$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dbffd8b-f107-3ff4-bcd1-8e88cd963390.roa File: 1dbffd8b-f107-3ff4-bcd1-8e88cd963390.roa (raw, json) Hash identifier: D5Sii5lo2UaW3ny/TxM1eaNAPrbCFMOGT4fkRxIzYMc= Subject key identifier: CF:D9:FF:B5:7D:EA:85:0A:9C:5C:F3:33:32:46:DF:9B:2E:E4:A9:F4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584965E981E5DE48A1B5D842B500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dbffd8b-f107-3ff4-bcd1-8e88cd963390.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 401152 IP address blocks: 23.27.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:81:e5:de:48:a1:b5:d8:42:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=365147b7-6ad1-4dad-8b35-222cf7ac620b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:b1:6b:a5:32:d8:27:97:65:5d:83:0a:97:75: c3:85:1f:d2:1b:1b:4b:93:f1:ad:56:78:2b:10:08: 14:b3:ad:f0:92:80:fd:49:99:c9:d0:bc:11:88:fd: 34:5f:2a:2a:46:f8:43:5b:b7:16:4e:52:3c:b5:f5: e6:d7:9c:84:76:c6:c4:43:92:89:4e:44:eb:86:7b: 08:ec:e3:2f:64:e7:1f:fd:d0:a7:9b:68:d8:97:43: 59:fc:a5:7d:0a:4f:fb:c6:67:e5:a4:4b:c0:57:85: 9a:d9:e3:a7:4e:e6:7c:65:cf:e2:c6:19:7f:6f:eb: 7b:0b:fa:98:c4:05:12:47:37:e9:da:1c:28:8a:f2: 53:9a:df:39:dd:37:cc:aa:03:76:f3:78:4d:23:4c: e8:bb:05:b8:83:f0:d9:83:cf:e9:11:e5:fb:ed:99: 5b:b1:06:2b:74:84:62:c6:93:5b:02:37:f7:a6:e4: af:73:9d:31:16:54:bb:02:af:33:09:47:f9:63:c8: 29:05:d2:c9:a0:59:63:12:00:30:e8:bf:0a:1f:36: 18:56:62:9b:0c:18:93:d9:52:16:94:c1:65:67:21: 98:bd:6b:b8:19:62:3f:69:bd:2c:82:c2:43:a0:9b: 52:ba:be:9c:0a:a9:58:61:c0:ed:b5:9d:8e:f4:83: 7c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:FF:B5:7D:EA:85:0A:9C:5C:F3:33:32:46:DF:9B:2E:E4:A9:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1dbffd8b-f107-3ff4-bcd1-8e88cd963390.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:f1:84:0f:0f:29:77:29:02:06:0f:60:e1:3a:a1:a6:f8:ba: 6c:8b:bf:d5:fd:b5:21:64:f5:e9:17:44:1c:16:01:80:12:7c: e5:33:e0:07:f0:74:65:55:fb:06:9b:1b:9b:ce:fb:ef:2b:a3: 9e:b0:dd:9c:a0:57:62:4c:18:36:65:72:9f:59:06:bd:1c:ba: c9:a2:ab:8f:8a:a1:35:d7:8b:95:e9:a8:d3:28:39:98:dd:b9: 77:08:40:66:8e:33:9f:2e:3f:60:f5:80:73:bd:3d:a1:54:26: fe:9a:c6:e7:a8:37:19:14:99:84:7f:40:89:57:cb:ba:cf:09: 06:d3:b8:fa:e7:e1:96:fa:cf:e8:73:29:ed:90:3d:57:84:41: c2:a9:56:72:44:0e:85:b8:65:0f:c8:34:e8:1a:54:1a:b9:1e: 17:9b:08:82:ac:fd:38:0b:8a:31:cd:c3:03:8e:bc:17:b3:4e: 64:2e:a1:00:d7:c0:6f:7b:19:16:04:a8:65:db:86:14:fc:e1: 53:b2:30:66:38:03:9e:08:02:03:94:b0:17:64:87:18:d0:40: d7:6b:94:5e:75:86:56:d7:e8:af:74:d1:8d:e7:44:8a:a3:06: 44:02:77:5b:a5:fd:1f:91:b7:e8:36:ff:fc:01:35:d6:70:fc: ce:0a:ff:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6YHl3kihtdhCtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk MzY1MTQ3YjctNmFkMS00ZGFkLThiMzUtMjIyY2Y3YWM2MjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirFrpTLYJ5dlXYMKl3XDhR/SGxtLk/GtVngr EAgUs63wkoD9SZnJ0LwRiP00XyoqRvhDW7cWTlI8tfXm15yEdsbEQ5KJTkTrhnsI 7OMvZOcf/dCnm2jYl0NZ/KV9Ck/7xmflpEvAV4Wa2eOnTuZ8Zc/ixhl/b+t7C/qY xAUSRzfp2hwoivJTmt853TfMqgN283hNI0zouwW4g/DZg8/pEeX77ZlbsQYrdIRi xpNbAjf3puSvc50xFlS7Aq8zCUf5Y8gpBdLJoFljEgAw6L8KHzYYVmKbDBiT2VIW lMFlZyGYvWu4GWI/ab0sgsJDoJtSur6cCqlYYcDttZ2O9IN87QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/Z/7V96oUKnFzzMzJG35su5Kn0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWRiZmZkOGItZjEwNy0z ZmY0LWJjZDEtOGU4OGNkOTYzMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3xhA8PKXcpAgYPYOE6oab4umyLv9X9tSFk9ekXRBwWAYASfOUz4Afw dGVV+wabG5vO++8ro56w3ZygV2JMGDZlcp9ZBr0cusmiq4+KoTXXi5XpqNMoOZjd uXcIQGaOM58uP2D1gHO9PaFUJv6axueoNxkUmYR/QIlXy7rPCQbTuPrn4Zb6z+hz Ke2QPVeEQcKpVnJEDoW4ZQ/INOgaVBq5HhebCIKs/TgLijHNwwOOvBezTmQuoQDX wG97GRYEqGXbhhT84VOyMGY4A54IAgOUsBdkhxjQQNdrlF51hlbX6K900Y3nRIqj BkQCd1ul/R+Rt+g2//wBNdZw/M4K/zM= -----END CERTIFICATE-----Generated at Sun Apr 27 01:44:38 2025 by rpki-client