$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9ea2de9-d9a6-36f5-ae3b-e112c270f44a.roa File: c9ea2de9-d9a6-36f5-ae3b-e112c270f44a.roa (raw, json) Hash identifier: AFqhLmmTx8CfIj/ocJ4j4FmpiCqUoBOgBB2yXq7hWYw= Subject key identifier: 33:AD:72:C9:04:73:1C:1C:1C:10:E1:7A:98:08:BE:19:24:65:22:64 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B386C462C8B9A65DA940 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9ea2de9-d9a6-36f5-ae3b-e112c270f44a.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 212238 IP address blocks: 23.27.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b3:86:c4:62:c8:b9:a6:5d:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=61fc11d8-8b20-4219-bc64-7cc1a5c54959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:96:4e:ac:bd:7e:09:f9:b4:6b:f4:38:c7:64: 8c:7e:35:14:ac:84:5b:0d:cb:db:0a:81:94:be:e1: 1c:0e:e7:11:25:12:5a:07:21:1e:d1:4a:0c:b1:dc: 5b:a6:82:c3:ce:c5:03:5b:50:fb:39:c0:4b:4c:32: 42:a4:cf:d7:77:e8:5f:37:1e:c2:d7:c6:1c:e9:c2: 65:ee:cf:73:51:80:ee:d3:d3:59:b2:bf:bf:b7:ea: 4a:fc:c9:cf:09:12:e1:3a:0f:0e:b8:a4:f8:de:2b: 74:99:f9:02:27:14:d0:23:5d:45:a7:5d:44:92:8c: 9e:91:70:f9:a6:fb:e1:ee:1f:c5:be:9c:7b:6f:99: a4:42:6e:ef:d6:a4:b5:c7:f8:e0:8f:0a:e8:6b:4f: b1:71:6a:fe:9d:12:fb:02:2c:df:0a:9e:65:24:ee: 2d:0a:d9:6a:52:bc:1e:c3:ca:51:01:9c:af:ac:60: 24:46:e3:79:a0:09:56:a5:c6:6d:48:0f:e6:ec:2e: 64:20:5c:55:04:d3:ac:39:e5:b4:5d:74:6a:0a:38: 4a:65:f9:af:28:8a:10:7b:21:03:68:46:40:73:41: 53:92:02:74:c9:a0:81:57:28:90:9c:72:19:0e:5b: 5e:f5:65:53:fd:d5:97:13:fd:6f:43:d9:d9:9d:3a: 12:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:AD:72:C9:04:73:1C:1C:1C:10:E1:7A:98:08:BE:19:24:65:22:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c9ea2de9-d9a6-36f5-ae3b-e112c270f44a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:c1:0d:dc:2c:da:be:6d:ed:38:68:72:c9:6c:03:35:93:8d: e1:4f:3c:88:65:6f:b3:66:3e:81:d1:27:34:e7:92:fa:08:56: 84:e6:57:b9:a6:74:ae:b4:e6:01:b4:2e:9e:3b:d9:2f:4a:a4: 1a:5a:67:9d:a2:4c:0c:3a:1c:b9:05:79:17:9e:dc:b4:b4:aa: 79:cf:75:79:70:c1:05:20:e5:a6:30:e7:11:3f:76:a2:fa:3b: 73:eb:38:44:cf:a9:3f:45:2a:7f:5b:bb:5c:46:bf:c4:c2:2f: b3:13:f3:ea:a0:8d:1a:b6:5f:19:76:37:6c:78:54:6b:f9:0e: 51:ee:5e:1b:6a:e9:1b:6f:4b:72:69:f9:24:7a:9c:6d:be:06: ac:9f:93:4b:7a:54:9f:de:9a:ef:03:23:0b:95:c0:b3:cf:43: a9:2b:3b:f0:22:e7:24:45:f2:ab:5b:2a:35:a7:ae:b4:e6:e5: 27:fc:4f:45:15:3c:5a:ea:38:7f:d7:37:24:10:3e:3c:e1:f9: ac:ef:53:c7:4e:35:5f:a8:f9:49:10:19:4b:66:05:e2:48:04: e7:fe:7e:2d:3a:9c:3e:9e:61:a8:64:4c:90:d7:62:4c:d1:84: 50:02:e4:a5:7b:1f:6f:ff:d6:a8:73:88:1c:06:0d:1c:45:75: 96:65:60:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLOGxGLIuaZdqUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk NjFmYzExZDgtOGIyMC00MjE5LWJjNjQtN2NjMWE1YzU0OTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pZOrL1+Cfm0a/Q4x2SMfjUUrIRbDcvbCoGU vuEcDucRJRJaByEe0UoMsdxbpoLDzsUDW1D7OcBLTDJCpM/Xd+hfNx7C18Yc6cJl 7s9zUYDu09NZsr+/t+pK/MnPCRLhOg8OuKT43it0mfkCJxTQI11Fp11EkoyekXD5 pvvh7h/Fvpx7b5mkQm7v1qS1x/jgjwroa0+xcWr+nRL7AizfCp5lJO4tCtlqUrwe w8pRAZyvrGAkRuN5oAlWpcZtSA/m7C5kIFxVBNOsOeW0XXRqCjhKZfmvKIoQeyED aEZAc0FTkgJ0yaCBVyiQnHIZDlte9WVT/dWXE/1vQ9nZnToSowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOtcskEcxwcHBDhepgIvhkkZSJkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzllYTJkZTktZDlhNi0z NmY1LWFlM2ItZTExMmMyNzBmNDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxv7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbBDdws2r5t7ThocslsAzWTjeFPPIhlb7NmPoHRJzTnkvoIVoTmV7mm dK605gG0Lp472S9KpBpaZ52iTAw6HLkFeRee3LS0qnnPdXlwwQUg5aYw5xE/dqL6 O3PrOETPqT9FKn9bu1xGv8TCL7MT8+qgjRq2Xxl2N2x4VGv5DlHuXhtq6RtvS3Jp +SR6nG2+Bqyfk0t6VJ/emu8DIwuVwLPPQ6krO/Ai5yRF8qtbKjWnrrTm5Sf8T0UV PFrqOH/XNyQQPjzh+azvU8dONV+o+UkQGUtmBeJIBOf+fi06nD6eYahkTJDXYkzR hFAC5KV7H2//1qhziBwGDRxFdZZlYME= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:11 2025 by rpki-client