$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa File: 36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa (raw, json) Hash identifier: Dp42NufPA8wd9gd3ykEkWS1pWqUtMoqq2SvD0NsxO/s= Subject key identifier: CB:20:F0:2A:7C:53:83:D3:53:1C:6E:D0:DD:FF:2C:6F:77:B1:29:F3 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858497AD9C086E5CF84CAE7EEC4C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa Signing time: Thu 10 Apr 2025 13:00:59 +0000 ROA not before: Thu 10 Apr 2025 13:00:59 +0000 ROA not after: Wed 09 Jul 2025 13:00:59 +0000 asID: 174 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:7a:d9:c0:86:e5:cf:84:ca:e7:ee:c4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 10 13:00:59 2025 GMT Not After : Jul 9 13:00:59 2025 GMT Subject: CN=14d6ddf2-b9c8-4308-96bf-f5f0ea4b0986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:bb:d1:23:42:c3:2f:c0:0a:8a:d3:e9:9e: 81:d1:0e:af:0e:bd:77:25:22:7f:9e:f3:93:99:79: f3:2c:a5:62:e9:65:14:75:36:f1:5a:35:08:04:c6: ab:e4:d6:79:9a:77:a8:d4:9e:48:f8:f0:d6:5c:74: 25:73:b2:7a:e8:7f:38:70:28:28:c2:ab:5c:3a:a6: e4:d9:ce:74:89:93:3b:60:21:aa:c0:58:3b:3d:7a: 05:39:37:fa:aa:c6:ee:7f:47:d9:fb:58:fb:4d:6a: 66:68:86:30:97:b6:58:fb:f0:cd:c5:e6:52:29:70: 27:d6:8e:d2:ec:33:70:c2:42:7f:ad:81:0f:72:04: 0d:26:b9:f2:f2:c2:10:54:44:25:24:8e:e6:3d:c5: 56:f9:6e:79:7e:28:aa:a6:a4:8d:58:b3:c2:c8:1d: 60:b9:b5:fd:70:87:16:98:eb:25:a2:8c:fc:44:21: 00:25:d1:78:d4:b1:76:12:6a:e0:76:8e:2f:7d:95: 9f:af:51:dd:80:a8:d6:87:1a:7b:11:44:87:99:0e: ae:16:15:6f:23:fd:15:1f:86:54:3c:d3:db:b7:95: ec:ee:cb:cb:d8:01:45:a6:1d:05:18:ca:11:0d:50: d8:30:72:dc:b8:12:27:90:85:cb:c5:9e:11:6f:50: e1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:20:F0:2A:7C:53:83:D3:53:1C:6E:D0:DD:FF:2C:6F:77:B1:29:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:d8:ad:ab:67:2b:05:ed:3d:60:dc:94:a3:4b:72:24:7c:6f: 91:0b:0f:db:e5:b2:34:ac:43:1a:a7:d0:4b:59:7f:3f:50:d5: ff:96:f3:a6:08:bd:16:b2:9d:fc:70:87:ef:19:a0:e2:af:15: 29:80:b8:c7:63:62:4b:ae:2a:bc:54:41:85:93:ea:0d:e4:06: d0:89:44:bd:e5:68:dd:bc:b9:1b:35:a0:e7:03:e6:57:06:dd: 8c:5c:63:22:03:e5:b3:f9:87:ca:2f:77:0c:43:b7:c9:59:7f: dc:17:68:44:46:51:b6:3d:dc:12:4a:1f:c6:d2:31:65:08:ea: 4a:f3:dd:c3:a0:7a:58:b7:c6:c8:27:e9:d3:ef:ef:c8:47:b6: ad:9f:3c:0e:7f:69:44:62:17:dc:ea:39:7a:2b:32:30:5c:be: e0:cd:69:af:93:6e:df:80:88:a2:ae:27:c1:06:0d:a1:3c:5f: 5f:68:eb:24:d0:f7:55:c7:71:dc:08:e3:65:73:5a:27:e3:61: 4d:56:f5:64:0b:16:27:c9:33:8f:70:29:b4:24:a2:10:94:17: a9:15:9c:eb:7b:84:78:05:0b:e8:5f:34:46:b9:d1:85:17:a2: 0b:dc:ab:cb:d6:12:aa:6e:8e:ff:8a:e3:77:9b:a9:4e:38:d9: 75:fe:11:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl62cCG5c+EyufuxMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxMDEzMDA1OVoXDTI1MDcwOTEzMDA1OVowLzEtMCsGA1UEAxMk MTRkNmRkZjItYjljOC00MzA4LTk2YmYtZjVmMGVhNGIwOTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QO70SNCwy/ACorT6Z6B0Q6vDr13JSJ/nvOT mXnzLKVi6WUUdTbxWjUIBMar5NZ5mneo1J5I+PDWXHQlc7J66H84cCgowqtcOqbk 2c50iZM7YCGqwFg7PXoFOTf6qsbuf0fZ+1j7TWpmaIYwl7ZY+/DNxeZSKXAn1o7S 7DNwwkJ/rYEPcgQNJrny8sIQVEQlJI7mPcVW+W55fiiqpqSNWLPCyB1gubX9cIcW mOslooz8RCEAJdF41LF2Emrgdo4vfZWfr1HdgKjWhxp7EUSHmQ6uFhVvI/0VH4ZU PNPbt5Xs7svL2AFFph0FGMoRDVDYMHLcuBInkIXLxZ4Rb1DhiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsg8Cp8U4PTUxxu0N3/LG93sSnzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzZhOGNlMGQtMTc2My0z OTNmLThlOWQtNzBjMWJmMTc3Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHYratnKwXtPWDclKNLciR8b5ELD9vlsjSsQxqn0EtZfz9Q1f+W86YI vRaynfxwh+8ZoOKvFSmAuMdjYkuuKrxUQYWT6g3kBtCJRL3laN28uRs1oOcD5lcG 3YxcYyID5bP5h8ovdwxDt8lZf9wXaERGUbY93BJKH8bSMWUI6krz3cOgeli3xsgn 6dPv78hHtq2fPA5/aURiF9zqOXorMjBcvuDNaa+Tbt+AiKKuJ8EGDaE8X19o6yTQ 91XHcdwI42VzWifjYU1W9WQLFifJM49wKbQkohCUF6kVnOt7hHgFC+hfNEa50YUX ogvcq8vWEqpujv+K43ebqU442XX+Eeg= -----END CERTIFICATE-----Generated at Tue Apr 15 06:49:29 2025 by rpki-client