$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa File: 39af8921-60ee-3a49-9b43-975f800d7921.roa (raw, json) Hash identifier: sWItSOYs5XPMbqz3GYi4IhstMuRfEe0gL1nxChMQ1WM= Subject key identifier: E0:19:65:50:AF:76:A2:8B:0A:EF:BA:02:EA:59:06:78:C3:51:06:41 Certificate issuer: /CN=f070d399-4921-4247-a612-64e6e53f9f2b Certificate serial: 010D0C9F43285848B090B535DC5B96F9FB897F00 Authority key identifier: 61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa Signing time: Tue 28 Jan 2025 02:00:39 +0000 ROA not before: Tue 28 Jan 2025 02:00:39 +0000 ROA not after: Mon 28 Apr 2025 01:00:39 +0000 asID: 401274 IP address blocks: 23.186.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b0:90:b5:35:dc:5b:96:f9:fb:89:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f070d399-4921-4247-a612-64e6e53f9f2b Validity Not Before: Jan 28 02:00:39 2025 GMT Not After : Apr 28 01:00:39 2025 GMT Subject: CN=e9a69c96-3000-47d3-a3c6-24de894cc483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:41:f7:36:f3:ad:21:6c:7f:01:6b:44:96:51: f0:0e:02:c8:da:db:5f:77:ea:e1:a8:60:0d:d0:cf: f7:2c:be:06:3a:9a:e8:47:e3:83:d8:6c:89:63:bb: 70:9f:bd:bb:15:1e:1f:3b:46:13:1a:b3:d1:92:de: 80:d1:e7:cb:f6:75:8c:b0:0a:66:0f:bd:9f:9a:ec: 0d:40:8f:4d:38:74:3d:55:4b:05:12:b7:a4:1d:91: 62:ba:4e:31:36:ac:91:18:20:91:6b:72:a6:f9:fa: 8b:10:14:33:26:ee:28:70:55:79:d1:74:7b:67:97: 6b:4a:dd:77:67:70:11:db:bc:e5:86:c3:c7:18:ef: 01:c3:00:cc:64:cf:73:68:b1:32:bc:ef:2e:18:4e: 49:88:12:c0:e4:db:74:8e:d0:f4:d4:a0:98:b9:c4: 84:b6:f9:86:a3:b4:e6:ed:18:9c:7c:c8:88:87:ab: 56:60:5e:b4:b7:88:12:1f:e5:da:8f:0c:dc:78:b5: be:9b:b6:7b:54:6d:66:c7:de:b2:65:9f:bc:2b:9e: ad:27:d8:11:ec:80:20:5e:0e:cc:47:eb:97:02:59: ca:e6:4c:1d:06:61:5d:ec:05:e7:4d:6e:6a:fc:84: 4d:03:e4:2f:7a:ec:6b:83:4e:a3:34:4d:4b:72:81: 33:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:19:65:50:AF:76:A2:8B:0A:EF:BA:02:EA:59:06:78:C3:51:06:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/39af8921-60ee-3a49-9b43-975f800d7921.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b/f070d399-4921-4247-a612-64e6e53f9f2b.crl X509v3 Authority Key Identifier: keyid:61:7C:EB:83:28:62:01:5E:92:49:7B:33:A2:DB:13:67:E0:32:59:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f070d399-4921-4247-a612-64e6e53f9f2b.cer sbgp-ipAddrBlock: critical IPv4: 23.186.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:b9:d3:a9:93:2c:0b:e9:1d:cf:6c:8e:db:69:9b:77:b9:68: 0a:73:54:7f:15:a4:87:4e:be:10:c7:5f:97:56:86:73:f7:32: e4:2a:24:94:36:19:13:92:af:a4:ca:c0:09:4c:46:d7:f3:dd: 01:99:c6:d6:f6:ad:d1:79:ca:0d:c0:2f:60:9a:5b:9a:a5:88: 36:b4:23:3d:92:c7:6b:14:aa:d6:74:b0:73:0b:f8:a8:62:16: 72:3c:93:6b:c0:38:93:d6:e4:2f:f4:e5:ba:48:de:f8:ae:89: a1:18:0b:e6:be:46:fe:71:d0:91:c0:4b:b8:9b:91:0e:e0:fe: 31:91:55:60:1a:b0:fd:df:99:06:82:dc:d8:e3:5f:73:4b:ee: 15:9c:05:0d:38:68:e2:c4:98:77:a7:77:69:f4:2e:7d:2d:1b: 1d:8d:7e:15:9f:46:0a:68:b3:06:ce:8b:d5:c0:aa:76:6f:00: f1:78:46:a2:1f:1e:8e:15:e1:36:b0:4b:7a:36:44:b4:41:63: bd:ba:cb:b7:44:10:6c:b9:65:9e:d9:a9:50:dc:15:1d:d4:99: ba:2a:ae:63:bd:6a:43:f4:97:81:51:a1:c9:23:7c:9a:22:b6: 34:ea:33:1d:5f:4e:23:a1:96:ae:e8:35:15:f6:0a:b9:56:da: 21:0c:45:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiwkLU13FuW+fuJfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA3MGQzOTktNDkyMS00MjQ3LWE2MTItNjRlNmU1M2Y5 ZjJiMB4XDTI1MDEyODAyMDAzOVoXDTI1MDQyODAxMDAzOVowLzEtMCsGA1UEAxMk ZTlhNjljOTYtMzAwMC00N2QzLWEzYzYtMjRkZTg5NGNjNDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEH3NvOtIWx/AWtEllHwDgLI2ttfd+rhqGAN 0M/3LL4GOproR+OD2GyJY7twn727FR4fO0YTGrPRkt6A0efL9nWMsApmD72fmuwN QI9NOHQ9VUsFErekHZFiuk4xNqyRGCCRa3Km+fqLEBQzJu4ocFV50XR7Z5drSt13 Z3AR27zlhsPHGO8BwwDMZM9zaLEyvO8uGE5JiBLA5Nt0jtD01KCYucSEtvmGo7Tm 7RicfMiIh6tWYF60t4gSH+XajwzceLW+m7Z7VG1mx96yZZ+8K56tJ9gR7IAgXg7M R+uXAlnK5kwdBmFd7AXnTW5q/IRNA+Qveuxrg06jNE1LcoEzrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOAZZVCvdqKLCu+6AupZBnjDUQZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mMDcw ZDM5OS00OTIxLTQyNDctYTYxMi02NGU2ZTUzZjlmMmIvMzlhZjg5MjEtNjBlZS0z YTQ5LTliNDMtOTc1ZjgwMGQ3OTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjA3MGQzOTktNDkyMS00MjQ3LWE2 MTItNjRlNmU1M2Y5ZjJiL2YwNzBkMzk5LTQ5MjEtNDI0Ny1hNjEyLTY0ZTZlNTNm OWYyYi5jcmwwHwYDVR0jBBgwFoAUYXzrgyhiAV6SSXszotsTZ+AyWcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mMDcwZDM5OS00OTIxLTQyNDctYTYxMi02NGU2 ZTUzZjlmMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABO506mTLAvpHc9sjttpm3e5aApzVH8VpIdOvhDHX5dWhnP3MuQqJJQ2 GROSr6TKwAlMRtfz3QGZxtb2rdF5yg3AL2CaW5qliDa0Iz2Sx2sUqtZ0sHML+Khi FnI8k2vAOJPW5C/05bpI3viuiaEYC+a+Rv5x0JHAS7ibkQ7g/jGRVWAasP3fmQaC 3NjjX3NL7hWcBQ04aOLEmHend2n0Ln0tGx2NfhWfRgposwbOi9XAqnZvAPF4RqIf Ho4V4TawS3o2RLRBY726y7dEEGy5ZZ7ZqVDcFR3UmboqrmO9akP0l4FRockjfJoi tjTqMx1fTiOhlq7oNRX2CrlW2iEMRVk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:30:39 2025 by rpki-client