$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0dc6d546-3c8e-3b05-8bcd-c124bf2fa7e4.roa File: 0dc6d546-3c8e-3b05-8bcd-c124bf2fa7e4.roa (raw, json) Hash identifier: d1W7DY5nnGdAJV+qPNzYafyLe1yfwAJa4MtDYJXx5s8= Subject key identifier: FA:36:91:53:B6:C9:2F:51:18:BC:F8:24:99:DA:BE:10:2D:EC:E0:9E Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858495529564B34AA446C8AF91680 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0dc6d546-3c8e-3b05-8bcd-c124bf2fa7e4.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 30058 IP address blocks: 23.237.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:56:4b:34:aa:44:6c:8a:f9:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=c8138658-dbf4-45d6-b65f-fab6fa26830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2e:9c:b5:99:f8:8a:78:3a:fe:60:d9:40:1e: 21:86:24:c0:53:7e:b4:38:89:ac:4e:e8:17:bc:d1: 97:f8:b5:d4:07:50:8c:f4:ff:18:a8:a7:98:83:d3: 8a:23:01:90:94:fd:bf:bc:84:71:41:0f:d3:88:4b: 81:90:52:ae:19:48:4f:ee:13:1b:f1:2e:d3:35:b7: f6:0d:68:06:b0:24:7a:3d:d4:5e:6f:43:bf:d8:d4: 34:7b:9d:81:45:83:b9:68:0c:d0:0b:8e:c3:b7:9c: aa:6c:d0:12:40:ae:96:ac:b0:3b:92:61:c3:73:36: e3:82:ae:a1:4a:4b:d1:ff:63:bf:e0:63:c3:a4:c7: 8a:2e:41:6b:81:b6:2b:19:ca:54:72:fc:2a:18:a1: eb:0f:b9:04:06:cc:3e:a0:d4:08:1b:59:11:f7:55: 09:ce:a2:db:b3:21:32:1b:a4:f5:6a:7f:58:e6:fc: c5:a6:e6:70:32:0d:57:ca:f8:1e:5b:a2:7d:93:e4: ef:09:28:12:31:b1:92:72:7b:37:17:ec:73:f6:40: 64:c9:8f:34:4b:30:cb:13:4b:28:0e:61:02:64:55: 78:b9:8a:99:74:4a:c5:11:ba:91:34:60:cc:ea:27: 9e:43:ee:cb:8a:79:6b:8e:f1:39:25:53:27:a0:54: 72:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:36:91:53:B6:C9:2F:51:18:BC:F8:24:99:DA:BE:10:2D:EC:E0:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/0dc6d546-3c8e-3b05-8bcd-c124bf2fa7e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:a8:30:26:22:85:66:f7:fb:d4:0d:3c:c7:31:1b:15:7c:23: 0e:fd:4b:5f:eb:fa:34:f9:1d:a2:81:89:5a:10:c5:a5:3e:9e: 83:98:d4:f0:78:40:bd:4a:83:bb:e3:8a:75:71:07:82:5a:e1: 33:2a:78:1a:d7:f8:9b:0c:17:e4:4f:ed:18:8e:42:aa:72:fb: 7c:76:fb:11:18:d5:f7:30:c3:1c:c2:ed:14:26:66:2a:d3:13: d2:0b:94:ff:28:de:ff:c2:5e:30:c2:1c:9c:eb:c7:32:f5:4b: 71:cf:88:6d:32:e0:cd:bf:cb:ec:0f:98:5c:be:67:c9:7f:3d: 15:4a:bb:93:d0:34:d7:1e:16:15:93:fe:14:e7:9e:5f:d6:cf: ad:c1:52:29:5f:95:0b:5b:b3:f3:a7:9b:0c:0a:72:df:b3:77: 02:70:0a:7f:b6:76:14:b3:0b:d7:0e:32:63:7b:ac:28:57:9c: 8d:30:6d:1b:56:a3:c6:6b:1b:3a:d6:f7:c2:31:b1:2c:31:0f: 39:f3:32:0f:22:28:95:6a:d9:87:ae:3c:7a:db:59:d5:f7:4d: d1:8c:ee:6f:51:0f:59:af:98:2f:42:20:07:54:ca:91:80:f5: 28:55:2b:f8:0e:3b:9f:3f:65:c6:98:79:6a:b3:75:08:96:8c: bd:6a:05:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVZLNKpEbIr5FoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk YzgxMzg2NTgtZGJmNC00NWQ2LWI2NWYtZmFiNmZhMjY4MzBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi6ctZn4ing6/mDZQB4hhiTAU360OImsTugX vNGX+LXUB1CM9P8YqKeYg9OKIwGQlP2/vIRxQQ/TiEuBkFKuGUhP7hMb8S7TNbf2 DWgGsCR6PdReb0O/2NQ0e52BRYO5aAzQC47Dt5yqbNASQK6WrLA7kmHDczbjgq6h SkvR/2O/4GPDpMeKLkFrgbYrGcpUcvwqGKHrD7kEBsw+oNQIG1kR91UJzqLbsyEy G6T1an9Y5vzFpuZwMg1XyvgeW6J9k+TvCSgSMbGScns3F+xz9kBkyY80SzDLE0so DmECZFV4uYqZdErFEbqRNGDM6ieeQ+7LinlrjvE5JVMnoFRyaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPo2kVO2yS9RGLz4JJnavhAt7OCeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMGRjNmQ1NDYtM2M4ZS0z YjA1LThiY2QtYzEyNGJmMmZhN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSoMCYihWb3+9QNPMcxGxV8Iw79S1/r+jT5HaKBiVoQxaU+noOY1PB4 QL1Kg7vjinVxB4Ja4TMqeBrX+JsMF+RP7RiOQqpy+3x2+xEY1fcwwxzC7RQmZirT E9ILlP8o3v/CXjDCHJzrxzL1S3HPiG0y4M2/y+wPmFy+Z8l/PRVKu5PQNNceFhWT /hTnnl/Wz63BUilflQtbs/OnmwwKct+zdwJwCn+2dhSzC9cOMmN7rChXnI0wbRtW o8ZrGzrW98IxsSwxDznzMg8iKJVq2YeuPHrbWdX3TdGM7m9RD1mvmC9CIAdUypGA 9ShVK/gOO58/ZcaYeWqzdQiWjL1qBZU= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:34 2025 by rpki-client