$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/90d23111-80eb-3701-8e50-ba95b296ccb3.roa File: 90d23111-80eb-3701-8e50-ba95b296ccb3.roa (raw, json) Hash identifier: 7NZsYqX+efDLoNpQqrm8q/OsEZ09s6mJQ+Wthg4kRn8= Subject key identifier: 04:2F:E4:BD:F2:B1:F8:9D:EA:01:89:9B:AA:D5:64:1A:A2:EA:1B:17 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294AB5181FEF5CB23817270 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/90d23111-80eb-3701-8e50-ba95b296ccb3.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 23.27.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ab:51:81:fe:f5:cb:23:81:72:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=008b5932-4220-4835-909f-011f0fccc95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:11:26:c3:f2:80:c2:94:0d:17:6f:c9:5c: c3:d4:49:1d:4b:08:75:5c:10:c2:30:45:a0:96:f0: 23:59:c5:24:cc:f1:4d:5a:d5:4b:77:ce:2d:f4:db: fb:dd:0f:ef:a3:6d:9f:f8:4d:84:01:6c:de:f4:85: 1d:51:61:57:4f:5a:a2:60:fd:c8:1e:54:e6:fa:f2: 72:86:fa:a4:12:e2:21:0f:c5:ef:4f:43:c4:69:76: 43:d8:f7:25:d4:b0:d4:4d:b1:12:cf:67:a0:6c:e9: a5:54:42:e4:33:df:82:77:cc:eb:99:94:bf:ca:58: e2:d0:cb:1c:7c:f9:ca:ae:f1:75:b7:ee:e4:df:4e: dd:99:6b:b4:71:46:d9:5c:e9:99:05:a4:8e:e7:5e: b4:ea:f0:8e:ad:cd:28:3d:fd:3f:99:fb:2f:86:7c: ee:56:3a:9e:bd:13:7c:b1:38:6b:12:6d:25:d4:ac: 14:59:18:32:c6:5b:1c:c5:b9:83:9c:1a:f3:ff:04: 6b:20:d8:8b:b5:9e:b5:68:2f:78:ec:01:c2:ef:90: 68:b1:16:39:06:e3:ab:64:0e:10:6d:63:22:fb:f1: f2:83:6a:22:33:fd:6b:5e:7b:2f:cb:c0:6f:2e:e8: f5:c0:4f:55:b4:ac:aa:1a:72:b5:b6:04:cd:fc:4e: 61:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:2F:E4:BD:F2:B1:F8:9D:EA:01:89:9B:AA:D5:64:1A:A2:EA:1B:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/90d23111-80eb-3701-8e50-ba95b296ccb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:8e:86:6a:28:2f:0e:0a:84:4f:b3:b2:4c:8a:09:8b:1c:20: 9d:43:d1:11:b3:b6:d3:87:a6:02:57:a2:a1:80:56:02:eb:eb: af:bf:1f:df:6e:f8:84:8d:b9:0a:67:58:c2:f3:6a:21:8e:3a: f1:51:0c:9c:65:e9:69:b1:0e:88:08:7d:ff:82:57:d3:9a:63: 6e:a1:17:5b:f3:68:a7:f6:b5:36:2a:95:0f:34:a4:b8:94:bb: be:79:32:91:23:15:01:a9:ce:d8:2b:0a:f5:c4:56:c5:39:78: 1c:50:1a:a5:5e:22:11:7f:d4:ae:e1:14:70:f1:a2:a6:d6:04: 5e:27:48:3b:d7:f9:d8:1b:07:3a:76:eb:06:0f:dc:83:95:e1: 42:3a:fb:42:b6:62:33:17:dc:6f:69:a1:c2:18:7b:20:aa:87: 9c:81:ee:db:4c:65:70:3b:c9:4d:1d:b4:75:4c:7c:3a:28:e2: 97:af:14:e8:be:35:0a:16:31:f7:ad:21:79:92:2d:d8:20:8b: 3f:51:98:5a:9a:3d:24:02:8f:15:1a:84:24:ef:5d:3c:87:43: 0a:12:40:8f:ca:4d:05:b8:ac:f7:b1:25:81:6c:4a:4e:26:af: db:c2:4c:c1:27:a2:84:5a:8a:43:e7:b2:f4:f8:a0:e3:02:57: a6:be:18:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKtRgf71yyOBcnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk MDA4YjU5MzItNDIyMC00ODM1LTkwOWYtMDExZjBmY2NjOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjERJsPygMKUDRdvyVzD1EkdSwh1XBDCMEWg lvAjWcUkzPFNWtVLd84t9Nv73Q/vo22f+E2EAWze9IUdUWFXT1qiYP3IHlTm+vJy hvqkEuIhD8XvT0PEaXZD2Pcl1LDUTbESz2egbOmlVELkM9+Cd8zrmZS/ylji0Msc fPnKrvF1t+7k307dmWu0cUbZXOmZBaSO51606vCOrc0oPf0/mfsvhnzuVjqevRN8 sThrEm0l1KwUWRgyxlscxbmDnBrz/wRrINiLtZ61aC947AHC75BosRY5BuOrZA4Q bWMi+/Hyg2oiM/1rXnsvy8BvLuj1wE9VtKyqGnK1tgTN/E5h0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQv5L3ysfid6gGJm6rVZBqi6hsXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOTBkMjMxMTEtODBlYi0z NzAxLThlNTAtYmE5NWIyOTZjY2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyOhmooLw4KhE+zskyKCYscIJ1D0RGzttOHpgJXoqGAVgLr66+/H99u +ISNuQpnWMLzaiGOOvFRDJxl6WmxDogIff+CV9OaY26hF1vzaKf2tTYqlQ80pLiU u755MpEjFQGpztgrCvXEVsU5eBxQGqVeIhF/1K7hFHDxoqbWBF4nSDvX+dgbBzp2 6wYP3IOV4UI6+0K2YjMX3G9pocIYeyCqh5yB7ttMZXA7yU0dtHVMfDoo4pevFOi+ NQoWMfetIXmSLdggiz9RmFqaPSQCjxUahCTvXTyHQwoSQI/KTQW4rPexJYFsSk4m r9vCTMEnooRaikPnsvT4oOMCV6a+GOY= -----END CERTIFICATE-----Generated at Sun Apr 27 04:30:57 2025 by rpki-client