$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9d815e6-f2e7-3d4b-834a-41e94c8c43cf.roa File: b9d815e6-f2e7-3d4b-834a-41e94c8c43cf.roa (raw, json) Hash identifier: U2tHKyALayYxaLlcy7CjPURrrFY+vqKGR2MbOa6UgTo= Subject key identifier: 0E:7D:46:39:4D:19:F4:4E:4C:2A:F2:5B:E8:0D:E4:17:33:59:25:38 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584965E9827AFB13E3C5F1460B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9d815e6-f2e7-3d4b-834a-41e94c8c43cf.roa Signing time: Thu 03 Apr 2025 01:00:46 +0000 ROA not before: Thu 03 Apr 2025 01:00:46 +0000 ROA not after: Wed 02 Jul 2025 01:00:46 +0000 asID: 401152 IP address blocks: 23.27.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:65:e9:82:7a:fb:13:e3:c5:f1:46:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 3 01:00:46 2025 GMT Not After : Jul 2 01:00:46 2025 GMT Subject: CN=7d1cf46d-d037-4e76-ad21-03b559c3d204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:91:a8:31:bc:d9:95:f3:b3:3b:ff:17:f6:30: fe:fd:18:4f:17:30:42:8c:89:ee:e1:5c:49:0e:76: 95:02:ce:e7:2a:d9:ed:84:41:22:23:48:b2:14:49: eb:f8:ba:99:a2:52:5b:98:fa:d5:3c:1f:a2:01:4b: f9:ca:82:47:c7:dd:d2:03:3d:c5:94:a9:10:d1:1f: 7f:a4:ed:32:a2:c1:2d:e1:cd:83:76:49:b5:05:5e: 9a:bf:94:03:60:60:4f:7e:32:92:d3:3a:7f:11:d8: 30:ee:d6:c9:06:71:e8:86:93:66:a0:22:68:5b:55: a9:b1:d7:8e:7f:3c:9a:1d:6b:47:65:b4:0b:ae:b6: d6:d9:f6:15:be:ab:fa:d7:86:94:7a:52:a8:93:78: 56:87:85:25:7d:de:ba:02:94:17:8a:91:5b:b1:8a: 39:54:eb:5b:86:4c:1e:22:fb:2a:64:af:9b:ed:33: 6d:23:52:6c:58:22:19:87:ba:0e:a9:22:cb:72:89: 79:aa:00:71:dc:fb:53:c4:22:0d:23:9c:8a:d1:8c: ab:a1:9e:41:ba:0b:1a:c6:60:e0:36:68:dd:24:1d: eb:0e:28:89:e8:8e:53:80:3b:f7:65:9d:30:64:3e: 7d:62:75:73:80:19:88:4a:0e:96:9f:ec:47:3e:6b: 67:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:7D:46:39:4D:19:F4:4E:4C:2A:F2:5B:E8:0D:E4:17:33:59:25:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b9d815e6-f2e7-3d4b-834a-41e94c8c43cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:94:5f:84:54:53:c3:1a:2d:fb:d2:ac:78:f7:fb:c7:c4:7a: fa:42:fd:1d:da:f3:52:0e:30:6f:6d:cc:96:23:1b:be:c1:06: 23:43:c3:03:69:0e:28:a0:14:34:92:1c:ed:85:f1:49:18:44: f6:28:34:1e:bb:61:56:bc:5b:92:b5:63:20:01:31:66:25:02: 68:af:9c:66:9f:de:8a:40:87:fd:c1:55:84:c7:0b:0a:e5:21: ff:16:7d:83:05:7c:bd:de:b0:f9:0e:f1:9c:05:47:0b:60:dd: f8:3f:bc:f0:46:5e:22:31:6f:43:76:46:3c:ce:06:28:1e:b7: a7:5c:30:eb:a6:02:bc:3a:f9:0d:74:1f:c7:d2:f0:36:a6:c7: 4b:fb:6b:6a:ec:96:30:e0:35:28:96:3f:63:87:73:1c:c1:9b: fd:5a:3a:58:46:a0:ed:cf:bd:dd:45:bf:77:0d:72:b2:5d:13: a2:09:aa:67:96:13:47:91:c2:c3:2a:41:33:88:34:c7:11:99: 5d:85:02:cc:89:d6:7a:d1:78:98:05:31:d7:cd:42:4b:1e:2f: 00:f5:76:49:34:a9:c2:5f:44:1f:b8:ef:59:d8:34:79:3d:81: 92:3c:88:b7:8d:e2:fe:80:a3:56:53:bd:6f:74:6f:ce:13:3b: 09:45:71:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEll6YJ6+xPjxfFGCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwMzAxMDA0NloXDTI1MDcwMjAxMDA0NlowLzEtMCsGA1UEAxMk N2QxY2Y0NmQtZDAzNy00ZTc2LWFkMjEtMDNiNTU5YzNkMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5GoMbzZlfOzO/8X9jD+/RhPFzBCjInu4VxJ DnaVAs7nKtnthEEiI0iyFEnr+LqZolJbmPrVPB+iAUv5yoJHx93SAz3FlKkQ0R9/ pO0yosEt4c2Ddkm1BV6av5QDYGBPfjKS0zp/Edgw7tbJBnHohpNmoCJoW1WpsdeO fzyaHWtHZbQLrrbW2fYVvqv614aUelKok3hWh4Ulfd66ApQXipFbsYo5VOtbhkwe IvsqZK+b7TNtI1JsWCIZh7oOqSLLcol5qgBx3PtTxCINI5yK0YyroZ5BugsaxmDg NmjdJB3rDiiJ6I5TgDv3ZZ0wZD59YnVzgBmISg6Wn+xHPmtnmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA59RjlNGfROTCryW+gN5BczWSU4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjlkODE1ZTYtZjJlNy0z ZDRiLTgzNGEtNDFlOTRjOGM0M2NmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxs9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmUX4RUU8MaLfvSrHj3+8fEevpC/R3a81IOMG9tzJYjG77BBiNDwwNp DiigFDSSHO2F8UkYRPYoNB67YVa8W5K1YyABMWYlAmivnGaf3opAh/3BVYTHCwrl If8WfYMFfL3esPkO8ZwFRwtg3fg/vPBGXiIxb0N2RjzOBiget6dcMOumArw6+Q10 H8fS8Damx0v7a2rsljDgNSiWP2OHcxzBm/1aOlhGoO3Pvd1Fv3cNcrJdE6IJqmeW E0eRwsMqQTOINMcRmV2FAsyJ1nrReJgFMdfNQkseLwD1dkk0qcJfRB+471nYNHk9 gZI8iLeN4v6Ao1ZTvW90b84TOwlFcTk= -----END CERTIFICATE-----Generated at Mon Apr 28 15:07:03 2025 by rpki-client