$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/42eddc8e-3a3f-3ece-846b-707793850043.roa File: 42eddc8e-3a3f-3ece-846b-707793850043.roa (raw, json) Hash identifier: tInR/3BQ8auTOEoGZYhsUczI0XOPCMVWHCV3YEPC47Q= Subject key identifier: C7:21:4D:AD:60:C9:D1:24:EE:CE:AE:E9:2E:11:A8:69:F3:FB:CF:1E Certificate issuer: /CN=19c7927c-2aee-47c8-9379-dec57902bacf Certificate serial: 010D0C9F432858488B2EC3DAA68072BC375620E0 Authority key identifier: 47:2C:39:0C:24:5E:9C:33:A0:EF:9B:0C:B9:54:85:97:32:60:9E:25 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/42eddc8e-3a3f-3ece-846b-707793850043.roa Signing time: Tue 14 Jan 2025 16:38:28 +0000 ROA not before: Tue 14 Jan 2025 16:38:28 +0000 ROA not after: Mon 14 Apr 2025 15:38:28 +0000 asID: 30254 IP address blocks: 23.185.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/19c7927c-2aee-47c8-9379-dec57902bacf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/19c7927c-2aee-47c8-9379-dec57902bacf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:8b:2e:c3:da:a6:80:72:bc:37:56:20:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19c7927c-2aee-47c8-9379-dec57902bacf Validity Not Before: Jan 14 16:38:28 2025 GMT Not After : Apr 14 15:38:28 2025 GMT Subject: CN=aaca5825-2bf7-4a15-91fb-27bec99a89f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:76:fc:10:02:e5:60:16:c0:59:bd:b7:e2:9d: 2b:0f:cb:ea:5a:15:9f:65:3f:86:0c:1a:5d:8c:89: 06:f1:d0:e3:0b:af:ac:f0:70:54:1d:33:b5:d4:60: 13:5a:89:96:91:f2:08:09:26:1c:44:90:7c:a7:37: 61:02:60:0f:fb:eb:6e:38:5d:44:72:00:8b:b7:d7: 75:ab:69:2e:26:23:45:9b:8c:ff:29:f1:58:eb:e7: 0a:34:94:5b:79:59:e8:12:36:92:0f:c0:b1:76:fa: d5:08:4d:8a:06:a4:f7:6c:48:96:b8:33:d5:44:b2: c8:17:14:a5:77:ad:c7:80:25:2e:7a:52:1b:36:93: ef:a4:20:18:18:13:1f:3f:55:3c:8a:2f:10:31:85: 2c:e6:d3:4a:4c:ea:d7:00:ca:14:46:1d:98:cf:4e: a7:d7:41:6e:13:69:10:d4:a2:e2:7f:72:5f:b4:01: 73:98:32:01:36:6e:07:52:f6:8e:ea:8c:e6:d7:40: 83:d9:66:4f:83:67:b6:35:c6:db:1a:e0:e5:17:88: a5:d1:22:cd:15:fa:81:b5:03:47:e7:fb:05:96:77: fc:ce:21:2a:03:f6:c2:77:96:7d:42:22:ab:33:0a: de:15:05:f0:6a:0f:8e:f5:fd:57:46:7b:d5:8c:5d: 58:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:21:4D:AD:60:C9:D1:24:EE:CE:AE:E9:2E:11:A8:69:F3:FB:CF:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/42eddc8e-3a3f-3ece-846b-707793850043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf/19c7927c-2aee-47c8-9379-dec57902bacf.crl X509v3 Authority Key Identifier: keyid:47:2C:39:0C:24:5E:9C:33:A0:EF:9B:0C:B9:54:85:97:32:60:9E:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/19c7927c-2aee-47c8-9379-dec57902bacf.cer sbgp-ipAddrBlock: critical IPv4: 23.185.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:50:47:d8:b0:5b:4f:ec:cd:51:7d:aa:ad:4a:85:cf:75:f3: 69:c4:eb:e6:e6:d0:ba:e8:9b:a3:75:ec:b8:26:01:a5:8f:77: a2:94:05:cb:d3:f6:37:c1:a6:ff:85:8a:74:3e:c2:5f:8c:64: e4:a7:4e:4e:36:3e:fc:53:de:d9:5a:fa:d3:d7:77:08:22:ca: 26:b0:f7:c4:d5:0c:1b:e1:55:1c:f2:3e:8e:ac:12:77:a3:ab: 74:8a:79:07:f3:db:92:25:8e:95:b4:40:9b:7a:9f:16:a1:68: 2b:48:9f:a0:aa:13:00:6a:3c:4b:6e:41:5b:7f:f6:fa:67:c2: fd:c1:a7:23:23:14:4f:48:62:fe:62:41:b8:88:f2:5c:2b:66: 3b:13:03:37:c2:3d:35:34:f2:fe:c1:e4:1e:ca:30:32:2a:f5: 63:cb:54:0e:8c:f5:4d:b8:a0:f1:4c:0c:e1:c4:01:29:5d:22: 44:b9:96:e9:43:22:75:bd:d3:69:45:7c:3e:3f:2a:df:65:13: 9a:6f:46:b3:a6:3b:3b:89:6a:db:d1:f1:e6:ab:73:c9:76:34: 0b:af:51:35:13:84:3c:b6:49:dd:e9:f2:1e:a9:ac:f5:8f:03: f7:2e:26:94:57:32:28:7f:ac:d6:c0:86:92:00:f1:53:40:96: d8:3b:91:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiLLsPapoByvDdWIOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTljNzkyN2MtMmFlZS00N2M4LTkzNzktZGVjNTc5MDJi YWNmMB4XDTI1MDExNDE2MzgyOFoXDTI1MDQxNDE1MzgyOFowLzEtMCsGA1UEAxMk YWFjYTU4MjUtMmJmNy00YTE1LTkxZmItMjdiZWM5OWE4OWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5nb8EALlYBbAWb234p0rD8vqWhWfZT+GDBpd jIkG8dDjC6+s8HBUHTO11GATWomWkfIICSYcRJB8pzdhAmAP++tuOF1EcgCLt9d1 q2kuJiNFm4z/KfFY6+cKNJRbeVnoEjaSD8CxdvrVCE2KBqT3bEiWuDPVRLLIFxSl d63HgCUuelIbNpPvpCAYGBMfP1U8ii8QMYUs5tNKTOrXAMoURh2Yz06n10FuE2kQ 1KLif3JftAFzmDIBNm4HUvaO6ozm10CD2WZPg2e2NcbbGuDlF4il0SLNFfqBtQNH 5/sFlnf8ziEqA/bCd5Z9QiKrMwreFQXwag+O9f1XRnvVjF1YjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMchTa1gydEk7s6u6S4RqGnz+88eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xOWM3 OTI3Yy0yYWVlLTQ3YzgtOTM3OS1kZWM1NzkwMmJhY2YvNDJlZGRjOGUtM2EzZi0z ZWNlLTg0NmItNzA3NzkzODUwMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTljNzkyN2MtMmFlZS00N2M4LTkz NzktZGVjNTc5MDJiYWNmLzE5Yzc5MjdjLTJhZWUtNDdjOC05Mzc5LWRlYzU3OTAy YmFjZi5jcmwwHwYDVR0jBBgwFoAURyw5DCRenDOg75sMuVSFlzJgniUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xOWM3OTI3Yy0yYWVlLTQ3YzgtOTM3OS1kZWM1 NzkwMmJhY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdQR9iwW0/szVF9qq1Khc9182nE6+bm0Lrom6N17LgmAaWPd6KUBcvT 9jfBpv+FinQ+wl+MZOSnTk42PvxT3tla+tPXdwgiyiaw98TVDBvhVRzyPo6sEnej q3SKeQfz25IljpW0QJt6nxahaCtIn6CqEwBqPEtuQVt/9vpnwv3BpyMjFE9IYv5i QbiI8lwrZjsTAzfCPTU08v7B5B7KMDIq9WPLVA6M9U24oPFMDOHEASldIkS5lulD InW902lFfD4/Kt9lE5pvRrOmOzuJatvR8earc8l2NAuvUTUThDy2Sd3p8h6prPWP A/cuJpRXMih/rNbAhpIA8VNAltg7kQI= -----END CERTIFICATE-----Generated at Wed Feb 5 10:46:34 2025 by rpki-client