$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa File: 599d3743-7271-3612-ac7e-b695738f62c4.roa (raw, json) Hash identifier: bLEQJ2GI5rvo7V/ED2aK7wcWeMigwkRig/detoW0N00= Subject key identifier: FA:63:16:60:AF:3D:44:1B:19:82:FF:54:1F:79:83:5C:A4:70:00:08 Certificate issuer: /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Certificate serial: 010D0C9F43285848ADC616707BA7E5A12D001380 Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa Signing time: Mon 27 Jan 2025 02:00:39 +0000 ROA not before: Mon 27 Jan 2025 02:00:39 +0000 ROA not after: Sun 27 Apr 2025 01:00:39 +0000 asID: 44486 IP address blocks: 23.227.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ad:c6:16:70:7b:a7:e5:a1:2d:00:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb Validity Not Before: Jan 27 02:00:39 2025 GMT Not After : Apr 27 01:00:39 2025 GMT Subject: CN=814faf65-8a75-4600-b723-f5f76c0e4236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:47:ac:07:d5:63:07:4e:1d:f4:05:b3:09:97: 92:60:de:bd:ff:05:f8:78:44:d3:73:0a:78:bd:a5: 7a:f1:43:07:c6:22:3e:db:c2:d4:f8:ef:ee:59:50: e1:75:22:85:cd:6b:1f:50:19:6e:c3:c6:d1:60:2c: b3:da:1f:76:cb:3d:2c:06:cf:4a:7b:9e:2c:67:0a: a5:2a:31:72:dc:84:c3:69:d3:79:37:01:97:9b:31: dc:da:51:7f:6a:db:f6:7a:f5:b7:21:30:66:38:32: 52:dd:a6:9a:80:04:ae:66:3f:bd:36:1d:f0:e2:92: dd:bf:45:b8:c1:8f:7e:c7:f5:70:d7:70:3a:df:9b: c4:a1:67:e0:58:53:fe:83:ba:20:0e:73:23:3a:a4: 02:a4:2e:11:15:76:86:98:58:29:e5:e0:65:8a:ff: 28:60:5a:0e:27:62:d7:6a:59:25:ba:63:1b:0d:3e: 88:48:ff:ed:08:c4:77:eb:8a:f9:48:83:6d:88:b8: 2c:70:9f:ec:b0:79:aa:71:be:aa:7f:ec:92:c5:33: 34:c0:ce:80:fa:5a:1c:39:5f:a2:45:86:55:ca:8e: a1:dd:26:75:e2:e0:cf:09:61:a9:3a:d4:49:97:a8: 48:0a:4c:09:01:e9:de:01:e4:21:b7:8a:33:2b:8d: 43:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:63:16:60:AF:3D:44:1B:19:82:FF:54:1F:79:83:5C:A4:70:00:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/599d3743-7271-3612-ac7e-b695738f62c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl X509v3 Authority Key Identifier: keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer sbgp-ipAddrBlock: critical IPv4: 23.227.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:b6:d9:8a:c7:c1:30:c5:e1:d9:4e:5c:fe:66:14:db:3b:68: a2:20:f9:75:27:1c:5f:c3:4e:02:9e:58:45:8a:7e:01:68:88: e6:1c:a7:c3:b8:35:6e:6a:ee:a7:bd:6e:3e:ef:46:0a:cf:1a: a0:80:ff:fc:35:c6:11:4f:72:db:ad:10:4e:0a:a2:7e:70:b0: 49:c5:de:17:5e:e9:72:ca:b4:d5:30:e5:4c:b0:ad:d7:3e:9a: b6:35:08:11:00:a7:c6:dd:6f:16:b9:2e:03:73:da:e2:fe:e9: ef:3d:07:1b:85:70:63:bc:c5:26:a4:2e:7e:64:e5:d1:34:cc: c3:39:85:69:bf:3f:69:1e:14:08:6f:a8:3e:de:e2:67:d3:bb: 7e:a1:2a:b7:6d:17:b7:48:2a:92:b2:5d:d6:bb:7b:36:9d:5c: c2:b6:7c:9b:eb:1e:80:77:38:51:f6:49:cc:c5:86:d9:fe:17: e9:b7:a6:de:cb:1d:9f:da:2a:d0:69:38:7b:18:ca:3e:e8:a9: cd:36:be:07:c2:69:5c:3e:c8:5a:a1:c2:f5:a7:88:37:4c:30: b5:13:46:8a:74:de:22:ad:45:b7:b5:40:81:10:17:31:83:08: 3b:3a:df:26:33:85:69:96:2e:16:9c:08:16:f8:96:e3:6b:e2: c1:01:3c:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEitxhZwe6floS0AE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl ZGRiMB4XDTI1MDEyNzAyMDAzOVoXDTI1MDQyNzAxMDAzOVowLzEtMCsGA1UEAxMk ODE0ZmFmNjUtOGE3NS00NjAwLWI3MjMtZjVmNzZjMGU0MjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkesB9VjB04d9AWzCZeSYN69/wX4eETTcwp4 vaV68UMHxiI+28LU+O/uWVDhdSKFzWsfUBluw8bRYCyz2h92yz0sBs9Ke54sZwql KjFy3ITDadN5NwGXmzHc2lF/atv2evW3ITBmODJS3aaagASuZj+9Nh3w4pLdv0W4 wY9+x/Vw13A635vEoWfgWFP+g7ogDnMjOqQCpC4RFXaGmFgp5eBliv8oYFoOJ2LX alklumMbDT6ISP/tCMR364r5SINtiLgscJ/ssHmqcb6qf+ySxTM0wM6A+locOV+i RYZVyo6h3SZ14uDPCWGpOtRJl6hICkwJAeneAeQht4ozK41DGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpjFmCvPUQbGYL/VB95g1ykcAAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvNTk5ZDM3NDMtNzI3MS0z NjEyLWFjN2UtYjY5NTczOGY2MmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm MGRjMGVkZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi22YrHwTDF4dlOXP5mFNs7aKIg+XUnHF/DTgKeWEWKfgFoiOYcp8O4 NW5q7qe9bj7vRgrPGqCA//w1xhFPctutEE4Kon5wsEnF3hde6XLKtNUw5Uywrdc+ mrY1CBEAp8bdbxa5LgNz2uL+6e89BxuFcGO8xSakLn5k5dE0zMM5hWm/P2keFAhv qD7e4mfTu36hKrdtF7dIKpKyXda7ezadXMK2fJvrHoB3OFH2SczFhtn+F+m3pt7L HZ/aKtBpOHsYyj7oqc02vgfCaVw+yFqhwvWniDdMMLUTRop03iKtRbe1QIEQFzGD CDs63yYzhWmWLhacCBb4luNr4sEBPJE= -----END CERTIFICATE-----Generated at Sat Apr 5 21:55:58 2025 by rpki-client