$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd76a30f-bf4e-320f-93b1-90f87681e583.roa File: bd76a30f-bf4e-320f-93b1-90f87681e583.roa (raw, json) Hash identifier: u35FDTWul30e+jkkHuPf7KZ8v/d3xX2MKvzi4pkM7xE= Subject key identifier: E2:82:36:95:EA:C7:7E:C9:9E:C2:EC:68:01:33:9B:8F:87:2C:0A:0B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF7723862D4DB18FE7CC00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd76a30f-bf4e-320f-93b1-90f87681e583.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 44477 IP address blocks: 23.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:77:23:86:2d:4d:b1:8f:e7:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=0c995da7-9a4f-4a36-a559-0c82b2ed21ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:29:bb:5b:06:d7:57:72:a7:cf:ff:3d:90:a6: 37:e1:31:e2:bb:fe:b9:6b:80:be:c1:74:c5:b0:bd: 66:10:35:a4:3d:aa:e2:e5:9a:45:51:0c:8e:39:c9: 78:bd:45:e3:e0:a1:3f:a2:3c:7a:d7:ce:74:82:25: 41:02:f4:c7:95:24:8f:ff:78:eb:91:45:16:5b:f9: f3:f4:50:0b:3f:12:6a:78:0c:93:84:3a:7e:b5:2a: 3f:2a:74:4f:94:82:9b:c6:03:d0:fa:45:95:53:6b: 9d:23:90:a1:e3:54:24:ab:30:e1:0f:30:2b:e7:23: 8d:cb:b0:7b:dd:9c:48:02:38:f4:79:8f:7d:3f:11: 70:e6:21:63:4d:ba:81:64:22:67:98:4a:8a:9f:cd: e5:98:97:07:a6:20:4e:9c:70:57:67:f1:32:c6:95: e5:d2:66:7a:ca:25:0d:ba:c3:b6:df:6a:21:9e:05: ec:cb:d0:c8:5b:16:25:84:47:28:23:c3:a6:8c:af: b2:51:69:50:6d:a5:70:d9:ce:7c:47:17:72:80:02: bf:b4:a3:a3:ff:da:80:2c:27:ec:b1:fc:b4:04:f6: 17:37:cb:c2:55:15:61:09:e8:00:dd:26:3f:d4:13: 5d:24:8b:e4:30:8d:46:c0:1b:b9:db:85:bf:68:a0: 7f:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:82:36:95:EA:C7:7E:C9:9E:C2:EC:68:01:33:9B:8F:87:2C:0A:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd76a30f-bf4e-320f-93b1-90f87681e583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:90:0c:0a:5c:a5:d1:47:f2:37:e9:49:d9:34:ab:e3:40:e7: fd:6e:08:93:b3:e8:21:86:a1:4e:8f:1f:00:e4:70:b3:25:24: 9f:21:84:c9:9a:02:2c:17:14:fc:45:1b:d8:88:9e:9a:4a:0d: be:8d:ef:ef:43:76:6b:c1:d2:9e:ad:b5:2b:9f:89:a5:ae:99: f3:07:1b:01:5f:c1:fb:fd:92:c1:5b:6a:d2:b9:46:42:24:c4: 48:5f:9f:16:d2:01:aa:c3:2f:c9:15:5b:52:0d:22:52:4f:72: 0d:30:66:85:e1:cf:7c:1f:a0:30:b3:9e:9d:29:04:db:9b:ea: dd:30:d1:72:75:4a:be:cd:7c:ba:07:df:e3:33:da:ed:17:10: 4e:1e:63:e1:e4:6a:b9:d4:81:a4:eb:6b:27:1a:c2:99:36:b9: b3:c3:30:00:e0:31:08:36:db:29:1b:a6:89:ee:13:34:25:d7: 48:3e:f6:dc:08:37:20:66:e6:46:c7:eb:c8:00:7e:0d:62:39: 18:f4:83:7b:7e:81:15:89:41:1c:54:5a:02:e0:7d:60:ab:7d: 13:c4:63:54:d4:42:75:dd:ed:e6:c6:4e:af:24:1a:7f:05:f2: f9:63:6c:99:69:53:47:ec:df:01:1f:70:79:af:e8:aa:5e:96: a4:91:b8:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3cjhi1NsY/nzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk MGM5OTVkYTctOWE0Zi00YTM2LWE1NTktMGM4MmIyZWQyMWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjCm7WwbXV3Knz/89kKY34THiu/65a4C+wXTF sL1mEDWkPari5ZpFUQyOOcl4vUXj4KE/ojx61850giVBAvTHlSSP/3jrkUUWW/nz 9FALPxJqeAyThDp+tSo/KnRPlIKbxgPQ+kWVU2udI5Ch41QkqzDhDzAr5yONy7B7 3ZxIAjj0eY99PxFw5iFjTbqBZCJnmEqKn83lmJcHpiBOnHBXZ/EyxpXl0mZ6yiUN usO232ohngXsy9DIWxYlhEcoI8OmjK+yUWlQbaVw2c58RxdygAK/tKOj/9qALCfs sfy0BPYXN8vCVRVhCegA3SY/1BNdJIvkMI1GwBu524W/aKB/RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKCNpXqx37JnsLsaAEzm4+HLAoLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmQ3NmEzMGYtYmY0ZS0z MjBmLTkzYjEtOTBmODc2ODFlNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGQDApcpdFH8jfpSdk0q+NA5/1uCJOz6CGGoU6PHwDkcLMlJJ8hhMma AiwXFPxFG9iInppKDb6N7+9DdmvB0p6ttSufiaWumfMHGwFfwfv9ksFbatK5RkIk xEhfnxbSAarDL8kVW1INIlJPcg0wZoXhz3wfoDCznp0pBNub6t0w0XJ1Sr7NfLoH 3+Mz2u0XEE4eY+HkarnUgaTraycawpk2ubPDMADgMQg22ykbponuEzQl10g+9twI NyBm5kbH68gAfg1iORj0g3t+gRWJQRxUWgLgfWCrfRPEY1TUQnXd7ebGTq8kGn8F 8vljbJlpU0fs3wEfcHmv6KpelqSRuA4= -----END CERTIFICATE-----Generated at Sun Jun 15 04:56:23 2025 by rpki-client