$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a922a6b8-74e8-3eb8-805b-747963988ff3.roa File: a922a6b8-74e8-3eb8-805b-747963988ff3.roa (raw, json) Hash identifier: U8oxsaNqS/PIjbqIG+H7dguJUWBJk8Ip2hChthoqKP4= Subject key identifier: 84:DE:3E:2B:E6:63:48:4D:AA:AF:D2:D1:D9:6E:68:2B:56:12:86:B6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B57A2E535BF4EC180EC2C080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a922a6b8-74e8-3eb8-805b-747963988ff3.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 7018 IP address blocks: 23.27.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:2e:53:5b:f4:ec:18:0e:c2:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=b94c4cf9-ba83-415c-82fc-9f8bf23be35f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5e:bf:6f:ba:2f:11:2b:4c:56:23:f9:53:06: b8:c7:fd:19:01:63:50:4b:74:73:df:99:ec:3e:9b: a8:8a:95:8e:ea:7c:18:49:b3:ea:7c:4f:d8:dd:87: 7e:c8:7e:21:eb:fd:60:a2:83:90:c6:08:b0:70:4f: 23:33:e3:3b:4a:55:62:c1:bd:f0:fe:5f:7b:2f:86: f6:c3:b1:3e:77:d1:01:43:0b:e1:38:39:ca:5c:44: 76:7b:4c:3a:fc:47:f1:35:f6:1c:a4:ec:f1:ae:fe: 36:2b:78:21:33:a1:00:56:d5:5c:f1:1c:a9:92:48: c1:7a:3e:08:22:02:1e:36:0d:28:e0:f4:83:4d:8d: 61:af:24:63:20:ba:4f:5f:f1:37:c7:c4:7c:66:50: 1f:29:c6:3a:ae:09:2e:f2:4a:81:4f:d2:c1:c3:4d: d3:e6:a7:87:40:24:c2:a5:63:41:11:e3:38:06:57: 54:95:56:75:76:84:64:f9:86:56:62:7b:21:f5:6e: 93:46:bf:30:11:4f:81:e7:bc:3b:96:0f:9b:14:cb: a6:52:75:9f:9b:46:7b:01:86:da:d7:7a:1b:8c:9f: 03:c3:98:35:9f:5a:e7:2f:9f:52:0e:fa:b8:6b:9f: 13:09:e8:bb:47:65:c4:6a:23:b6:cb:80:07:9c:7a: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DE:3E:2B:E6:63:48:4D:AA:AF:D2:D1:D9:6E:68:2B:56:12:86:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a922a6b8-74e8-3eb8-805b-747963988ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:0a:2f:9d:59:0a:d8:89:50:4b:07:4c:a9:c2:c7:60:4d:3e: 66:e8:d9:00:42:19:f0:e4:53:1b:e2:0f:0c:0b:e3:5f:f6:f2: fd:2e:e4:65:bb:cc:02:f4:1f:52:26:2f:78:69:fb:98:bd:9a: 6f:7c:50:90:11:88:5e:21:7d:de:c1:35:0f:ff:2c:fd:11:ef: eb:ca:d1:e8:fa:1d:0c:64:af:85:1c:23:82:87:d1:36:9a:38: 14:e7:e0:90:2a:a7:c7:48:a2:90:68:7e:8b:40:ca:8d:63:f1: 92:d6:24:91:51:d4:d5:1a:7f:d7:88:25:44:a4:9b:aa:50:c6: a4:bc:84:7e:0b:6b:76:e4:23:8e:2e:b9:04:ae:c5:ad:70:0c: 9c:40:e6:fc:0e:ac:0d:1b:35:df:37:b4:9d:2f:fa:93:8e:7d: 18:44:f9:18:7e:2b:36:71:4a:a7:85:8e:a3:a1:33:c5:c3:07: 35:5a:1d:2c:21:f2:51:a3:7d:01:33:db:25:07:7e:bb:3e:34: bf:ed:87:6b:07:1e:d3:c9:a1:40:dc:4b:fa:14:7d:1e:1d:38: 30:1b:5e:cc:c0:6c:25:0f:26:bc:b7:8d:4f:e2:cb:e8:ab:fb: 6d:9f:c1:d7:0b:08:e4:70:65:5f:de:6a:8e:ef:05:fe:2d:f6: 72:51:cd:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ei5TW/TsGA7CwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk Yjk0YzRjZjktYmE4My00MTVjLTgyZmMtOWY4YmYyM2JlMzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyV6/b7ovEStMViP5Uwa4x/0ZAWNQS3Rz35ns PpuoipWO6nwYSbPqfE/Y3Yd+yH4h6/1gooOQxgiwcE8jM+M7SlViwb3w/l97L4b2 w7E+d9EBQwvhODnKXER2e0w6/EfxNfYcpOzxrv42K3ghM6EAVtVc8RypkkjBej4I IgIeNg0o4PSDTY1hryRjILpPX/E3x8R8ZlAfKcY6rgku8kqBT9LBw03T5qeHQCTC pWNBEeM4BldUlVZ1doRk+YZWYnsh9W6TRr8wEU+B57w7lg+bFMumUnWfm0Z7AYba 13objJ8Dw5g1n1rnL59SDvq4a58TCei7R2XEaiO2y4AHnHpCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITePivmY0hNqq/S0dluaCtWEoa2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTkyMmE2YjgtNzRlOC0z ZWI4LTgwNWItNzQ3OTYzOTg4ZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGEKL51ZCtiJUEsHTKnCx2BNPmbo2QBCGfDkUxviDwwL41/28v0u5GW7 zAL0H1ImL3hp+5i9mm98UJARiF4hfd7BNQ//LP0R7+vK0ej6HQxkr4UcI4KH0Taa OBTn4JAqp8dIopBofotAyo1j8ZLWJJFR1NUaf9eIJUSkm6pQxqS8hH4La3bkI44u uQSuxa1wDJxA5vwOrA0bNd83tJ0v+pOOfRhE+Rh+KzZxSqeFjqOhM8XDBzVaHSwh 8lGjfQEz2yUHfrs+NL/th2sHHtPJoUDcS/oUfR4dODAbXszAbCUPJry3jU/iy+ir +22fwdcLCORwZV/eao7vBf4t9nJRzX8= -----END CERTIFICATE-----Generated at Thu May 8 09:14:20 2025 by rpki-client