$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b03d61b9-342d-380f-9587-b3d12318a314.roa File: b03d61b9-342d-380f-9587-b3d12318a314.roa (raw, json) Hash identifier: vA9RHdgMsVt4pKubUBBPSaZ5KESGlLcoM1odLpgjD6U= Subject key identifier: 04:22:54:07:74:61:63:E9:F0:DC:58:49:CA:D8:DE:B6:FE:8F:8E:1C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584965E98171E4B4A1E42CCFF000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b03d61b9-342d-380f-9587-b3d12318a314.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 401152 IP address blocks: 23.27.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:81:71:e4:b4:a1:e4:2c:cf:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=74c42260-2608-4a0a-9335-60b75ab6fad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:99:6a:44:2f:52:9b:1d:52:5d:ca:38:94:07: 20:dd:6c:b5:d5:90:eb:5e:b8:dd:4b:96:51:c6:b7: 17:a5:24:ba:5e:ea:41:80:49:a5:96:b1:a4:c3:dc: bd:c0:b8:ed:91:2a:a3:fb:6d:17:2f:3c:3d:96:97: 7b:7c:c2:45:73:86:af:21:d7:86:5c:1c:4b:9e:f5: 71:48:39:b8:36:a3:f2:0c:a3:a8:5c:aa:c2:e7:20: 3c:0e:3d:1d:2a:70:95:c0:28:4d:11:06:da:12:44: 32:08:33:52:98:d9:4d:e1:24:23:2b:4a:f6:8a:18: 6f:44:aa:be:07:43:e7:71:13:b8:3e:d5:64:77:5d: 15:2b:16:4a:f6:74:e6:6f:ad:1d:f7:38:d1:d6:85: dc:07:cd:cc:fa:61:91:93:f2:e1:ff:40:36:97:14: 09:ed:dc:0f:43:38:77:db:9c:2a:f8:ef:e0:4f:01: 39:d6:9c:31:2b:1a:df:c7:7e:90:01:1c:e2:ef:06: 75:ae:33:9f:af:31:16:8c:bb:da:9d:91:8c:b9:9b: 8d:ef:40:15:5c:8d:a9:8d:4b:63:9e:c1:5f:f6:b0: f5:44:27:dd:97:f2:a4:06:19:75:29:06:91:6f:70: fa:2c:bb:e4:ba:08:e7:4c:be:d7:d5:d0:34:7c:e8: a1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:22:54:07:74:61:63:E9:F0:DC:58:49:CA:D8:DE:B6:FE:8F:8E:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b03d61b9-342d-380f-9587-b3d12318a314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:5c:25:c0:d5:64:92:b8:0d:d2:fa:74:62:ed:9a:a9:b4:7b: 6d:5a:47:c8:dc:a4:8f:63:b3:19:54:45:2a:fd:c6:b1:98:90: ca:dc:6b:79:01:39:2f:80:7f:1f:0d:e7:15:44:5a:2d:29:d2: 43:56:20:de:5d:56:50:2e:9f:f8:b3:bd:08:95:13:1c:98:8a: 30:79:90:43:f9:bf:a0:47:72:72:9b:ba:fb:b4:9b:10:41:c2: 53:41:ff:85:d0:76:53:70:a9:4a:2e:e3:5a:05:58:0d:df:dd: 05:d5:d2:d0:4a:fa:b0:20:c3:ae:93:b3:90:31:c8:13:94:ab: e3:c6:65:39:0d:32:cf:d8:9a:85:7b:92:f0:14:e0:f4:23:09: 37:44:26:02:1c:11:82:cf:b2:0f:92:a0:a0:f1:a4:76:1b:86: 42:f5:3f:dd:fc:08:4e:31:b4:5b:37:ca:0c:66:ac:4a:43:0f: 92:9c:10:51:53:7c:5a:97:8e:e4:20:05:5d:a6:2e:55:57:2a: c9:01:96:94:0c:6b:1c:e7:3f:9c:d2:d9:ef:a0:18:00:79:33: d0:0a:30:53:df:df:7c:6b:8b:3e:23:55:65:91:78:24:49:ed: be:47:0b:7c:bd:45:b7:54:90:24:c9:4e:fc:9f:44:d1:cc:12: f0:93:96:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6YFx5LSh5CzP8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk NzRjNDIyNjAtMjYwOC00YTBhLTkzMzUtNjBiNzVhYjZmYWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZlqRC9Smx1SXco4lAcg3Wy11ZDrXrjdS5ZR xrcXpSS6XupBgEmllrGkw9y9wLjtkSqj+20XLzw9lpd7fMJFc4avIdeGXBxLnvVx SDm4NqPyDKOoXKrC5yA8Dj0dKnCVwChNEQbaEkQyCDNSmNlN4SQjK0r2ihhvRKq+ B0PncRO4PtVkd10VKxZK9nTmb60d9zjR1oXcB83M+mGRk/Lh/0A2lxQJ7dwPQzh3 25wq+O/gTwE51pwxKxrfx36QARzi7wZ1rjOfrzEWjLvanZGMuZuN70AVXI2pjUtj nsFf9rD1RCfdl/KkBhl1KQaRb3D6LLvkugjnTL7X1dA0fOihewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAQiVAd0YWPp8NxYScrY3rb+j44cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjAzZDYxYjktMzQyZC0z ODBmLTk1ODctYjNkMTIzMThhMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF1cJcDVZJK4DdL6dGLtmqm0e21aR8jcpI9jsxlURSr9xrGYkMrca3kB OS+Afx8N5xVEWi0p0kNWIN5dVlAun/izvQiVExyYijB5kEP5v6BHcnKbuvu0mxBB wlNB/4XQdlNwqUou41oFWA3f3QXV0tBK+rAgw66Ts5AxyBOUq+PGZTkNMs/YmoV7 kvAU4PQjCTdEJgIcEYLPsg+SoKDxpHYbhkL1P938CE4xtFs3ygxmrEpDD5KcEFFT fFqXjuQgBV2mLlVXKskBlpQMaxznP5zS2e+gGAB5M9AKMFPf33xriz4jVWWReCRJ 7b5HC3y9RbdUkCTJTvyfRNHMEvCTlrU= -----END CERTIFICATE-----Generated at Sun Apr 27 19:48:58 2025 by rpki-client