$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa File: 6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa (raw, json) Hash identifier: hFM8upx9jZe9lMm1FiOoovKbWuSMuPeoEkKgv9fWjx8= Subject key identifier: 02:F5:97:34:A4:30:3B:5B:39:5F:12:49:E5:6F:AC:07:A3:47:22:9D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858484AAAE58929B07D4DF0DF1B80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa Signing time: Sun 22 Dec 2024 14:00:51 +0000 ROA not before: Sun 22 Dec 2024 14:00:51 +0000 ROA not after: Sat 22 Mar 2025 13:00:51 +0000 asID: 149440 IP address blocks: 23.27.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4a:aa:e5:89:29:b0:7d:4d:f0:df:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 22 14:00:51 2024 GMT Not After : Mar 22 13:00:51 2025 GMT Subject: CN=523ce9f8-22af-4aef-a416-43a4adf00995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e9:c7:ca:8a:2d:c5:96:8c:fc:fb:f0:ee:f1: 8b:83:1b:b3:d4:5c:51:ef:a4:16:90:e3:eb:73:01: fa:d1:e7:07:de:92:d7:57:cc:e2:30:9f:7f:f2:9f: b1:6b:55:84:0c:c0:9d:17:df:af:ef:9e:95:f0:ad: 2a:57:27:53:db:aa:69:7b:6d:09:1d:ed:47:93:3c: 5c:e9:65:16:f0:6a:b4:3c:4a:c3:89:c3:40:91:2e: 4d:f0:6c:e9:67:e5:20:64:a7:3e:52:e8:5c:58:de: 12:1f:07:ef:38:00:10:fd:a5:e0:f7:d1:5d:50:91: 5c:45:7f:0c:4e:07:90:e4:7a:85:89:39:58:19:85: e3:01:21:d9:8c:b8:b2:e5:3e:5e:30:d5:63:82:43: ab:04:a5:17:80:82:2a:11:86:d2:d1:86:82:6b:96: c2:17:05:28:71:46:61:b9:ef:e4:6a:f4:54:52:c1: ff:43:7c:b2:20:7d:d4:cf:8e:67:a5:89:65:bd:71: 80:0f:d5:2b:d3:24:a0:41:84:0a:d5:9f:e9:03:76: a2:71:e5:82:73:23:5b:2d:a6:b7:60:00:e0:d5:b8: 36:dd:5d:0f:f0:e4:95:f9:82:22:b9:21:e1:85:e9: d2:7d:46:26:c8:60:4b:e2:18:d2:05:69:41:d2:dd: cb:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F5:97:34:A4:30:3B:5B:39:5F:12:49:E5:6F:AC:07:A3:47:22:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6408a230-74f7-35a4-a8c6-9911d4aeafaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:51:09:d4:2a:8b:ab:90:d8:c9:69:41:c3:76:ef:d0:f7:df: d0:bd:db:0a:ec:4c:f3:6e:92:7a:73:89:28:eb:6f:73:ad:32: 47:24:46:a8:9b:60:d8:fa:cd:05:51:bb:43:01:92:e1:46:9e: 0d:bf:9e:e4:ad:1f:84:ee:3c:01:75:b3:63:16:5f:cd:24:a5: 70:f8:80:41:8d:aa:ef:52:be:25:4b:00:1a:9b:83:69:ac:67: c2:e6:63:af:04:51:d2:4e:43:53:35:d0:e3:14:8b:92:f7:00: 17:14:ae:18:9b:ca:9b:63:19:c5:59:3b:0f:93:4b:55:a9:ab: bf:98:0e:1a:c2:29:24:11:fa:1b:f4:06:43:2d:96:3e:33:75: f9:79:d5:4c:fb:ae:19:05:29:9c:56:56:1d:a5:73:7a:49:bf: 20:ba:05:7c:3d:e9:0c:b3:35:a1:57:ec:d7:bc:5e:93:e8:63: 88:61:d0:5c:db:34:f2:d7:22:24:5f:5b:7b:bd:a2:e0:de:a2: 46:36:2c:09:59:bc:7a:51:f6:f3:f0:e1:2f:37:a3:b1:06:5c: 48:71:19:ba:1f:b7:7c:14:70:69:4a:78:ee:68:84:f6:b5:fa: 46:f9:2f:b0:a4:b0:c0:e8:1f:f0:84:4c:8d:29:03:93:c6:cf: bb:55:02:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhKquWJKbB9TfDfG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIyMjE0MDA1MVoXDTI1MDMyMjEzMDA1MVowLzEtMCsGA1UEAxMk NTIzY2U5ZjgtMjJhZi00YWVmLWE0MTYtNDNhNGFkZjAwOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmenHyootxZaM/Pvw7vGLgxuz1FxR76QWkOPr cwH60ecH3pLXV8ziMJ9/8p+xa1WEDMCdF9+v756V8K0qVydT26ppe20JHe1Hkzxc 6WUW8Gq0PErDicNAkS5N8GzpZ+UgZKc+UuhcWN4SHwfvOAAQ/aXg99FdUJFcRX8M TgeQ5HqFiTlYGYXjASHZjLiy5T5eMNVjgkOrBKUXgIIqEYbS0YaCa5bCFwUocUZh ue/kavRUUsH/Q3yyIH3Uz45npYllvXGAD9Ur0ySgQYQK1Z/pA3aiceWCcyNbLaa3 YADg1bg23V0P8OSV+YIiuSHhhenSfUYmyGBL4hjSBWlB0t3L5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAL1lzSkMDtbOV8SSeVvrAejRyKdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjQwOGEyMzAtNzRmNy0z NWE0LWE4YzYtOTkxMWQ0YWVhZmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxsaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhRCdQqi6uQ2MlpQcN279D339C92wrsTPNuknpziSjrb3OtMkckRqib YNj6zQVRu0MBkuFGng2/nuStH4TuPAF1s2MWX80kpXD4gEGNqu9SviVLABqbg2ms Z8LmY68EUdJOQ1M10OMUi5L3ABcUrhibyptjGcVZOw+TS1Wpq7+YDhrCKSQR+hv0 BkMtlj4zdfl51Uz7rhkFKZxWVh2lc3pJvyC6BXw96QyzNaFX7Ne8XpPoY4hh0Fzb NPLXIiRfW3u9ouDeokY2LAlZvHpR9vPw4S83o7EGXEhxGboft3wUcGlKeO5ohPa1 +kb5L7CksMDoH/CETI0pA5PGz7tVAi8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:03 2025 by rpki-client