$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5020ced7-ff99-3265-af5b-0a53b1efbe37.roa File: 5020ced7-ff99-3265-af5b-0a53b1efbe37.roa (raw, json) Hash identifier: gz+qu5Ki/1LZJ6P7Do34KE0xSVPgHVxdSsh7kr+GBMc= Subject key identifier: AA:B4:A1:85:B2:B7:3C:DD:B0:7A:51:BB:AC:06:FD:C2:45:1D:7F:6B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584967EC2D34AEAEA28703783C68 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5020ced7-ff99-3265-af5b-0a53b1efbe37.roa Signing time: Thu 03 Apr 2025 18:17:57 +0000 ROA not before: Thu 03 Apr 2025 18:17:57 +0000 ROA not after: Wed 02 Jul 2025 18:17:57 +0000 asID: 401152 IP address blocks: 23.27.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:ec:2d:34:ae:ae:a2:87:03:78:3c:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 18:17:57 2025 GMT Not After : Jul 2 18:17:57 2025 GMT Subject: CN=996b409a-5b34-4372-abe9-ca26344a4d99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:31:62:00:7a:6e:0b:ca:b9:65:c8:0e:b2:24: 51:87:c7:f9:9f:e8:68:28:d6:94:d7:05:47:4a:cc: 65:1f:b6:e8:51:3c:5d:9b:73:e6:61:60:99:2d:8e: 92:db:51:3f:d8:41:18:a9:5c:a3:c1:50:05:97:0a: c4:bb:a8:b0:b2:03:f5:ff:2e:c3:a5:57:1f:e9:cd: e9:fc:7c:3b:de:71:b5:57:9a:27:d6:bb:bf:87:bc: 01:0d:b7:a9:8c:29:7a:33:ba:26:f9:c3:ca:10:b3: ae:95:51:09:5b:f3:4c:82:cc:95:a9:8a:86:9e:4f: 90:95:0d:37:c2:53:8c:2f:7e:b5:12:36:23:aa:6e: c7:d7:87:c7:bd:77:56:c9:38:2c:d5:5c:c7:6a:7b: e1:39:98:96:e4:c5:c1:29:cd:ef:00:de:2e:56:22: 27:62:61:9f:da:75:88:2c:b5:5f:03:3a:b2:d6:cd: fc:fb:87:a7:70:16:d6:1a:24:c1:24:49:32:9a:c5: dc:09:c7:5a:12:e7:80:d4:9a:57:74:2d:a1:52:54: 42:4d:a6:19:7b:35:ac:0a:12:b1:52:5a:13:b9:2e: 89:65:03:37:e9:2f:22:92:6d:85:bd:39:1b:ab:12: 28:b0:e0:ea:06:b2:32:e2:8b:2f:2e:90:da:a8:48: 0c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B4:A1:85:B2:B7:3C:DD:B0:7A:51:BB:AC:06:FD:C2:45:1D:7F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5020ced7-ff99-3265-af5b-0a53b1efbe37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a4:65:4b:b1:94:24:15:a2:75:be:da:e3:1b:25:18:85:54: c0:10:70:17:47:68:6b:07:ac:18:be:d4:5d:69:4f:e3:b2:f1: 5a:a5:d1:86:81:87:38:ca:c9:4b:89:7c:b4:32:19:29:cd:a0: 23:a1:67:90:41:5f:da:23:d3:87:90:3f:cd:57:a8:61:37:94: e3:1e:6b:d8:70:ac:7a:d9:d5:85:5c:4b:89:bb:d5:83:99:a8: 50:7d:1a:ed:1e:07:0a:0e:b9:5a:51:c1:eb:4b:c5:82:7d:2f: dd:19:ca:5e:56:eb:8d:2a:7a:54:0d:8d:06:ea:76:8a:ab:9e: ba:8d:19:2f:9d:16:1d:76:59:21:df:5d:8f:75:1d:45:f2:45: d7:31:a6:23:b7:16:f8:cd:72:19:78:f0:9b:70:d6:b8:77:5a: 2d:d1:d7:4b:d5:e0:05:fd:84:b2:bc:14:fb:12:6c:21:aa:1c: 8f:59:6d:d8:ad:8f:6e:54:c9:47:0b:86:38:bb:1c:af:7b:d3: 50:ce:1e:0f:07:89:e3:03:61:af:35:5a:77:7c:29:b9:31:4f: 36:fb:96:a6:11:e8:ac:2c:3d:08:38:6a:0b:79:95:31:9c:85: a8:76:fb:ac:54:42:d8:be:33:27:19:22:2f:6b:6d:00:49:41: 7a:00:41:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEln7C00rq6ihwN4PGgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzE4MTc1N1oXDTI1MDcwMjE4MTc1N1owLzEtMCsGA1UEAxMk OTk2YjQwOWEtNWIzNC00MzcyLWFiZTktY2EyNjM0NGE0ZDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDFiAHpuC8q5ZcgOsiRRh8f5n+hoKNaU1wVH SsxlH7boUTxdm3PmYWCZLY6S21E/2EEYqVyjwVAFlwrEu6iwsgP1/y7DpVcf6c3p /Hw73nG1V5on1ru/h7wBDbepjCl6M7om+cPKELOulVEJW/NMgsyVqYqGnk+QlQ03 wlOML361EjYjqm7H14fHvXdWyTgs1VzHanvhOZiW5MXBKc3vAN4uViInYmGf2nWI LLVfAzqy1s38+4encBbWGiTBJEkymsXcCcdaEueA1JpXdC2hUlRCTaYZezWsChKx UloTuS6JZQM36S8ikm2FvTkbqxIosODqBrIy4osvLpDaqEgMIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq0oYWytzzdsHpRu6wG/cJFHX9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTAyMGNlZDctZmY5OS0z MjY1LWFmNWItMGE1M2IxZWZiZTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxulMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSkZUuxlCQVonW+2uMbJRiFVMAQcBdHaGsHrBi+1F1pT+Oy8Vql0YaB hzjKyUuJfLQyGSnNoCOhZ5BBX9oj04eQP81XqGE3lOMea9hwrHrZ1YVcS4m71YOZ qFB9Gu0eBwoOuVpRwetLxYJ9L90Zyl5W640qelQNjQbqdoqrnrqNGS+dFh12WSHf XY91HUXyRdcxpiO3FvjNchl48Jtw1rh3Wi3R10vV4AX9hLK8FPsSbCGqHI9Zbdit j25UyUcLhji7HK9701DOHg8HieMDYa81Wnd8KbkxTzb7lqYR6KwsPQg4agt5lTGc hah2+6xUQti+MycZIi9rbQBJQXoAQes= -----END CERTIFICATE-----Generated at Sun Apr 27 15:21:25 2025 by rpki-client