$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/478070f8-1e90-364c-9acd-801cb8560fba.roa File: 478070f8-1e90-364c-9acd-801cb8560fba.roa (raw, json) Hash identifier: e+lyR3L1BuZIkWN0VBBZfsrh3v0ZQDeJmEZSvvVXHYM= Subject key identifier: 85:66:B4:7A:81:BB:6D:EF:E0:0C:9A:41:FC:09:A7:4A:98:DB:FD:E2 Certificate issuer: /CN=e605f279-55f4-48ec-ba13-4845c0973a63 Certificate serial: 010D0C9F43285845D5039A1E2D42F61647493440 Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/478070f8-1e90-364c-9acd-801cb8560fba.roa Signing time: Sat 11 May 2024 01:00:27 +0000 ROA not before: Sat 11 May 2024 01:00:27 +0000 ROA not after: Fri 09 Aug 2024 01:00:27 +0000 asID: 54113 IP address blocks: 140.248.220.224/27 maxlen: 27 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 May 2024 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:d5:03:9a:1e:2d:42:f6:16:47:49:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63 Validity Not Before: May 11 01:00:27 2024 GMT Not After : Aug 9 01:00:27 2024 GMT Subject: CN=c36e0880-5273-48a0-81a4-4659b161eaae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:03:ff:a4:a3:dc:0f:c5:03:f1:97:3b:67: 6a:12:3d:43:f8:bc:ac:93:22:02:3d:e8:ea:aa:77: ed:18:be:70:48:53:54:ff:27:7c:5d:ba:4f:04:62: e7:98:12:9f:cc:70:ee:66:b8:69:e0:82:47:9b:b0: f7:e8:25:c3:60:50:3c:7a:f6:bc:4b:a5:e0:cf:07: 44:8d:04:ca:aa:0d:ec:6f:24:91:57:8e:7d:68:82: 0b:36:eb:71:26:61:fa:d9:7c:1b:b7:f2:6c:97:ad: de:c3:79:0b:ab:e0:46:3b:f8:a8:a6:ba:9f:78:8f: 4d:26:20:1f:c8:30:92:03:b9:3c:b8:13:55:e8:38: b3:39:47:d6:3b:a5:94:c8:dc:5d:c2:f0:f8:5e:c5: 4c:55:40:ba:31:92:ea:21:de:30:5e:12:a1:ac:1b: 52:e1:1f:46:be:95:81:f5:f0:24:8d:fd:55:ed:7f: b9:7d:b4:45:d6:36:c0:24:f2:d8:41:7a:9f:e4:fb: d9:97:1e:4c:65:ec:fc:d5:37:2b:6f:a1:fc:64:e3: ec:f7:8f:f1:a1:74:1b:ea:b3:d6:2c:8a:30:b4:10: 89:8f:d5:15:9d:64:7e:ea:4b:69:74:4f:91:6a:02: a2:c5:61:4b:73:87:1d:34:30:cc:83:dc:22:25:b0: 61:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:66:B4:7A:81:BB:6D:EF:E0:0C:9A:41:FC:09:A7:4A:98:DB:FD:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/478070f8-1e90-364c-9acd-801cb8560fba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl X509v3 Authority Key Identifier: keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer sbgp-ipAddrBlock: critical IPv4: 140.248.220.224/27 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:6b:e2:9d:57:59:2a:73:19:8a:61:33:82:73:af:94:ba:e8: 39:93:6c:55:04:27:3f:ab:49:7a:75:bf:9a:0c:58:80:0b:b9: 65:f8:70:d3:1d:93:69:aa:b9:67:8e:01:6f:28:f5:37:83:a0: ad:8a:3c:0f:d2:28:22:e9:1d:69:5c:2d:bf:4f:bc:73:7d:76: 44:4e:52:7d:61:de:e7:c3:ae:ae:a0:2f:f0:2e:32:d9:12:35: 81:75:da:d0:03:c3:40:d9:80:e0:87:c5:36:7d:15:ac:8a:c5: 35:ea:ae:80:e0:49:1d:8c:29:0d:8b:0d:59:44:f4:24:a3:cd: d9:07:05:4e:ff:8d:84:8c:69:c6:e0:70:a3:16:c9:bd:2f:dc: 78:46:8c:f8:fd:19:35:48:b0:0a:f9:68:8f:b7:42:ac:c9:c6: ac:e1:9c:9d:eb:d0:7e:cd:8e:2a:97:c8:be:9e:71:5d:74:b5: 5b:e5:e2:f0:3e:d4:d4:dd:c5:6d:b6:a5:29:4d:2c:9c:80:47: 1f:32:90:18:17:7e:45:01:76:8d:59:7d:20:4c:c9:64:45:56: 42:31:01:a2:94:3c:40:0d:c7:7c:f4:78:c1:34:72:7c:e6:c3: 5d:97:fb:82:87:77:b9:58:10:0e:7f:7b:08:45:43:bb:ed:09: 16:ac:65:f1 -----BEGIN CERTIFICATE----- MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEXVA5oeLUL2FkdJNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz YTYzMB4XDTI0MDUxMTAxMDAyN1oXDTI0MDgwOTAxMDAyN1owLzEtMCsGA1UEAxMk YzM2ZTA4ODAtNTI3My00OGEwLTgxYTQtNDY1OWIxNjFlYWFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNAD/6Sj3A/FA/GXO2dqEj1D+LyskyICPejq qnftGL5wSFNU/yd8XbpPBGLnmBKfzHDuZrhp4IJHm7D36CXDYFA8eva8S6XgzwdE jQTKqg3sbySRV459aIILNutxJmH62Xwbt/Jsl63ew3kLq+BGO/ioprqfeI9NJiAf yDCSA7k8uBNV6DizOUfWO6WUyNxdwvD4XsVMVUC6MZLqId4wXhKhrBtS4R9GvpWB 9fAkjf1V7X+5fbRF1jbAJPLYQXqf5PvZlx5MZez81Tcrb6H8ZOPs94/xoXQb6rPW LIowtBCJj9UVnWR+6ktpdE+RagKixWFLc4cdNDDMg9wiJbBh0QIDAQABo4IDVjCC A1IwHQYDVR0OBBYEFIVmtHqBu23v4AyaQfwJp0qY2/3iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1 ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvNDc4MDcwZjgtMWU5MC0z NjRjLTlhY2QtODAxY2I4NTYwZmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3 M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1 YzA5NzNhNjMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFjPjc4DBU BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB CwUAA4IBAQB0a+KdV1kqcxmKYTOCc6+Uuug5k2xVBCc/q0l6db+aDFiAC7ll+HDT HZNpqrlnjgFvKPU3g6CtijwP0igi6R1pXC2/T7xzfXZETlJ9Yd7nw66uoC/wLjLZ EjWBddrQA8NA2YDgh8U2fRWsisU16q6A4EkdjCkNiw1ZRPQko83ZBwVO/42EjGnG 4HCjFsm9L9x4Roz4/Rk1SLAK+WiPt0Ksycas4Zyd69B+zY4ql8i+nnFddLVb5eLw PtTU3cVttqUpTSycgEcfMpAYF35FAXaNWX0gTMlkRVZCMQGilDxADcd89HjBNHJ8 5sNdl/uCh3e5WBAOf3sIRUO77QkWrGXx -----END CERTIFICATE-----