$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa File: 3d106c9d-da57-3ede-87a0-891616fb58f5.roa (raw, json) Hash identifier: R0bdkTfZKA0EJhl+kNbLwj6u5iZ/3qJbG8raOkrrWxs= Subject key identifier: D0:33:6A:CF:36:73:26:BA:A1:B5:A8:5A:B6:B0:66:16:F1:A8:A8:CC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B57A2DC549BAE34B89459480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 7018 IP address blocks: 23.27.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:2d:c5:49:ba:e3:4b:89:45:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=4cf9ed6e-baa3-4d9b-b6e8-c162c2b0e7f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b3:39:9b:13:6f:19:c9:65:78:5d:62:5b:e7: c8:01:b0:b5:37:87:b0:d3:65:5d:08:1d:72:c8:7c: 9b:7a:3c:b6:50:94:77:49:8b:e1:89:0a:ca:a1:04: c2:a1:dc:82:e0:48:70:38:79:9c:24:6b:05:77:9c: 6b:a1:68:a8:b4:e5:9f:3a:fa:24:6c:f5:90:ec:07: 1b:f8:fd:e1:4a:3c:0c:42:d6:cf:c9:e7:88:00:b4: 20:d7:14:0c:4b:7d:0b:a0:99:f4:9f:fa:fa:46:88: 9a:0a:6e:50:ac:df:d1:a5:66:14:b2:47:63:12:f6: ff:be:d5:23:31:49:31:a4:c7:0d:4b:36:5e:f3:f8: 94:02:0b:cd:41:dc:df:f8:2d:2d:81:96:fa:8f:bb: f7:73:87:12:33:86:c9:57:15:7b:0b:e9:f3:fe:dd: 4f:46:ad:c4:d5:a6:04:bf:0a:80:d0:6d:6b:2e:0e: eb:5e:87:ff:ae:4c:ac:9b:d1:5a:48:0d:0e:bf:5d: f8:ac:4f:e2:cd:1e:e2:c3:cd:d3:f0:80:ff:b2:98: e1:bc:26:67:13:b4:9b:01:43:34:59:5e:08:6d:c7: c8:bf:e6:19:53:d6:73:87:94:94:aa:28:6c:da:9b: 53:67:9e:72:c7:4e:4b:3a:4b:1d:77:18:ae:5c:7d: d0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:33:6A:CF:36:73:26:BA:A1:B5:A8:5A:B6:B0:66:16:F1:A8:A8:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3d106c9d-da57-3ede-87a0-891616fb58f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:0a:42:70:e4:ae:19:87:c7:c3:58:51:0a:8a:f6:93:2d:be: e0:30:03:33:11:6d:92:5e:ee:75:ff:de:ed:50:88:36:30:01: b6:6c:7c:0f:63:84:40:02:e2:10:b3:6c:91:ce:26:d2:2a:2a: 92:1f:e2:7b:df:df:d9:b9:a0:ef:5a:e0:4f:60:e9:15:d2:81: 3c:b5:19:62:51:18:25:8b:f1:0c:cd:70:db:bd:30:66:39:35: c9:07:8c:38:1c:86:9a:33:68:c3:7e:bd:3c:ca:6e:1a:a9:ce: 01:00:bc:a7:72:a4:94:ca:7d:fe:6b:36:d7:43:15:1c:22:d0: fb:0a:80:8d:d0:35:1d:59:48:2a:b5:47:a8:5f:84:c1:67:0a: 52:f9:d4:3a:2c:03:df:85:7f:81:fd:d1:c3:ea:3f:c8:9f:dc: 68:66:ef:98:d2:6e:59:d9:60:28:b5:e3:7a:3f:59:e8:06:7d: f5:92:93:93:86:40:bd:0b:a6:5b:e9:3e:0c:26:e2:db:8a:2d: c9:84:dc:a4:2a:f0:73:d4:8e:52:6f:81:b3:c1:09:97:6a:27: 89:82:71:2e:13:de:fa:eb:d9:80:02:99:9f:df:86:71:9a:c3: ec:6e:f8:79:a7:1f:75:4e:9a:1e:7a:f5:0c:b3:1f:00:f9:5c: 7a:8a:c3:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ei3FSbrjS4lFlIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NGNmOWVkNmUtYmFhMy00ZDliLWI2ZTgtYzE2MmMyYjBlN2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA37M5mxNvGclleF1iW+fIAbC1N4ew02VdCB1y yHybejy2UJR3SYvhiQrKoQTCodyC4EhwOHmcJGsFd5xroWiotOWfOvokbPWQ7Acb +P3hSjwMQtbPyeeIALQg1xQMS30LoJn0n/r6RoiaCm5QrN/RpWYUskdjEvb/vtUj MUkxpMcNSzZe8/iUAgvNQdzf+C0tgZb6j7v3c4cSM4bJVxV7C+nz/t1PRq3E1aYE vwqA0G1rLg7rXof/rkysm9FaSA0Ov134rE/izR7iw83T8ID/spjhvCZnE7SbAUM0 WV4IbcfIv+YZU9Zzh5SUqihs2ptTZ55yx05LOksddxiuXH3QeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNAzas82cya6obWoWrawZhbxqKjMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2QxMDZjOWQtZGE1Ny0z ZWRlLTg3YTAtODkxNjE2ZmI1OGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxspMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYKQnDkrhmHx8NYUQqK9pMtvuAwAzMRbZJe7nX/3u1QiDYwAbZsfA9j hEAC4hCzbJHOJtIqKpIf4nvf39m5oO9a4E9g6RXSgTy1GWJRGCWL8QzNcNu9MGY5 NckHjDgchpozaMN+vTzKbhqpzgEAvKdypJTKff5rNtdDFRwi0PsKgI3QNR1ZSCq1 R6hfhMFnClL51DosA9+Ff4H90cPqP8if3Ghm75jSblnZYCi143o/WegGffWSk5OG QL0LplvpPgwm4tuKLcmE3KQq8HPUjlJvgbPBCZdqJ4mCcS4T3vrr2YACmZ/fhnGa w+xu+HmnH3VOmh569QyzHwD5XHqKw7Y= -----END CERTIFICATE-----Generated at Sun May 11 09:29:20 2025 by rpki-client