$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74a3e725-26b8-36ab-9409-920248550639.roa File: 74a3e725-26b8-36ab-9409-920248550639.roa (raw, json) Hash identifier: t0xBO112av6ewdQVQuOKlSoXAelmd5q7PIlt4DFpJsQ= Subject key identifier: B2:5F:F0:A7:90:09:EE:82:1D:2D:B8:9E:35:E9:BD:FF:17:C0:36:43 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B85E52709347ADCB0C580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74a3e725-26b8-36ab-9409-920248550639.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 10557 IP address blocks: 23.27.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:85:e5:27:09:34:7a:dc:b0:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=efa55541-112d-4087-a7d2-e67351981591 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:cd:cf:51:06:b9:71:de:64:44:34:07:67:9e: 7f:dd:55:39:76:e5:9b:71:14:b5:75:de:4d:0f:8f: 5b:25:0e:1a:f1:40:22:17:53:f0:8b:9b:4a:2f:51: 73:d0:7e:ad:f9:7f:02:f3:42:11:4f:e4:a5:f7:94: e0:ab:ee:e6:48:d1:05:bb:19:d5:81:8c:0e:cf:16: 43:67:26:48:ad:65:df:3c:e5:e6:77:4b:d6:57:7e: 03:24:94:96:e4:14:6d:dc:d3:c9:c4:74:eb:7b:1a: d7:26:61:c3:20:4c:45:8d:a6:23:23:8b:ca:a1:5b: a7:cc:70:cd:10:ca:f2:d7:06:de:bd:05:12:be:e7: 21:e9:17:54:84:f1:69:d7:84:29:4b:f0:66:97:39: ed:40:a6:af:f4:8a:f4:a0:57:06:1c:c1:3e:50:2c: d3:95:50:1c:5d:cd:8b:10:af:bc:71:f0:90:1a:90: ef:90:f1:cf:34:e0:31:8c:a0:fb:e1:cc:7e:fd:6f: 77:1b:93:e2:d4:46:60:4f:77:41:7d:c1:7e:c3:43: 9e:6a:6e:98:55:07:09:af:ae:d4:5b:48:fb:ed:c0: 43:42:45:5f:26:87:1c:b4:f3:14:c6:6c:de:71:7a: 6b:86:da:45:33:43:9c:c4:0e:3f:b9:a5:e8:38:10: 10:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:5F:F0:A7:90:09:EE:82:1D:2D:B8:9E:35:E9:BD:FF:17:C0:36:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/74a3e725-26b8-36ab-9409-920248550639.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 23.27.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:78:e5:74:0a:e8:56:5e:83:e9:25:96:ed:cf:e9:91:1e:e0: 4a:37:22:d2:36:83:d7:e6:80:8a:c7:5b:4b:a1:68:87:de:b7: 3b:02:a2:4b:c5:d0:db:d6:60:e6:c4:89:0e:19:0c:c5:9e:4c: 00:47:f8:e1:4a:41:3d:a2:16:f7:dc:d5:c7:3c:1b:83:0f:40: 1f:c6:c7:0b:73:75:5d:d0:19:36:25:e3:36:8f:8d:72:77:1d: b4:74:1c:e9:4f:4c:79:d0:56:b9:e3:a7:31:34:34:a8:ca:33: 60:4f:65:b0:49:71:b6:e2:f6:54:0d:ae:de:70:ad:42:b6:61: 92:01:79:05:0e:5c:b9:df:5a:21:07:14:ec:5a:c5:f3:37:11: 94:16:6b:7f:99:d5:5c:54:0c:94:54:96:e0:9d:b2:84:3e:53: 2a:4a:bc:ed:7d:98:d7:ee:11:8d:3b:35:6f:e5:ce:81:6d:56: e6:87:de:55:71:de:ca:6d:d5:c5:16:c6:8c:93:9f:49:71:d4: 2d:8b:34:23:4e:58:46:e0:db:d9:12:f7:b9:b4:c9:aa:16:8a: 8d:ef:da:74:08:bd:e7:21:ab:45:da:78:ab:08:ab:cc:de:29: 3d:53:75:c3:d4:c7:dc:8b:17:d3:0f:1a:64:1f:a0:fc:ca:d7: fc:f0:ad:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4XlJwk0etywxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk ZWZhNTU1NDEtMTEyZC00MDg3LWE3ZDItZTY3MzUxOTgxNTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA183PUQa5cd5kRDQHZ55/3VU5duWbcRS1dd5N D49bJQ4a8UAiF1Pwi5tKL1Fz0H6t+X8C80IRT+Sl95Tgq+7mSNEFuxnVgYwOzxZD ZyZIrWXfPOXmd0vWV34DJJSW5BRt3NPJxHTrexrXJmHDIExFjaYjI4vKoVunzHDN EMry1wbevQUSvuch6RdUhPFp14QpS/BmlzntQKav9Ir0oFcGHME+UCzTlVAcXc2L EK+8cfCQGpDvkPHPNOAxjKD74cx+/W93G5Pi1EZgT3dBfcF+w0Oeam6YVQcJr67U W0j77cBDQkVfJocctPMUxmzecXprhtpFM0OcxA4/uaXoOBAQCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJf8KeQCe6CHS24njXpvf8XwDZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzRhM2U3MjUtMjZiOC0z NmFiLTk0MDktOTIwMjQ4NTUwNjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxvdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC145XQK6FZeg+kllu3P6ZEe4Eo3ItI2g9fmgIrHW0uhaIfetzsCokvF 0NvWYObEiQ4ZDMWeTABH+OFKQT2iFvfc1cc8G4MPQB/GxwtzdV3QGTYl4zaPjXJ3 HbR0HOlPTHnQVrnjpzE0NKjKM2BPZbBJcbbi9lQNrt5wrUK2YZIBeQUOXLnfWiEH FOxaxfM3EZQWa3+Z1VxUDJRUluCdsoQ+UypKvO19mNfuEY07NW/lzoFtVuaH3lVx 3spt1cUWxoyTn0lx1C2LNCNOWEbg29kS97m0yaoWio3v2nQIvechq0XaeKsIq8ze KT1TdcPUx9yLF9MPGmQfoPzK1/zwrb8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:45 2025 by rpki-client