$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa File: 8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa (raw, json) Hash identifier: X1ZkmKIAnvBorns9gQCzxNM3wY5SZsdpA9cXEgyMqPk= Subject key identifier: A8:8B:48:12:AD:3E:40:C2:0E:6F:1B:32:8D:7B:B3:2F:44:38:F3:41 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499829DEA390B5600DF1854200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa Signing time: Mon 21 Apr 2025 01:00:47 +0000 ROA not before: Mon 21 Apr 2025 01:00:47 +0000 ROA not after: Sun 20 Jul 2025 01:00:47 +0000 asID: 209854 IP address blocks: 23.27.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:98:29:de:a3:90:b5:60:0d:f1:85:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 21 01:00:47 2025 GMT Not After : Jul 20 01:00:47 2025 GMT Subject: CN=2246f626-36e4-48d9-9cfb-f9990b125604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:d3:c2:98:d7:3d:09:9a:7e:74:06:e7:1f: 6a:cd:97:67:e9:56:00:79:36:59:b6:6e:d4:bb:9f: 66:77:37:8d:86:3d:50:59:b8:38:c1:05:a0:e8:e6: 6b:73:01:c0:52:bb:14:a3:88:31:b9:20:35:7c:2e: 40:dd:16:29:a6:55:5b:bc:b1:9d:eb:df:5c:5e:c5: 39:04:a6:cc:4f:19:d8:7f:ac:86:03:be:c4:2b:7d: 1f:87:df:36:31:24:91:b3:88:94:a2:45:7b:2c:20: b7:28:ce:5c:39:94:4a:c1:ce:98:66:27:40:62:1c: 31:90:cc:d5:cc:ad:6e:6d:dc:09:45:9a:31:9e:b9: 9b:be:5c:29:d8:d5:dd:53:f4:c0:e8:95:b5:b6:61: a4:0c:e3:83:52:2d:ff:83:38:53:ec:c9:21:18:3c: a5:6f:c6:ba:a1:d6:00:eb:67:c6:72:54:26:a7:35: c6:b7:b3:6b:29:60:4a:e9:5c:0c:66:7a:30:d9:db: 3d:04:f3:db:6d:7d:ea:8a:d4:a7:1b:2b:2a:d6:98: 75:ca:a9:72:6d:df:49:3e:87:a3:c7:03:93:6c:3d: 65:30:ca:e1:0d:51:20:19:16:9a:1b:15:10:a6:06: cb:d7:58:88:be:8a:17:cc:7e:c7:bb:21:52:0d:4d: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:8B:48:12:AD:3E:40:C2:0E:6F:1B:32:8D:7B:B3:2F:44:38:F3:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8822bb1d-2f24-3f4d-9ec2-7408f503b8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6c:45:84:88:9b:1e:95:37:c7:d4:d5:80:93:35:41:60:b8: 56:70:c3:6f:4d:2b:13:7b:9d:b8:82:3a:b9:fd:69:11:a5:4b: 57:54:25:68:5b:c3:10:76:95:e5:6a:45:fd:b6:8a:a0:f3:56: ec:7e:be:08:ae:60:48:bc:1d:48:4f:e5:d2:65:36:13:6c:00: fe:96:bc:f1:9e:f3:88:58:ea:a4:89:4a:4a:c1:17:74:8d:ad: 4b:83:37:0a:ea:7e:26:9b:86:67:2c:76:e9:1f:62:99:28:ff: e9:d4:6c:eb:bc:ac:e7:f1:06:ef:03:82:b6:95:bc:08:a0:65: 27:f3:2e:d2:98:99:56:56:c4:d2:4b:c7:b4:bb:f6:83:1b:af: b1:87:12:84:d2:40:bc:98:cd:46:52:26:45:96:82:d8:95:70: 9a:fd:fc:0c:ee:bd:02:61:2b:77:2b:c0:4b:ff:e7:2b:ac:fa: 7e:8b:64:a8:ab:1e:a0:a1:d2:33:b0:e1:16:5b:49:78:3b:01: 2d:60:52:9a:ef:6c:6d:dd:3e:31:dd:b6:eb:fb:53:65:11:21: c2:b3:08:64:82:7f:1e:53:44:a8:e2:3b:b3:36:04:30:f6:63: fb:33:67:f1:66:b6:89:2a:e6:2d:bf:a7:02:6c:0b:26:62:1a: e0:ea:f9:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKd6jkLVgDfGFQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk MjI0NmY2MjYtMzZlNC00OGQ5LTljZmItZjk5OTBiMTI1NjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyETTwpjXPQmafnQG5x9qzZdn6VYAeTZZtm7U u59mdzeNhj1QWbg4wQWg6OZrcwHAUrsUo4gxuSA1fC5A3RYpplVbvLGd699cXsU5 BKbMTxnYf6yGA77EK30fh982MSSRs4iUokV7LCC3KM5cOZRKwc6YZidAYhwxkMzV zK1ubdwJRZoxnrmbvlwp2NXdU/TA6JW1tmGkDOODUi3/gzhT7MkhGDylb8a6odYA 62fGclQmpzXGt7NrKWBK6VwMZnow2ds9BPPbbX3qitSnGysq1ph1yqlybd9JPoej xwOTbD1lMMrhDVEgGRaaGxUQpgbL11iIvooXzH7HuyFSDU10dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKiLSBKtPkDCDm8bMo17sy9EOPNBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODgyMmJiMWQtMmYyNC0z ZjRkLTllYzItNzQwOGY1MDNiOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRsRYSImx6VN8fU1YCTNUFguFZww29NKxN7nbiCOrn9aRGlS1dUJWhb wxB2leVqRf22iqDzVux+vgiuYEi8HUhP5dJlNhNsAP6WvPGe84hY6qSJSkrBF3SN rUuDNwrqfiabhmcsdukfYpko/+nUbOu8rOfxBu8DgraVvAigZSfzLtKYmVZWxNJL x7S79oMbr7GHEoTSQLyYzUZSJkWWgtiVcJr9/AzuvQJhK3crwEv/5yus+n6LZKir HqCh0jOw4RZbSXg7AS1gUprvbG3dPjHdtuv7U2URIcKzCGSCfx5TRKjiO7M2BDD2 Y/szZ/Fmtokq5i2/pwJsCyZiGuDq+fI= -----END CERTIFICATE-----Generated at Sun Apr 27 05:44:23 2025 by rpki-client