$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b654e1a-7932-3f14-985e-9f04ca1864a7.roa File: 8b654e1a-7932-3f14-985e-9f04ca1864a7.roa (raw, json) Hash identifier: 23JQKnaL/n3vSwcshQ6nZOygcx0P4GTZkeNkhkDRAuM= Subject key identifier: C6:25:55:1D:AD:B4:79:80:AA:89:4E:57:D0:DA:E7:A4:15:1D:22:F4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B78531D067F4FA5EC980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b654e1a-7932-3f14-985e-9f04ca1864a7.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 23.27.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b7:85:31:d0:67:f4:fa:5e:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=ce2e1f60-210c-4ea0-8013-c4ab1bdeb478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:82:38:ca:cb:ce:b4:d5:f1:0d:aa:74:5c:ab: 09:6b:61:d5:e9:a1:29:5f:0c:75:e8:ca:4e:50:e7: 7e:e6:18:a4:15:62:f8:97:5a:d6:e6:58:e7:36:c3: 4a:45:d2:82:c8:57:ca:81:2e:d3:d3:1b:f9:08:1e: a7:4f:d4:0e:40:13:8e:ad:79:05:8c:8e:5c:61:46: 50:90:1e:16:43:d3:e2:94:c3:ab:8e:d7:c4:b2:79: 47:9b:da:f5:57:53:85:91:51:c8:3a:2a:95:e4:25: 6b:a9:0f:ea:bc:ce:50:8f:b7:8f:48:66:62:7d:ad: 33:09:41:55:27:0a:ce:12:9b:de:c3:a5:1e:ef:39: 5a:58:de:55:7b:5f:fd:f2:2a:3c:78:80:c3:a4:1e: 65:39:9e:aa:91:ff:31:e8:26:ee:cb:78:30:d4:05: 5c:5f:03:34:5a:0f:88:0b:9f:2e:f0:2b:a5:1f:7d: 92:a6:3a:01:7e:57:8b:7e:c6:df:ed:57:51:74:3c: 2b:42:42:45:98:0d:07:4c:8a:68:88:83:c6:1f:43: 7d:77:94:1e:a2:8b:ee:42:d2:97:c1:3a:0d:f3:8c: d5:76:f0:cc:fa:24:5b:b1:5f:9e:eb:e6:2e:37:c5: af:54:59:1d:09:1a:d3:4d:cd:ee:c9:ef:9c:68:d4: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:25:55:1D:AD:B4:79:80:AA:89:4E:57:D0:DA:E7:A4:15:1D:22:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b654e1a-7932-3f14-985e-9f04ca1864a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:f5:4c:f7:04:ca:38:5d:e2:1d:62:f9:35:dd:a3:a2:58:7b: 31:86:b9:02:eb:b8:7e:df:e7:b1:52:f5:8c:ad:72:42:5e:ea: d0:0e:39:b3:bd:2b:ab:03:bb:09:55:5d:1e:61:fa:bc:66:0e: 2f:48:6e:bc:86:46:11:45:cf:4e:fa:ec:45:32:78:63:ab:51: 14:c4:b2:15:1b:18:ec:f7:5a:0c:fc:42:4b:42:cc:4b:04:84: 38:60:78:1c:2c:1d:28:b4:d8:97:38:23:70:87:14:b4:5c:d1: 29:40:26:b3:cc:78:5d:f9:84:5e:60:ec:b6:d4:f8:9b:74:01: 42:0d:7e:6a:fd:bc:e3:3e:92:7e:85:7d:0d:e2:9f:b5:57:d2: ff:20:b0:e1:7a:29:5e:dd:6a:67:50:a3:c0:81:be:10:14:08: 33:9d:3c:3e:eb:9a:b6:61:4f:67:e8:a6:3f:8d:f6:2a:fe:c0: 7c:f4:35:41:19:de:bd:c3:51:95:17:a0:bc:f6:47:6c:d5:ed: 2a:1b:e9:99:99:9b:26:54:3d:95:37:b7:3f:7e:d6:c5:a3:30: f5:bc:cf:8c:d3:95:11:d6:e3:b7:e1:d7:b1:19:24:26:8c:b3: d5:f2:e9:62:7c:d9:de:98:53:d2:a9:53:21:46:6a:7a:e8:0b: c0:6d:e1:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLeFMdBn9PpeyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Y2UyZTFmNjAtMjEwYy00ZWEwLTgwMTMtYzRhYjFiZGViNDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0II4ysvOtNXxDap0XKsJa2HV6aEpXwx16MpO UOd+5hikFWL4l1rW5ljnNsNKRdKCyFfKgS7T0xv5CB6nT9QOQBOOrXkFjI5cYUZQ kB4WQ9PilMOrjtfEsnlHm9r1V1OFkVHIOiqV5CVrqQ/qvM5Qj7ePSGZifa0zCUFV JwrOEpvew6Ue7zlaWN5Ve1/98io8eIDDpB5lOZ6qkf8x6Cbuy3gw1AVcXwM0Wg+I C58u8CulH32SpjoBfleLfsbf7VdRdDwrQkJFmA0HTIpoiIPGH0N9d5QeoovuQtKX wToN84zVdvDM+iRbsV+e6+YuN8WvVFkdCRrTTc3uye+caNS1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMYlVR2ttHmAqolOV9Da56QVHSL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGI2NTRlMWEtNzkzMi0z ZjE0LTk4NWUtOWYwNGNhMTg2NGE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHD1TPcEyjhd4h1i+TXdo6JYezGGuQLruH7f57FS9YytckJe6tAOObO9 K6sDuwlVXR5h+rxmDi9IbryGRhFFz0767EUyeGOrURTEshUbGOz3Wgz8QktCzEsE hDhgeBwsHSi02Jc4I3CHFLRc0SlAJrPMeF35hF5g7LbU+Jt0AUINfmr9vOM+kn6F fQ3in7VX0v8gsOF6KV7damdQo8CBvhAUCDOdPD7rmrZhT2fopj+N9ir+wHz0NUEZ 3r3DUZUXoLz2R2zV7Sob6ZmZmyZUPZU3tz9+1sWjMPW8z4zTlRHW47fh17EZJCaM s9Xy6WJ82d6YU9KpUyFGanroC8Bt4VE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:08:27 2025 by rpki-client