$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd76a30f-bf4e-320f-93b1-90f87681e583.roa File: bd76a30f-bf4e-320f-93b1-90f87681e583.roa (raw, json) Hash identifier: PJmkDlTnLnx+Vje0csNmdLqQ7r05AzfShRe9aLjikd4= Subject key identifier: CC:8E:BD:0C:5F:67:6E:1D:17:B0:8B:57:49:95:21:35:FF:79:2B:BB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848F0087CEC684CC4270F78A580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd76a30f-bf4e-320f-93b1-90f87681e583.roa Signing time: Wed 19 Feb 2025 19:38:00 +0000 ROA not before: Wed 19 Feb 2025 19:38:00 +0000 ROA not after: Tue 20 May 2025 18:38:00 +0000 asID: 44477 IP address blocks: 23.27.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f0:08:7c:ec:68:4c:c4:27:0f:78:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 19 19:38:00 2025 GMT Not After : May 20 18:38:00 2025 GMT Subject: CN=d208694e-8c09-4410-8555-764413d8aec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:23:e6:02:09:5f:37:28:4b:91:6b:7c:c5:ac: 38:85:6e:6c:3a:f6:c6:cc:9a:b4:ac:cf:7c:e7:90: a3:ab:d8:6e:c3:7f:3b:5d:7e:d5:fd:d4:3e:f8:cd: 01:90:01:28:87:f5:ce:54:09:96:23:17:5d:ca:42: be:fa:a9:95:65:11:61:85:a7:9c:a3:cb:b5:b7:b3: 52:07:46:28:65:e2:eb:75:85:e8:3b:37:d5:0d:ae: 00:56:54:b2:49:6f:83:14:ae:b1:ae:f1:c8:2c:a6: 3e:ef:5c:93:90:c2:d9:b9:78:78:03:70:fd:53:97: d5:08:d2:ff:bc:7b:f1:05:6d:6a:e9:cf:ad:09:c0: b1:44:eb:c4:ef:80:db:f8:28:a4:e4:8d:e9:ec:01: 86:fe:09:49:0f:52:f4:5e:48:c3:3c:ea:74:47:c3: 21:7c:d0:df:ff:eb:05:2d:50:bf:e1:d8:08:e6:c2: 19:ef:01:4a:d1:33:9d:f9:9d:ba:18:5a:81:94:e5: 82:61:01:79:e5:21:ca:2b:f2:5f:0f:d1:70:c5:59: 5f:ac:df:59:92:b5:08:fb:86:28:65:13:3b:5f:72: 32:92:2a:21:a1:44:1f:cc:6c:b4:bc:e3:1f:61:8d: b2:13:cb:a5:c1:ec:70:67:67:d1:fd:db:7c:8c:62: 07:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:8E:BD:0C:5F:67:6E:1D:17:B0:8B:57:49:95:21:35:FF:79:2B:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bd76a30f-bf4e-320f-93b1-90f87681e583.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:6d:88:89:b1:a6:11:71:f8:97:80:1d:52:be:43:f1:0c:09: b5:22:87:d4:d0:0e:4e:1b:25:e0:32:65:10:1f:68:23:b1:79: fb:b1:a6:55:2f:ee:80:b8:2f:32:d2:ee:37:c6:3c:44:0f:48: d2:61:e0:ee:9f:b1:10:b8:fe:6d:30:db:33:f6:7a:27:42:e9: 55:09:a5:cf:f8:bd:c5:d8:e9:a5:76:c5:fd:7a:c8:87:d2:db: 9f:4a:ac:9a:86:3b:77:11:12:08:d6:88:c6:56:22:9d:36:c0: 14:ee:7a:88:28:d8:fa:c1:89:10:2d:00:6a:3d:2f:ed:de:f9: 6d:44:e0:01:17:22:96:38:f3:8b:e0:bc:79:66:f8:3c:22:aa: ba:ce:07:5d:31:a9:98:c6:07:51:54:f3:3f:02:c7:08:88:4b: a5:32:17:63:fe:c6:76:24:42:3f:a0:14:7e:f9:63:8c:8a:01: db:e0:6e:57:fe:15:91:3e:43:bf:c3:a0:72:02:db:b7:32:df: 73:de:84:78:f8:e1:2f:ff:b3:1c:70:6e:f7:6a:f0:33:97:ac: bd:0c:2a:de:75:87:6c:56:55:23:cb:b8:f4:1f:76:45:96:96: 0a:09:62:8b:2d:b6:5f:60:96:1c:04:f9:62:1c:f5:50:40:0b: aa:12:7f:96 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjwCHzsaEzEJw94pYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIxOTE5MzgwMFoXDTI1MDUyMDE4MzgwMFowLzEtMCsGA1UEAxMk ZDIwODY5NGUtOGMwOS00NDEwLTg1NTUtNzY0NDEzZDhhZWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSPmAglfNyhLkWt8xaw4hW5sOvbGzJq0rM98 55Cjq9huw387XX7V/dQ++M0BkAEoh/XOVAmWIxddykK++qmVZRFhhaeco8u1t7NS B0YoZeLrdYXoOzfVDa4AVlSySW+DFK6xrvHILKY+71yTkMLZuXh4A3D9U5fVCNL/ vHvxBW1q6c+tCcCxROvE74Db+Cik5I3p7AGG/glJD1L0XkjDPOp0R8MhfNDf/+sF LVC/4dgI5sIZ7wFK0TOd+Z26GFqBlOWCYQF55SHKK/JfD9FwxVlfrN9ZkrUI+4Yo ZRM7X3IykiohoUQfzGy0vOMfYY2yE8ulwexwZ2fR/dt8jGIHKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyOvQxfZ24dF7CLV0mVITX/eSu7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmQ3NmEzMGYtYmY0ZS0z MjBmLTkzYjEtOTBmODc2ODFlNTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVtiImxphFx+JeAHVK+Q/EMCbUih9TQDk4bJeAyZRAfaCOxefuxplUv 7oC4LzLS7jfGPEQPSNJh4O6fsRC4/m0w2zP2eidC6VUJpc/4vcXY6aV2xf16yIfS 259KrJqGO3cREgjWiMZWIp02wBTueogo2PrBiRAtAGo9L+3e+W1E4AEXIpY484vg vHlm+DwiqrrOB10xqZjGB1FU8z8CxwiIS6UyF2P+xnYkQj+gFH75Y4yKAdvgblf+ FZE+Q7/DoHIC27cy33PehHj44S//sxxwbvdq8DOXrL0MKt51h2xWVSPLuPQfdkWW lgoJYosttl9glhwE+WIc9VBAC6oSf5Y= -----END CERTIFICATE-----Generated at Sun Apr 27 12:31:13 2025 by rpki-client