$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa File: 1a058e05-5d24-38e1-8868-0e2b4b598073.roa (raw, json) Hash identifier: bl0p4lzXDoftZa7Gy3gb6Y+oSg97a3Pc1DDpc5cpbk0= Subject key identifier: 18:31:93:15:C9:65:49:36:9C:B2:15:24:7D:C7:C0:AC:45:44:E9:05 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858491D7182B5CF407AF34465ED80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 1239 IP address blocks: 23.237.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:82:b5:cf:40:7a:f3:44:65:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=35b59ecf-bb4a-464c-97b6-7bdaaf2291bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:88:fc:34:27:a0:d4:97:3b:3e:77:62:cd:5d: 71:cf:f6:ec:66:f7:6e:fc:c0:0b:b1:b7:1d:ac:83: ed:7d:18:c6:db:b8:63:8c:e2:95:58:f2:62:7e:63: c7:2c:1b:74:cd:69:b8:2e:c8:71:30:57:9f:67:07: fb:5a:3a:61:cf:ac:c7:dd:4e:54:7c:d2:ee:b0:ea: ba:b0:b3:5c:7c:b4:d9:fd:01:8c:3b:c7:47:b9:f7: 10:76:5c:cb:00:08:e9:5f:4a:2a:86:87:1d:33:2d: 0f:c7:8e:8a:f5:79:5e:3c:22:6e:b4:fe:2d:02:f1: da:d1:38:00:00:40:bb:24:a6:44:8d:c0:6f:6e:a1: 1a:03:9f:65:b1:bf:7d:d8:d4:08:e3:41:db:27:78: 69:24:7b:e8:86:13:5d:6e:41:19:71:79:ee:23:c1: c7:ef:7d:24:c9:5c:eb:e1:06:07:a0:a4:4b:dd:24: 97:5b:66:b7:8b:4d:d8:2c:e4:99:32:1c:f3:b8:23: e0:ee:43:48:cb:b9:34:fd:e7:fe:ae:33:bb:10:db: 27:f9:99:2f:aa:b8:b3:86:b8:e0:07:36:a2:7f:ca: 09:e1:70:88:68:1d:67:ea:21:e4:a9:b6:06:9f:9c: 28:1d:58:1f:70:05:b1:a9:09:e4:a0:2a:6a:1a:e5: 8c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:93:15:C9:65:49:36:9C:B2:15:24:7D:C7:C0:AC:45:44:E9:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:6d:93:5d:99:11:47:2d:34:b7:37:56:c4:bd:0b:90:60:0a: 63:0f:4c:33:63:5d:a0:3f:70:33:54:9f:1a:53:90:7e:dc:a3: a2:49:a3:ec:97:18:6f:6a:74:8b:b7:14:64:eb:b2:12:fb:de: 6b:db:06:cf:b1:48:11:48:87:f6:72:09:39:10:6b:41:19:08: 24:d6:b0:c9:00:ca:74:d3:20:82:34:b1:49:34:3a:dc:14:e8: f8:1b:51:ae:65:1d:4b:cf:5e:87:0f:ab:a8:a0:17:86:54:bb: e0:e0:f1:58:28:09:66:98:bb:11:b6:47:08:93:51:de:8f:5d: 33:c7:c4:01:a5:24:de:4d:d1:44:1e:54:84:de:db:c8:7f:ec: b5:3e:8e:ed:4d:1c:05:9e:39:c4:38:b6:2c:8d:43:2a:18:14: 9f:5b:5a:21:3e:f7:f8:ef:d6:c2:1f:45:c9:47:e7:07:23:51: 41:9e:5a:eb:7e:81:6e:76:7e:8f:65:32:d2:f0:84:82:3f:8a: 68:91:b4:46:0f:e5:a3:8b:c3:7e:3f:6b:1e:92:22:91:6e:e7: f3:e3:ea:03:46:2a:95:aa:a2:c3:b8:e4:9f:05:7c:87:a2:92: cd:ae:94:ea:b7:7a:6d:b1:6f:ae:28:00:67:58:a4:22:71:e7: 45:74:54:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYK1z0B680Rl7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MzViNTllY2YtYmI0YS00NjRjLTk3YjYtN2JkYWFmMjI5MWJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIj8NCeg1Jc7PndizV1xz/bsZvdu/MALsbcd rIPtfRjG27hjjOKVWPJifmPHLBt0zWm4LshxMFefZwf7Wjphz6zH3U5UfNLusOq6 sLNcfLTZ/QGMO8dHufcQdlzLAAjpX0oqhocdMy0Px46K9XlePCJutP4tAvHa0TgA AEC7JKZEjcBvbqEaA59lsb992NQI40HbJ3hpJHvohhNdbkEZcXnuI8HH730kyVzr 4QYHoKRL3SSXW2a3i03YLOSZMhzzuCPg7kNIy7k0/ef+rjO7ENsn+Zkvqrizhrjg Bzaif8oJ4XCIaB1n6iHkqbYGn5woHVgfcAWxqQnkoCpqGuWMLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgxkxXJZUk2nLIVJH3HwKxFROkFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWEwNThlMDUtNWQyNC0z OGUxLTg4NjgtMGUyYjRiNTk4MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGNtk12ZEUctNLc3VsS9C5BgCmMPTDNjXaA/cDNUnxpTkH7co6JJo+yX GG9qdIu3FGTrshL73mvbBs+xSBFIh/ZyCTkQa0EZCCTWsMkAynTTIII0sUk0OtwU 6PgbUa5lHUvPXocPq6igF4ZUu+Dg8VgoCWaYuxG2RwiTUd6PXTPHxAGlJN5N0UQe VITe28h/7LU+ju1NHAWeOcQ4tiyNQyoYFJ9bWiE+9/jv1sIfRclH5wcjUUGeWut+ gW52fo9lMtLwhII/imiRtEYP5aOLw34/ax6SIpFu5/Pj6gNGKpWqosO45J8FfIei ks2ulOq3em2xb64oAGdYpCJx50V0VDo= -----END CERTIFICATE-----Generated at Sat Apr 5 06:34:02 2025 by rpki-client