$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa File: 38b2a508-a156-3570-af47-e4798b36d921.roa (raw, json) Hash identifier: ORNhIB+y+idgHk3ke6PUciHPve792YaXmmT9ULVGzO0= Subject key identifier: EB:72:E2:C6:8D:AE:0E:01:C4:13:E4:0B:24:04:13:A9:1E:1B:0F:CC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848BBBB707D26B86CDD9B5C0680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa Signing time: Sat 01 Feb 2025 02:00:39 +0000 ROA not before: Sat 01 Feb 2025 02:00:39 +0000 ROA not after: Fri 02 May 2025 01:00:39 +0000 asID: 212238 IP address blocks: 23.27.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bb:bb:70:7d:26:b8:6c:dd:9b:5c:06:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 1 02:00:39 2025 GMT Not After : May 2 01:00:39 2025 GMT Subject: CN=0a3553bd-da28-49c1-8851-e1adf419382c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:77:97:9c:c5:36:9e:7b:b4:05:77:fa:49: 01:b8:ff:cc:6b:f3:76:39:31:2b:ae:d4:20:fb:9a: 1e:97:ee:26:ce:1a:3b:cd:ee:14:ed:bf:f5:c3:58: 93:07:cd:5b:fe:e6:c6:f5:31:ee:8e:b8:2c:34:24: 3f:08:67:f1:f5:1f:2f:55:e4:e4:a7:52:75:e1:e2: 71:02:a6:e3:42:fe:ae:3d:27:2e:14:18:76:d6:94: 5c:c2:2a:87:71:38:cc:37:ed:c7:34:fe:fc:57:df: d6:f4:78:70:30:9e:8b:cd:60:ab:b4:bf:2e:c5:cf: 64:a4:d5:d6:83:a3:ba:4d:c8:53:9b:33:fb:40:11: 25:34:6d:e2:b8:87:13:40:6a:8e:e7:69:41:8b:db: 51:94:ee:a3:27:fe:06:fc:f5:71:97:09:b0:5b:7a: cf:48:c6:90:ed:af:33:7c:39:30:7a:8e:fd:4d:c0: 10:4a:0f:94:94:cb:5e:39:dc:69:71:98:be:7d:f0: 8e:10:57:1a:83:bb:74:54:4a:9e:78:1b:e6:56:e4: 2d:a1:56:f1:33:7c:9b:39:2d:84:f8:20:ef:24:39: 5d:8e:7b:b8:0a:a9:af:46:9e:77:77:c5:09:35:23: 1b:ad:5e:7f:a6:3f:3c:1a:e8:5a:91:28:6e:be:a6: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:72:E2:C6:8D:AE:0E:01:C4:13:E4:0B:24:04:13:A9:1E:1B:0F:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/38b2a508-a156-3570-af47-e4798b36d921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:99:d3:12:80:16:35:97:a5:fa:1d:f7:b2:4a:08:97:fb:c5: 68:6d:6b:58:7f:5a:73:0d:08:60:68:78:c4:b6:d4:34:2b:9d: 28:b0:54:2d:05:89:e7:54:f8:03:a2:2e:f4:1f:b9:1a:b8:f9: 1b:b2:9d:c6:be:98:b7:68:89:73:b4:04:6c:fe:79:64:f9:53: db:8b:7f:97:e3:ca:8a:65:17:c8:21:10:66:c4:98:d3:4f:b2: 23:a3:88:93:ae:26:32:0b:65:ec:25:51:a8:05:0d:fb:1d:1d: 0b:76:17:cd:8a:96:b3:06:0f:32:81:f3:59:b9:27:09:cc:1f: b1:7a:3d:2b:ce:2d:4e:5c:87:1b:4b:54:d0:2b:d7:45:0e:6f: d1:1e:ef:26:ce:ce:ed:a4:bf:46:bc:db:23:9e:b2:b5:63:03: 08:87:f1:74:94:3c:d2:39:ce:31:9b:b8:33:5c:1a:48:1e:39: 36:a6:80:49:59:8d:79:b5:cb:e8:55:33:8c:6c:70:ff:c5:72: 14:b6:51:c7:49:25:92:ba:84:8c:ab:31:6c:17:ec:06:b8:e8: 04:81:02:16:77:ae:9e:60:05:2e:06:17:b3:2e:99:aa:1c:96: 8e:89:e1:b0:d1:85:ee:c5:8f:6c:1c:00:22:52:ad:a4:1a:c0: 82:39:dd:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi7u3B9Jrhs3ZtcBoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwMTAyMDAzOVoXDTI1MDUwMjAxMDAzOVowLzEtMCsGA1UEAxMk MGEzNTUzYmQtZGEyOC00OWMxLTg4NTEtZTFhZGY0MTkzODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn793l5zFNp57tAV3+kkBuP/Ma/N2OTErrtQg +5oel+4mzho7ze4U7b/1w1iTB81b/ubG9THujrgsNCQ/CGfx9R8vVeTkp1J14eJx AqbjQv6uPScuFBh21pRcwiqHcTjMN+3HNP78V9/W9HhwMJ6LzWCrtL8uxc9kpNXW g6O6TchTmzP7QBElNG3iuIcTQGqO52lBi9tRlO6jJ/4G/PVxlwmwW3rPSMaQ7a8z fDkweo79TcAQSg+UlMteOdxpcZi+ffCOEFcag7t0VEqeeBvmVuQtoVbxM3ybOS2E +CDvJDldjnu4CqmvRp53d8UJNSMbrV5/pj88GuhakShuvqbVWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOty4saNrg4BxBPkCyQEE6keGw/MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzhiMmE1MDgtYTE1Ni0z NTcwLWFmNDctZTQ3OThiMzZkOTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6Z0xKAFjWXpfod97JKCJf7xWhta1h/WnMNCGBoeMS21DQrnSiwVC0F iedU+AOiLvQfuRq4+Ruynca+mLdoiXO0BGz+eWT5U9uLf5fjyoplF8ghEGbEmNNP siOjiJOuJjILZewlUagFDfsdHQt2F82KlrMGDzKB81m5JwnMH7F6PSvOLU5chxtL VNAr10UOb9Ee7ybOzu2kv0a82yOesrVjAwiH8XSUPNI5zjGbuDNcGkgeOTamgElZ jXm1y+hVM4xscP/FchS2UcdJJZK6hIyrMWwX7Aa46ASBAhZ3rp5gBS4GF7Mumaoc lo6J4bDRhe7Fj2wcACJSraQawII53dk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:01 2025 by rpki-client