$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9571cb9-7e68-3fc3-8703-d27d98f36167.roa File: e9571cb9-7e68-3fc3-8703-d27d98f36167.roa (raw, json) Hash identifier: H3HUP4rhfHTGDgzN2NqBmoS28A70bz9xmu2r25IoLn8= Subject key identifier: 9B:32:B8:AA:7D:8F:86:0E:05:95:BF:74:75:D7:A8:12:BD:21:18:0F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E649FDED575D8DD183DB7A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9571cb9-7e68-3fc3-8703-d27d98f36167.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 23.27.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:9f:de:d5:75:d8:dd:18:3d:b7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=8b3220a8-5a38-4fac-84dd-4dc8aea3ebfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:21:3a:b2:1c:87:74:89:6f:48:55:19:18:e9: 14:85:e9:41:2b:fd:3f:66:ef:ef:d7:b5:68:79:4c: be:ae:d3:ec:6f:7d:27:31:b2:5b:1c:30:d9:fa:96: d7:6e:7a:ba:dd:a9:a1:73:d3:3e:b2:9b:02:9d:43: 63:16:90:87:67:47:63:46:79:ab:30:6a:59:be:f7: 41:8a:03:db:56:d3:4f:d8:21:8f:59:98:c1:9d:6c: d8:b5:ea:96:91:07:73:20:ea:ad:fe:cc:85:ca:39: 10:c0:d4:73:cb:1d:db:50:a3:a6:d1:10:ac:f6:38: 81:08:90:85:b8:5c:ee:ce:75:b7:25:90:b7:6c:46: 2c:d7:bf:a6:af:69:4e:43:5f:22:f0:6f:a1:f2:e9: 88:86:81:6a:40:b6:6d:55:5d:97:fb:ae:57:2f:3f: fb:58:14:7e:1e:e0:9e:59:e9:ca:53:8c:31:9b:db: 32:cc:0b:0a:73:a7:9b:4e:f2:5e:79:18:5a:78:b3: a2:9d:98:11:b7:3d:75:b6:bc:9d:7b:43:47:15:79: e7:8b:b9:23:ba:93:72:7c:15:13:c4:eb:2e:86:4e: af:a6:1f:be:7c:17:40:00:8e:46:7c:37:5e:49:de: a7:3b:32:92:f5:d9:e3:2e:1c:21:6a:47:4f:e7:7e: 50:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:32:B8:AA:7D:8F:86:0E:05:95:BF:74:75:D7:A8:12:BD:21:18:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e9571cb9-7e68-3fc3-8703-d27d98f36167.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:78:3f:7d:3a:67:fa:bf:71:10:9b:c6:0d:57:e4:a5:98:22: 0c:cc:09:8a:7f:7b:cc:a8:bc:9d:9e:d3:f1:7d:f7:bc:85:ad: 0b:ed:12:e3:91:f0:57:81:d9:24:b9:c3:99:cc:e0:c5:84:2e: 8f:5c:3c:56:1c:63:cb:1e:a5:5e:98:0e:df:52:6d:69:8e:01: c2:09:ce:d6:f2:76:b2:6b:12:a2:a0:76:60:e2:79:62:2d:85: 59:04:40:3b:b4:b1:c0:a5:37:1f:d0:66:de:cb:ce:d3:c2:11: 93:bb:27:0b:93:06:c3:c5:c3:a0:de:aa:d9:87:84:30:1d:43: b8:97:d7:23:84:c3:35:ab:06:21:3c:77:8d:0e:c7:ed:d6:7d: 25:ab:fb:f9:ee:86:8d:39:5f:17:57:23:94:60:c6:de:b0:76: 0c:84:01:c0:5f:ef:be:2f:1f:16:cc:85:53:30:43:59:2c:32: fd:a7:6f:d0:ad:f2:60:c0:38:94:d7:1a:e3:f1:ce:2b:b0:02: fc:ab:cc:f1:75:f6:c6:f3:88:58:ea:7f:ea:85:8c:68:26:4c: 04:19:9a:7f:74:ab:4c:84:5f:ef:80:dc:98:bb:0d:6a:0f:e4: b8:0a:f0:24:07:12:d2:5d:00:ef:50:99:fa:df:80:7f:3e:4d: 83:ed:4f:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZJ/e1XXY3Rg9t6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk OGIzMjIwYTgtNWEzOC00ZmFjLTg0ZGQtNGRjOGFlYTNlYmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCE6shyHdIlvSFUZGOkUhelBK/0/Zu/v17Vo eUy+rtPsb30nMbJbHDDZ+pbXbnq63amhc9M+spsCnUNjFpCHZ0djRnmrMGpZvvdB igPbVtNP2CGPWZjBnWzYteqWkQdzIOqt/syFyjkQwNRzyx3bUKOm0RCs9jiBCJCF uFzuznW3JZC3bEYs17+mr2lOQ18i8G+h8umIhoFqQLZtVV2X+65XLz/7WBR+HuCe WenKU4wxm9syzAsKc6ebTvJeeRhaeLOinZgRtz11tryde0NHFXnni7kjupNyfBUT xOsuhk6vph++fBdAAI5GfDdeSd6nOzKS9dnjLhwhakdP535QOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJsyuKp9j4YOBZW/dHXXqBK9IRgPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTk1NzFjYjktN2U2OC0z ZmMzLTg3MDMtZDI3ZDk4ZjM2MTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxuUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB54P306Z/q/cRCbxg1X5KWYIgzMCYp/e8yovJ2e0/F997yFrQvtEuOR 8FeB2SS5w5nM4MWELo9cPFYcY8sepV6YDt9SbWmOAcIJztbydrJrEqKgdmDieWIt hVkEQDu0scClNx/QZt7LztPCEZO7JwuTBsPFw6DeqtmHhDAdQ7iX1yOEwzWrBiE8 d40Ox+3WfSWr+/nuho05XxdXI5Rgxt6wdgyEAcBf774vHxbMhVMwQ1ksMv2nb9Ct 8mDAOJTXGuPxziuwAvyrzPF19sbziFjqf+qFjGgmTAQZmn90q0yEX++A3Ji7DWoP 5LgK8CQHEtJdAO9QmfrfgH8+TYPtT5s= -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:09 2025 by rpki-client