$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9720fc1-63e2-318f-a8ae-b58525ba4721.roa File: d9720fc1-63e2-318f-a8ae-b58525ba4721.roa (raw, json) Hash identifier: 5rOh8RmqYQl0BqhS3tXZEze7CuLdF+ZqTUCOkAVrsVY= Subject key identifier: 5E:67:62:C8:2C:89:9E:0C:D3:0A:7F:03:CA:27:BC:1B:D9:EA:6E:68 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849B57A2DB6A72CFF2252CBD1A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9720fc1-63e2-318f-a8ae-b58525ba4721.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 7018 IP address blocks: 23.27.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:2d:b6:a7:2c:ff:22:52:cb:d1:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=72aadf88-e5c7-4535-b824-b956cffe1ef6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ed:33:77:f9:8d:18:20:42:45:9f:96:3a:01: 8f:25:81:1c:66:90:63:ee:88:46:3b:4d:4e:28:5b: 41:9a:35:1a:ab:dc:f1:83:81:23:18:75:a4:08:d3: 46:07:6d:b0:0d:65:c7:b4:30:ed:6a:f5:4c:3d:28: 03:0a:1f:5d:78:65:69:b1:9c:c4:80:99:22:44:f6: b1:2c:2d:6e:28:cb:14:a5:9c:6b:ce:45:8c:88:58: 43:15:e1:2a:be:f6:58:0f:1c:75:c6:5c:28:dd:63: a8:8e:3f:c5:9d:80:21:36:59:ea:0e:1c:e6:68:35: 07:bf:70:eb:19:09:4f:63:f2:05:4e:eb:14:c7:26: ca:f0:69:c5:25:02:07:eb:b2:e9:e3:b5:91:78:83: d1:31:16:e7:fb:1f:0c:a4:31:6a:1a:ac:1f:1b:5d: 0d:b0:8c:e2:26:a8:bd:c3:d4:6a:f7:1c:ab:8f:bc: 79:0c:67:fe:8d:e5:84:95:72:58:45:7b:c6:f4:b9: 41:49:84:29:be:50:b0:9f:68:a9:cb:68:00:25:ef: 4a:8b:9e:56:b5:22:71:e1:5a:c9:8f:eb:32:a7:b4: 28:0b:aa:fd:5b:c3:06:ab:3c:c3:68:23:3b:c0:76: 0c:40:79:6c:ed:56:ed:9a:13:ad:fd:bc:99:6a:45: e0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:67:62:C8:2C:89:9E:0C:D3:0A:7F:03:CA:27:BC:1B:D9:EA:6E:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d9720fc1-63e2-318f-a8ae-b58525ba4721.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:46:33:2d:be:89:2b:55:43:61:60:87:e2:7e:27:e3:77:d7: b2:da:a0:9d:13:74:fb:df:c2:47:35:25:4c:f7:47:f0:28:64: d9:83:19:1d:91:90:02:9d:f2:09:9f:d9:a6:4e:b3:33:ac:16: 65:31:09:42:a3:72:1b:97:28:14:8e:94:60:f9:3a:7a:c5:9c: 79:63:4a:9e:c5:71:cb:e3:0b:39:f6:c7:5f:14:1c:03:ed:8f: bd:2c:db:7f:d7:97:ca:c4:4c:3c:6d:ce:f4:22:c1:21:82:45: 48:f9:62:91:79:00:68:24:e8:0c:93:26:80:cd:f7:a6:9c:af: 35:79:87:12:01:76:6f:4a:10:9b:e6:54:d4:08:15:d5:04:c5: ec:7a:47:0a:39:fd:8c:e4:75:5d:85:c4:3b:42:0c:00:63:fe: aa:da:c3:3e:ba:c4:6f:7b:eb:4d:42:38:0e:99:bc:ad:a8:41: 9e:56:fe:9c:5f:20:9a:13:64:d0:06:4e:59:b7:4f:b4:a3:4c: 3a:90:a1:7d:37:73:4d:94:1c:95:59:c8:1f:7e:f4:12:7f:ca: 82:c5:1e:bf:77:d9:89:cd:31:32:d7:ee:d5:0e:0c:c3:1c:17: 0d:30:67:02:1a:45:42:fc:f4:c1:ec:6d:80:2a:d6:97:68:d5: 53:06:c8:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1ei22pyz/IlLL0aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NzJhYWRmODgtZTVjNy00NTM1LWI4MjQtYjk1NmNmZmUxZWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAve0zd/mNGCBCRZ+WOgGPJYEcZpBj7ohGO01O KFtBmjUaq9zxg4EjGHWkCNNGB22wDWXHtDDtavVMPSgDCh9deGVpsZzEgJkiRPax LC1uKMsUpZxrzkWMiFhDFeEqvvZYDxx1xlwo3WOojj/FnYAhNlnqDhzmaDUHv3Dr GQlPY/IFTusUxybK8GnFJQIH67Lp47WReIPRMRbn+x8MpDFqGqwfG10NsIziJqi9 w9Rq9xyrj7x5DGf+jeWElXJYRXvG9LlBSYQpvlCwn2ipy2gAJe9Ki55WtSJx4VrJ j+syp7QoC6r9W8MGqzzDaCM7wHYMQHls7VbtmhOt/byZakXgYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5nYsgsiZ4M0wp/A8onvBvZ6m5oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDk3MjBmYzEtNjNlMi0z MThmLWE4YWUtYjU4NTI1YmE0NzIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1GMy2+iStVQ2Fgh+J+J+N317LaoJ0TdPvfwkc1JUz3R/AoZNmDGR2R kAKd8gmf2aZOszOsFmUxCUKjchuXKBSOlGD5OnrFnHljSp7FccvjCzn2x18UHAPt j70s23/Xl8rETDxtzvQiwSGCRUj5YpF5AGgk6AyTJoDN96acrzV5hxIBdm9KEJvm VNQIFdUExex6Rwo5/YzkdV2FxDtCDABj/qrawz66xG97601COA6ZvK2oQZ5W/pxf IJoTZNAGTlm3T7SjTDqQoX03c02UHJVZyB9+9BJ/yoLFHr932YnNMTLX7tUODMMc Fw0wZwIaRUL89MHsbYAq1pdo1VMGyOM= -----END CERTIFICATE-----Generated at Sat May 10 19:16:03 2025 by rpki-client