$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc9fccac-9c47-3a3d-b522-da058df163f4.roa File: bc9fccac-9c47-3a3d-b522-da058df163f4.roa (raw, json) Hash identifier: gjO/pucokQX8rybldNKayRDc1zmT2t1LgwGSGVAVPho= Subject key identifier: 34:72:18:2C:B1:53:13:AE:73:B3:E8:19:55:50:F1:97:9B:86:26:FD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858496ABB7853843482C5A35E9000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc9fccac-9c47-3a3d-b522-da058df163f4.roa Signing time: Fri 04 Apr 2025 18:27:14 +0000 ROA not before: Fri 04 Apr 2025 18:27:14 +0000 ROA not after: Thu 03 Jul 2025 18:27:14 +0000 asID: 401152 IP address blocks: 23.27.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6a:bb:78:53:84:34:82:c5:a3:5e:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 4 18:27:14 2025 GMT Not After : Jul 3 18:27:14 2025 GMT Subject: CN=6a7b82ab-46fa-4816-9c4f-668e69a70a83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:1a:47:cc:76:e0:d5:4a:79:2f:61:09:cb: 0d:91:4f:ec:38:a5:2a:7f:a9:e0:e4:bc:75:12:c1: 1c:38:4b:6d:51:7a:23:bc:11:f1:bd:db:19:a8:23: 34:2b:bc:34:41:b2:08:27:f9:65:a4:31:0e:60:83: d8:2f:a3:41:70:a4:9b:56:ae:d9:6f:bb:f6:a1:07: 71:df:df:c6:8f:57:e6:d2:78:b3:20:24:67:e9:aa: c4:82:2a:1d:6a:e8:b0:de:c9:f8:fa:46:b0:17:74: ee:fe:6d:e3:03:ca:98:42:0c:1d:d1:26:fb:f0:f9: a7:47:d2:25:76:6e:b1:bd:5c:ee:92:03:4e:41:af: ed:61:44:1f:a3:bc:16:e9:51:cf:83:6b:0b:b4:2f: bb:e3:24:f1:ad:58:41:7e:75:91:1b:c5:1a:74:40: 61:87:5a:0f:99:4a:48:eb:76:ab:df:b0:0d:8d:7d: d1:ed:41:f1:11:a3:52:6d:99:1b:c9:95:fa:ef:8b: af:cc:9a:2c:ce:c1:d7:89:26:29:12:8c:c4:59:01: 09:b6:49:fd:c4:ab:9a:93:64:83:da:6b:79:dc:0c: 1d:11:0f:15:9a:8f:75:b3:f6:27:b0:01:f0:a0:8c: 23:b9:84:b9:8f:a6:47:be:ce:e4:df:f3:b4:73:73: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:72:18:2C:B1:53:13:AE:73:B3:E8:19:55:50:F1:97:9B:86:26:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bc9fccac-9c47-3a3d-b522-da058df163f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:9f:85:c2:7f:74:ef:17:02:5c:45:14:4f:98:e1:88:fc:7d: 33:bb:74:f3:b2:4a:37:0c:58:4b:3b:04:35:be:ee:96:76:c0: bf:19:e7:d8:a4:71:65:c3:13:2a:f7:28:93:e2:dd:1e:07:27: 8e:8a:67:fa:d7:e9:8f:99:21:0b:1a:c4:2a:e1:0b:14:96:e5: 5f:46:fa:39:65:f7:e3:3f:75:4a:0d:15:a8:73:40:5e:ec:da: 77:60:c3:7a:1d:32:3a:68:70:87:ba:fd:4d:86:3f:e2:c4:68: 3a:0b:0d:8e:b3:9b:0e:e5:b1:02:c0:9f:28:83:15:21:cf:69: 94:51:e9:d7:c0:14:37:f4:6a:60:dc:63:a9:95:1a:3f:27:cc: 63:80:98:d3:69:15:2f:0d:d0:0e:ea:1a:8b:9e:17:fa:f5:61: 75:86:ba:23:6c:fe:d1:f6:af:53:41:e1:8b:f3:a7:f4:d4:ee: f9:7a:93:1c:e8:c6:77:96:2a:c7:6c:6a:12:74:90:75:14:1a: 91:5a:27:b4:bc:85:a8:ba:0a:1d:be:e6:45:ad:a9:ce:c5:66: e0:28:0a:d5:05:cc:8f:02:8c:78:1d:c6:38:7c:7b:2b:63:fe: 2d:57:41:54:c0:54:5b:9b:53:e6:30:46:f3:f2:ae:02:ca:b0: 2f:ef:c6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElqu3hThDSCxaNekAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQwNDE4MjcxNFoXDTI1MDcwMzE4MjcxNFowLzEtMCsGA1UEAxMk NmE3YjgyYWItNDZmYS00ODE2LTljNGYtNjY4ZTY5YTcwYTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLoaR8x24NVKeS9hCcsNkU/sOKUqf6ng5Lx1 EsEcOEttUXojvBHxvdsZqCM0K7w0QbIIJ/llpDEOYIPYL6NBcKSbVq7Zb7v2oQdx 39/Gj1fm0nizICRn6arEgiodauiw3sn4+kawF3Tu/m3jA8qYQgwd0Sb78PmnR9Il dm6xvVzukgNOQa/tYUQfo7wW6VHPg2sLtC+74yTxrVhBfnWRG8UadEBhh1oPmUpI 63ar37ANjX3R7UHxEaNSbZkbyZX674uvzJoszsHXiSYpEozEWQEJtkn9xKuak2SD 2mt53AwdEQ8Vmo91s/YnsAHwoIwjuYS5j6ZHvs7k3/O0c3Ol2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRyGCyxUxOuc7PoGVVQ8Zebhib9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmM5ZmNjYWMtOWM0Ny0z YTNkLWI1MjItZGEwNThkZjE2M2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxscMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEufhcJ/dO8XAlxFFE+Y4Yj8fTO7dPOySjcMWEs7BDW+7pZ2wL8Z59ik cWXDEyr3KJPi3R4HJ46KZ/rX6Y+ZIQsaxCrhCxSW5V9G+jll9+M/dUoNFahzQF7s 2ndgw3odMjpocIe6/U2GP+LEaDoLDY6zmw7lsQLAnyiDFSHPaZRR6dfAFDf0amDc Y6mVGj8nzGOAmNNpFS8N0A7qGoueF/r1YXWGuiNs/tH2r1NB4Yvzp/TU7vl6kxzo xneWKsdsahJ0kHUUGpFaJ7S8hai6Ch2+5kWtqc7FZuAoCtUFzI8CjHgdxjh8eytj /i1XQVTAVFubU+YwRvPyrgLKsC/vxjU= -----END CERTIFICATE-----Generated at Sun Apr 27 13:10:44 2025 by rpki-client