64:b9:15:35:31:0f:52:5e:48:0e: 43:82:af:e4:9c:45:42:27:87:bf:2c:1d:82:36:c2: cf:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:81:5B:19:3D:27:50:1E:C6:67:64:5C:56:D6:4D:AC:42:B7:9D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ffe778b3-3987-3472-9bf6-1b5ab9c2e515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:3a:1a:f8:f0:5e:e2:e3:70:cb:51:0e:54:c3:d4:f4:57:27: 48:8a:f3:60:23:36:5a:fd:98:0d:4a:af:0c:c4:d3:13:f8:3f: 41:b7:b7:32:1c:b8:80:4c:af:2d:73:a8:5d:62:37:21:f5:17: cb:fc:d6:8e:2f:bb:72:bf:99:0d:3c:29:38:7c:49:15:fd:d1: dc:98:c4:79:7d:db:ce:df:56:87:fc:45:44:bd:2d:a3:eb:1d: 05:6e:a0:53:62:d4:b4:e2:cc:e8:c5:d9:5d:81:31:28:b0:79: f1:bd:7a:74:98:46:0e:a8:da:35:49:9e:cc:4f:cc:e2:f3:76: 99:2f:22:9f:22:e4:06:a6:84:74:81:fa:72:88:04:7a:bc:63: 50:0c:70:1d:00:22:cb:43:a1:d6:97:32:3b:01:4e:a4:4a:b4: 80:9f:84:98:91:ea:d0:b6:25:09:4a:ef:c8:d1:03:d3:34:14: 07:b4:ec:0f:60:c6:25:a2:92:a5:0a:0d:c3:6f:1e:29:18:49: 12:51:b2:cc:2f:49:97:d6:3d:ae:bb:15:d3:67:78:ab:a6:16: ac:67:f5:6d:e5:3c:0e:2f:01:42:e9:53:68:85:3b:49:ac:fd: e9:28:a3:0c:5b:84:f8:3a:cd:55:c7:7a:78:84:d0:3b:37:9a: 53:30:34:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0aYAghhYjjbyJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk MTgzNjU4ZDItZThiYS00NWFlLTlmOGMtNjYyZDA2ZTQ5YTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvye+gArz1o8FuRvab1eVvFPIW6g8UW3/h90U PTFpMorhm2ELqmQviaEFL7FZ9yB6IgS+/b3XPj0YO9M77m3CGDN9s43TLQPnK2yd SMA5G13At6Ozj1xi3WRwRlyBvXZEXxlLh9UzLcvZsUeff015c+jt02Tenw5H0irn 6KI3TDRrSuBDi7feMKot8rsDIQyo8uF8okEgCaXjZefr8H9sPYIs74uUdnuxioUZ 0eZEqwFbUJJi9J3FS4MMlOeKKb4rXbGluTEO0o/okLnT1agkOATXCtxTA1NpsWZk EUUaXbBaBKuSXmS5FTUxD1JeSA5Dgq/knEVCJ4e/LB2CNsLPYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOiBWxk9J1AexmdkXFbWTaxCt51/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmZlNzc4YjMtMzk4Ny0z NDcyLTliZjYtMWI1YWI5YzJlNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIk6GvjwXuLjcMtRDlTD1PRXJ0iK82AjNlr9mA1KrwzE0xP4P0G3tzIc uIBMry1zqF1iNyH1F8v81o4vu3K/mQ08KTh8SRX90dyYxHl9287fVof8RUS9LaPr HQVuoFNi1LTizOjF2V2BMSiwefG9enSYRg6o2jVJnsxPzOLzdpkvIp8i5AamhHSB +nKIBHq8Y1AMcB0AIstDodaXMjsBTqRKtICfhJiR6tC2JQlK78jRA9M0FAe07A9g xiWikqUKDcNvHikYSRJRsswvSZfWPa67FdNneKumFqxn9W3lPA4vAULpU2iFO0ms /ekoowxbhPg6zVXHeniE0Ds3mlMwNM0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:43 2025 by rpki-client