$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa File: f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa (raw, json) Hash identifier: vSEfs/k9pxYTKdL5kShc2a2wkXVXTkfmnWEvY0xMqHk= Subject key identifier: 91:D6:97:6A:3B:FE:BB:7A:29:37:F0:34:D7:03:1A:8A:9A:99:DA:4E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B749082A87A981DD7900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 149440 IP address blocks: 23.27.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b7:49:08:2a:87:a9:81:dd:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=ff9c1083-e363-426d-b9ae-19a42fdd0146 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d4:3b:14:ed:37:4d:ae:62:d5:a3:d5:e4:67: 47:19:53:f8:2b:a1:e2:7a:24:77:82:fe:71:67:0b: f1:7e:60:94:11:98:f9:5b:76:c0:18:fc:f0:e1:db: a8:56:f6:b2:1a:35:83:8b:6f:74:38:d7:b4:ae:dd: 53:30:63:8e:d3:72:2e:38:9c:26:34:dc:5e:de:1b: 30:49:8d:26:84:4a:f0:de:c7:f9:74:1c:c3:6d:3b: 58:4a:d0:80:e6:d8:d8:30:d9:63:85:d3:5b:4f:07: b0:79:43:fb:38:eb:41:dd:a6:e8:13:05:cb:3b:c7: ff:4a:2c:32:e9:20:40:e3:a1:73:33:61:2c:e6:89: 0d:1f:0e:45:a0:92:ab:ee:7b:b3:63:4e:e0:fa:02: 8e:ad:ac:16:c8:5f:18:43:13:8e:46:65:e7:96:ec: 1e:44:ee:e7:7b:79:cd:79:9c:21:fc:69:2c:9f:01: 8f:f7:c6:55:ad:58:ad:80:12:18:25:ef:01:a1:70: 13:c4:47:24:24:11:fe:9e:86:9c:af:17:d6:1e:1e: 44:6d:f0:c2:8b:3d:e8:71:6f:9c:4d:57:08:45:54: 0a:51:83:a2:45:f3:ce:ac:35:a2:d4:38:d7:00:98: 0b:57:73:bf:f0:b6:d4:24:c4:39:0d:f2:0d:a9:95: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D6:97:6A:3B:FE:BB:7A:29:37:F0:34:D7:03:1A:8A:9A:99:DA:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f10ce1c1-12b3-371a-911b-5dc47c1c4514.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:4e:a5:18:2d:95:06:ee:4a:45:76:5d:66:de:06:97:8b:79: 17:c7:e3:fc:55:cd:bd:4d:2c:49:81:31:4d:0c:7b:a5:c6:38: 7c:72:ac:b3:a1:e0:18:a1:63:87:51:53:29:90:f7:25:62:bd: 9b:61:42:cb:c6:5c:64:3a:87:74:e7:8c:98:31:f0:ae:75:11: 64:98:4c:ee:34:61:29:5b:b1:b5:f4:b2:38:83:1d:09:91:0e: f8:4d:fe:0d:cb:d2:e3:49:e6:90:1a:6b:09:a7:cd:60:a8:c2: 92:38:02:b4:c0:db:06:e4:9f:cd:fc:9b:71:89:5e:4b:8f:23: ba:c6:d1:32:ae:c6:a0:ad:52:10:ac:1d:bf:bd:3b:c4:53:9e: 4c:5b:be:99:6a:f2:ee:8a:7c:9c:7f:50:3f:89:af:df:5c:dd: 46:a5:b5:fa:7d:7b:b2:4f:aa:ae:2b:d1:2c:cb:c3:cb:2b:59: 18:38:81:8e:3c:1d:75:d0:30:6b:ca:94:b8:a7:29:2e:39:25: 0a:68:6e:5c:0e:ed:86:6d:13:21:26:60:b2:d2:15:a2:ca:ac: cb:b2:ea:88:64:f5:4e:7b:29:3d:e2:08:10:07:bd:65:f3:c0: 80:82:70:b9:5d:73:4a:1e:65:e9:5d:ce:9e:23:3a:03:ca:c2: 6a:eb:6b:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLdJCCqHqYHdeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZmY5YzEwODMtZTM2My00MjZkLWI5YWUtMTlhNDJmZGQwMTQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNQ7FO03Ta5i1aPV5GdHGVP4K6HieiR3gv5x ZwvxfmCUEZj5W3bAGPzw4duoVvayGjWDi290ONe0rt1TMGOO03IuOJwmNNxe3hsw SY0mhErw3sf5dBzDbTtYStCA5tjYMNljhdNbTweweUP7OOtB3aboEwXLO8f/Siwy 6SBA46FzM2Es5okNHw5FoJKr7nuzY07g+gKOrawWyF8YQxOORmXnluweRO7ne3nN eZwh/GksnwGP98ZVrVitgBIYJe8BoXATxEckJBH+noacrxfWHh5EbfDCiz3ocW+c TVcIRVQKUYOiRfPOrDWi1DjXAJgLV3O/8LbUJMQ5DfINqZWY5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJHWl2o7/rt6KTfwNNcDGoqamdpOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjEwY2UxYzEtMTJiMy0z NzFhLTkxMWItNWRjNDdjMWM0NTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHROpRgtlQbuSkV2XWbeBpeLeRfH4/xVzb1NLEmBMU0Me6XGOHxyrLOh 4BihY4dRUymQ9yVivZthQsvGXGQ6h3TnjJgx8K51EWSYTO40YSlbsbX0sjiDHQmR DvhN/g3L0uNJ5pAaawmnzWCowpI4ArTA2wbkn838m3GJXkuPI7rG0TKuxqCtUhCs Hb+9O8RTnkxbvplq8u6KfJx/UD+Jr99c3Ualtfp9e7JPqq4r0SzLw8srWRg4gY48 HXXQMGvKlLinKS45JQpoblwO7YZtEyEmYLLSFaLKrMuy6ohk9U57KT3iCBAHvWXz wICCcLldc0oeZeldzp4jOgPKwmrra9A= -----END CERTIFICATE-----Generated at Sat Apr 26 19:17:08 2025 by rpki-client