$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa File: 34f0b53b-80a9-3773-99d3-108f002e41f0.roa (raw, json) Hash identifier: 2GQwlI3Soc0nr0onMBHLIi5RmxT+5XPOhb6movtPsk4= Subject key identifier: BD:11:69:7A:90:38:1C:FC:30:04:5E:A3:75:1B:FC:E2:FB:96:D2:4E Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858489FD0986A9B7186CD44D43C00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 1239 IP address blocks: 198.16.100.0/23 maxlen: 23 198.16.106.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:98:6a:9b:71:86:cd:44:d4:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=e1fcbd79-3960-4a49-80df-1f11305be013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:15:3b:75:3c:28:c3:00:fb:fd:93:33:a2: 46:71:b4:75:c3:db:fa:e2:00:c4:f1:91:7f:38:3b: 71:44:65:9f:5e:9e:3d:be:a1:a5:05:1d:8e:74:64: b3:a8:da:5e:f8:78:d4:27:57:ab:0e:e1:d3:90:a8: 6b:3f:b0:3b:50:31:67:a5:42:ce:b4:34:5f:98:a7: f8:6c:00:89:b3:5e:7a:13:a9:9e:fe:73:f6:57:c4: 02:64:7e:9d:4f:93:18:1d:c0:9a:bc:66:03:8c:5e: 0b:21:98:8d:df:b1:da:0d:0a:66:84:67:aa:42:57: ac:6d:25:80:16:9f:9a:6e:9f:20:1a:91:58:49:40: ef:ec:78:64:ac:34:a6:55:15:d3:52:39:64:55:17: 42:85:0e:20:ba:61:ca:6f:44:48:a0:82:a1:c4:01: 3b:a9:5c:c3:f1:ca:70:d6:1c:61:ba:72:f1:a6:8f: e4:6e:ef:98:c2:2c:fc:2c:6e:9d:99:43:b9:f6:40: 21:80:d7:71:9e:8a:d4:d6:97:75:46:51:32:86:6e: 1c:c1:b7:26:4b:98:de:3a:cf:3f:3f:3c:41:a7:6c: 59:85:dc:8c:da:91:de:c7:9b:dc:dc:cf:1f:a0:65: 5f:01:8b:d2:b0:f5:99:2f:a3:3d:6f:ef:34:9d:44: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:11:69:7A:90:38:1C:FC:30:04:5E:A3:75:1B:FC:E2:FB:96:D2:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/34f0b53b-80a9-3773-99d3-108f002e41f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 198.16.100.0/23 198.16.106.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:cc:97:cb:7a:ff:50:f5:a2:a5:37:3a:5e:76:35:42:29:8a: fe:3a:ab:20:d8:c8:29:b1:50:79:da:c2:9b:c0:e9:a4:de:8c: f7:94:71:df:41:9b:6d:5c:98:e6:da:df:b7:b4:83:ed:fe:6f: 7b:84:25:6c:58:66:17:5a:9c:e7:86:99:53:11:ee:8c:69:62: 0d:f1:6f:68:9b:02:c1:eb:34:70:f5:1d:12:dc:fc:d1:6a:d1: 31:51:af:25:fd:f3:cd:5c:39:fb:13:fc:27:6c:e5:a0:1e:85: b5:f8:d7:91:8b:12:7b:a5:8f:01:73:2b:d0:70:e2:d3:f4:3f: 53:dc:e5:a2:2a:74:de:c6:a5:78:24:e8:f9:99:c3:88:2e:3d: 72:cf:f1:1a:ba:22:59:3a:f6:ea:82:2a:73:f0:4f:90:3b:83: 5b:14:fc:20:fb:cd:d7:8e:cf:83:0e:88:a8:23:ed:8e:c1:87: c1:1d:63:73:97:c1:37:3c:d1:23:03:0e:23:93:28:5b:0d:e4: fc:5c:c6:73:28:27:2c:38:8e:8c:2d:ee:a8:e5:f0:40:55:17: 0b:f6:6a:81:22:8c:48:30:0a:3e:91:41:ca:7e:0a:e4:23:d5: de:3c:b7:21:52:db:02:da:6a:a7:89:dd:3d:a5:d4:46:8c:ba: 7e:d3:a6:1a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEif0Jhqm3GGzUTUPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk ZTFmY2JkNzktMzk2MC00YTQ5LTgwZGYtMWYxMTMwNWJlMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA8VO3U8KMMA+/2TM6JGcbR1w9v64gDE8ZF/ ODtxRGWfXp49vqGlBR2OdGSzqNpe+HjUJ1erDuHTkKhrP7A7UDFnpULOtDRfmKf4 bACJs156E6me/nP2V8QCZH6dT5MYHcCavGYDjF4LIZiN37HaDQpmhGeqQlesbSWA Fp+abp8gGpFYSUDv7HhkrDSmVRXTUjlkVRdChQ4gumHKb0RIoIKhxAE7qVzD8cpw 1hxhunLxpo/kbu+Ywiz8LG6dmUO59kAhgNdxnorU1pd1RlEyhm4cwbcmS5jeOs8/ PzxBp2xZhdyM2pHex5vc3M8foGVfAYvSsPWZL6M9b+80nURpIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFL0RaXqQOBz8MAReo3Ub/OL7ltJOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzRmMGI1M2ItODBhOS0z NzczLTk5ZDMtMTA4ZjAwMmU0MWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBxhBkAwQB xhBqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAA3Ml8t6/1D1oqU3Ol52NUIpiv46qyDYyCmxUHnawpvA6aTe jPeUcd9Bm21cmOba37e0g+3+b3uEJWxYZhdanOeGmVMR7oxpYg3xb2ibAsHrNHD1 HRLc/NFq0TFRryX9881cOfsT/Cds5aAehbX415GLEnuljwFzK9Bw4tP0P1Pc5aIq dN7GpXgk6PmZw4guPXLP8Rq6Ilk69uqCKnPwT5A7g1sU/CD7zdeOz4MOiKgj7Y7B h8EdY3OXwTc80SMDDiOTKFsN5PxcxnMoJyw4jowt7qjl8EBVFwv2aoEijEgwCj6R Qcp+CuQj1d48tyFS2wLaaqeJ3T2l1EaMun7Tpho= -----END CERTIFICATE-----Generated at Sat Apr 5 08:42:32 2025 by rpki-client