$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34c364f0-8747-3749-8143-576393db47b5.roa File: 34c364f0-8747-3749-8143-576393db47b5.roa (raw, json) Hash identifier: DBGtH4j4pjhL+a8Kj8qjlhBsgLe9aiKrnHkh0CD5gLw= Subject key identifier: B1:D8:8B:9B:0D:DB:58:3D:DB:75:C3:37:22:AA:88:5F:E4:B9:AC:5D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584953C41C62C53C5B8B7947A880 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34c364f0-8747-3749-8143-576393db47b5.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 7922 IP address blocks: 23.237.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:1c:62:c5:3c:5b:8b:79:47:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=3a8a54a1-57f2-4249-9868-715da7987c59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:61:93:ee:2c:74:73:2f:31:4d:0d:20:c8: 2e:26:bc:62:5a:d9:f9:d4:fe:8d:30:d8:dc:89:dd: 57:24:4e:0f:18:7b:cb:5c:b3:c2:51:d2:8e:06:b6: dd:39:12:0b:ba:cd:ff:30:1b:96:5c:71:12:ec:74: e0:2a:b8:ce:0d:ad:89:b1:cc:5e:f6:08:6a:30:6d: 31:29:46:ec:a7:2a:3b:de:ff:fe:b3:47:f2:ad:06: a6:76:c0:30:56:2c:48:01:07:38:5e:2e:9f:af:3f: a3:0b:dc:6a:0f:3d:86:f8:62:2f:86:65:10:e4:2d: b4:d9:7b:c8:97:cc:8e:7e:8d:70:b2:23:8a:b6:76: 23:7d:78:0b:22:11:d7:c6:97:3f:a0:10:ca:b4:38: 57:46:49:a8:e2:2f:cc:31:1d:a0:c7:1a:4b:a1:df: f4:6a:c5:a1:d2:63:ca:2c:63:1b:97:49:9a:06:ec: fe:74:6a:f8:8b:99:e5:f4:04:41:43:55:41:71:1f: 97:9a:71:e0:a1:fb:c3:60:d4:7e:3f:87:2b:d2:9d: ea:26:f0:2a:9d:65:91:eb:63:db:4f:74:51:cf:7f: 55:7a:d0:8f:92:95:59:56:a1:7e:93:99:93:df:3e: 70:1f:7d:eb:dc:80:f9:2b:66:88:be:49:1a:72:79: e6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:D8:8B:9B:0D:DB:58:3D:DB:75:C3:37:22:AA:88:5F:E4:B9:AC:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34c364f0-8747-3749-8143-576393db47b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:46:72:29:d1:98:4c:69:42:c8:51:45:f3:8d:0a:a9:94:0c: 4a:de:5a:49:1e:34:eb:ed:7a:93:43:62:1b:ce:d1:3e:17:a8: c9:c1:ac:3c:50:cd:53:b2:ea:b9:e4:0f:a6:64:a3:41:60:60: 6b:ba:4f:ca:f2:38:8a:92:a5:b6:f7:25:c2:cb:ff:65:28:19: 59:40:c8:7b:f2:f2:c8:ce:53:de:ac:db:98:34:de:e8:51:c3: 37:be:3a:90:98:a3:44:34:9c:99:11:36:d8:3e:62:87:cd:a6: 1c:5f:fc:8e:93:dc:57:8f:4d:14:17:ed:da:04:6e:b3:73:ed: 6f:94:5c:c4:50:37:93:26:d9:01:24:41:7e:f1:dc:35:6f:21: d3:74:0d:2d:0c:c5:89:77:ad:c5:ea:1f:a1:92:44:3a:ef:f7: fe:96:ee:19:cf:ac:79:6e:b8:9e:9e:6f:68:ae:df:d6:78:c9: 26:1d:1f:42:2a:96:f9:a1:9c:e1:70:59:ff:9e:ab:5a:44:a1: b7:9f:95:cb:21:ca:4c:65:f0:47:7c:8e:fe:c5:7e:8a:3f:ae: fa:84:55:48:61:96:6b:33:06:19:5a:a5:e7:97:b5:b0:45:84: 2b:64:4c:1e:cb:5f:6e:09:3f:48:e2:15:1d:2a:21:cf:5a:fc: c0:02:a4:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBxixTxbi3lHqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk M2E4YTU0YTEtNTdmMi00MjQ5LTk4NjgtNzE1ZGE3OTg3YzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiJhk+4sdHMvMU0NIMguJrxiWtn51P6NMNjc id1XJE4PGHvLXLPCUdKOBrbdORILus3/MBuWXHES7HTgKrjODa2Jscxe9ghqMG0x KUbspyo73v/+s0fyrQamdsAwVixIAQc4Xi6frz+jC9xqDz2G+GIvhmUQ5C202XvI l8yOfo1wsiOKtnYjfXgLIhHXxpc/oBDKtDhXRkmo4i/MMR2gxxpLod/0asWh0mPK LGMbl0maBuz+dGr4i5nl9ARBQ1VBcR+XmnHgofvDYNR+P4cr0p3qJvAqnWWR62Pb T3RRz39VetCPkpVZVqF+k5mT3z5wH33r3ID5K2aIvkkacnnmNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHYi5sN21g923XDNyKqiF/kuaxdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzRjMzY0ZjAtODc0Ny0z NzQ5LTgxNDMtNTc2MzkzZGI0N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNGcinRmExpQshRRfONCqmUDEreWkkeNOvtepNDYhvO0T4XqMnBrDxQ zVOy6rnkD6Zko0FgYGu6T8ryOIqSpbb3JcLL/2UoGVlAyHvy8sjOU96s25g03uhR wze+OpCYo0Q0nJkRNtg+YofNphxf/I6T3FePTRQX7doEbrNz7W+UXMRQN5Mm2QEk QX7x3DVvIdN0DS0MxYl3rcXqH6GSRDrv9/6W7hnPrHluuJ6eb2iu39Z4ySYdH0Iq lvmhnOFwWf+eq1pEobeflcshykxl8Ed8jv7Ffoo/rvqEVUhhlmszBhlapeeXtbBF hCtkTB7LX24JP0jiFR0qIc9a/MACpA0= -----END CERTIFICATE-----Generated at Sat Apr 5 13:24:56 2025 by rpki-client