$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/0cc4924a-8a61-30de-9cc1-5ca4feffd204.roa File: 0cc4924a-8a61-30de-9cc1-5ca4feffd204.roa (raw, json) Hash identifier: Wi7ZMJrUOen9BlLd2mPXwSoVK3RUXJGOrUTgNkxZmSc= Subject key identifier: 2E:3D:89:C9:67:E1:4B:03:5E:4E:49:AD:B7:98:01:F5:E3:E1:23:09 Certificate issuer: /CN=88390227-7474-42cc-ab77-86c936657096 Certificate serial: 010D0C9F4328584571E862901EDEC717E8381C80 Authority key identifier: 2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/0cc4924a-8a61-30de-9cc1-5ca4feffd204.roa Signing time: Fri 05 Apr 2024 13:00:33 +0000 ROA not before: Fri 05 Apr 2024 13:00:33 +0000 ROA not after: Thu 04 Jul 2024 13:00:33 +0000 asID: 14618 IP address blocks: 207.230.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:71:e8:62:90:1e:de:c7:17:e8:38:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88390227-7474-42cc-ab77-86c936657096 Validity Not Before: Apr 5 13:00:33 2024 GMT Not After : Jul 4 13:00:33 2024 GMT Subject: CN=d522ff00-2c42-4c36-b12a-6e0707d2e2b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:73:74:e0:b6:05:ef:21:43:b9:65:0d:d8:37: 2a:4a:53:c7:0d:84:e7:c1:3a:73:b4:a0:c7:69:64: 73:58:b2:c1:11:0f:33:c3:71:f4:35:b0:7c:dc:cf: 09:08:25:fc:3a:1a:dd:b0:93:5c:2c:12:56:2e:57: 39:3c:50:df:54:d7:91:cf:1c:4a:b9:4e:fd:5c:f1: de:cd:35:bf:09:f3:db:d3:6d:cc:a7:36:40:48:79: 16:03:c6:17:3d:ee:d5:b8:2f:a5:d5:d2:19:09:e9: 10:99:a0:58:c9:4b:38:02:eb:b6:ca:ce:7f:60:52: a7:ee:aa:48:40:aa:1c:14:82:88:8d:12:7a:fd:17: d2:94:37:90:5d:63:71:95:83:b8:ad:92:49:da:c0: ae:0a:16:c9:da:ed:2f:dd:49:2a:92:d1:13:15:3c: a7:95:a3:c3:58:c3:41:3c:59:a3:91:21:e9:01:30: c3:de:23:b6:44:9c:0d:05:31:18:49:d0:8a:6d:0f: 8f:f0:e5:18:61:40:99:3b:29:a1:36:6c:fb:b6:ac: cd:7c:da:16:71:50:40:6f:58:3e:b7:9e:8c:23:a1: 58:64:ce:ce:9a:88:c6:b2:8f:d4:4f:6f:d6:79:54: 01:97:77:83:46:d4:e6:28:b1:19:3c:b2:1a:8c:9a: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:3D:89:C9:67:E1:4B:03:5E:4E:49:AD:B7:98:01:F5:E3:E1:23:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/0cc4924a-8a61-30de-9cc1-5ca4feffd204.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096/88390227-7474-42cc-ab77-86c936657096.crl X509v3 Authority Key Identifier: keyid:2A:C4:61:4D:D3:E3:D7:37:5E:4A:B4:61:47:C4:FF:55:D8:49:D3:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/88390227-7474-42cc-ab77-86c936657096.cer sbgp-ipAddrBlock: critical IPv4: 207.230.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:d6:86:96:79:35:3d:ab:54:1e:38:0f:52:6b:27:96:b5:0d: 01:fa:67:89:23:ec:01:bc:2f:ec:89:71:8c:a7:f7:a2:1b:37: 22:51:68:b1:06:f0:3b:7e:8d:2a:98:96:08:9d:d7:e7:2d:ce: 33:2c:e5:51:a5:94:be:57:4d:d8:5a:32:d3:c8:02:14:d2:74: 64:cf:d0:e3:82:71:df:22:ad:f1:49:7c:ec:be:57:c8:29:ff: e3:8c:de:94:73:b0:cc:43:7e:b8:b3:3c:8a:a8:9e:c6:33:d9: b0:9d:a8:f9:17:ce:4c:54:a6:f4:b6:36:11:76:7e:cc:3a:b7: 3e:1f:b7:d7:5c:ac:0a:98:cf:5e:ec:16:e4:00:c7:6e:6c:b1: 28:1b:08:cd:11:7c:dc:55:94:a5:b8:02:67:6a:10:b0:71:24: 18:89:8e:ce:60:e5:a5:28:91:e6:78:ac:f5:60:02:d7:ef:6b: fe:d7:5f:16:7a:2f:0c:6d:c0:d8:8a:4f:cf:20:e3:cf:b2:ec: e4:66:cd:2d:53:e5:0a:c2:80:84:11:1b:34:58:e8:de:0c:46: 6e:4a:82:b6:67:fb:eb:96:60:ff:68:24:75:37:f4:5c:0d:ca: 68:5d:43:9f:83:f5:c2:27:6c:79:31:7f:09:03:7a:78:c7:be: ad:f0:5f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVx6GKQHt7HF+g4HIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODgzOTAyMjctNzQ3NC00MmNjLWFiNzctODZjOTM2NjU3 MDk2MB4XDTI0MDQwNTEzMDAzM1oXDTI0MDcwNDEzMDAzM1owLzEtMCsGA1UEAxMk ZDUyMmZmMDAtMmM0Mi00YzM2LWIxMmEtNmUwNzA3ZDJlMmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3N04LYF7yFDuWUN2DcqSlPHDYTnwTpztKDH aWRzWLLBEQ8zw3H0NbB83M8JCCX8OhrdsJNcLBJWLlc5PFDfVNeRzxxKuU79XPHe zTW/CfPb023MpzZASHkWA8YXPe7VuC+l1dIZCekQmaBYyUs4Auu2ys5/YFKn7qpI QKocFIKIjRJ6/RfSlDeQXWNxlYO4rZJJ2sCuChbJ2u0v3UkqktETFTynlaPDWMNB PFmjkSHpATDD3iO2RJwNBTEYSdCKbQ+P8OUYYUCZOymhNmz7tqzNfNoWcVBAb1g+ t56MI6FYZM7OmojGso/UT2/WeVQBl3eDRtTmKLEZPLIajJoX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC49icln4UsDXk5JrbeYAfXj4SMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84ODM5 MDIyNy03NDc0LTQyY2MtYWI3Ny04NmM5MzY2NTcwOTYvMGNjNDkyNGEtOGE2MS0z MGRlLTljYzEtNWNhNGZlZmZkMjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODgzOTAyMjctNzQ3NC00MmNjLWFi NzctODZjOTM2NjU3MDk2Lzg4MzkwMjI3LTc0NzQtNDJjYy1hYjc3LTg2YzkzNjY1 NzA5Ni5jcmwwHwYDVR0jBBgwFoAUKsRhTdPj1zdeSrRhR8T/VdhJ0zMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84ODM5MDIyNy03NDc0LTQyY2MtYWI3Ny04NmM5 MzY2NTcwOTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz+aeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMfWhpZ5NT2rVB44D1JrJ5a1DQH6Z4kj7AG8L+yJcYyn96IbNyJRaLEG 8Dt+jSqYlgid1+ctzjMs5VGllL5XTdhaMtPIAhTSdGTP0OOCcd8irfFJfOy+V8gp /+OM3pRzsMxDfrizPIqonsYz2bCdqPkXzkxUpvS2NhF2fsw6tz4ft9dcrAqYz17s FuQAx25ssSgbCM0RfNxVlKW4AmdqELBxJBiJjs5g5aUokeZ4rPVgAtfva/7XXxZ6 LwxtwNiKT88g48+y7ORmzS1T5QrCgIQRGzRY6N4MRm5KgrZn++uWYP9oJHU39FwN ymhdQ5+D9cInbHkxfwkDenjHvq3wX2E= -----END CERTIFICATE-----