$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa File: 36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa (raw, json) Hash identifier: uOXy8gQSTSdAk3lnr2ZW9bnuPgH2RaMWGbMvs/9fN0w= Subject key identifier: 01:FE:EA:F0:49:E3:8D:00:C8:8D:D2:A0:F9:3B:EC:3C:43:CF:AC:8D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858489BA0A9C50A3CBC78E7FCEC00 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 174 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a9:c5:0a:3c:bc:78:e7:fc:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=3880ff4e-a2fd-472b-9af3-f757886b839d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:70:2a:12:0a:35:95:aa:e3:18:94:9a:9d:30: 74:40:00:40:8a:de:94:ea:d5:59:23:19:dd:57:78: 67:60:0b:8d:f6:2a:fa:8b:84:b5:3b:dc:58:58:c1: 74:36:95:6e:0f:6c:14:98:d3:7d:5c:1d:52:30:9b: 71:ce:f8:70:6a:9a:1c:43:90:01:0a:f7:6c:ef:87: 82:f0:95:9c:e6:57:ff:9d:6e:47:77:e2:ed:3f:e0: 23:ea:97:85:2b:a1:3a:23:d3:bf:c1:69:54:28:87: 8d:6b:86:c5:f9:d6:f4:8b:e4:7a:30:73:c9:df:d6: df:c8:24:e6:af:84:81:85:bf:62:56:ee:b1:f1:9f: 7f:c6:7f:f3:bb:3d:57:0c:ad:bc:5a:d2:75:e1:10: 2a:98:c5:aa:d7:0c:95:fa:3f:0e:5b:25:b2:28:a1: 4c:1e:33:5a:83:9c:7b:88:ba:57:71:ba:89:26:69: 5b:ec:8a:24:ef:24:ae:96:5f:b6:86:20:bd:08:8b: 1c:bb:02:25:5e:0e:38:a7:fa:8a:f7:e0:96:3e:5e: 1f:d5:9f:b3:55:02:91:0f:77:24:1b:51:1b:18:a4: 5c:9b:bc:4a:8d:37:9f:c1:07:32:39:82:96:eb:ce: 8c:c2:ab:c5:13:91:64:f2:44:7b:61:be:ec:00:d6: 44:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:FE:EA:F0:49:E3:8D:00:C8:8D:D2:A0:F9:3B:EC:3C:43:CF:AC:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/36a8ce0d-1763-393f-8e9d-70c1bf177b94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:3a:20:40:0e:6a:c4:6e:f4:0d:bc:b1:03:d4:38:c4:a6:e7: 3d:2f:fe:6c:f6:0a:93:89:96:ba:8c:e7:9a:02:9c:f2:78:ab: 4c:25:c0:df:c8:80:4c:22:67:f3:7f:a9:5d:96:2e:f8:18:49: 8e:6c:27:4d:f9:0d:38:fe:f2:a8:88:80:3d:df:1b:a2:7b:b6: 71:13:92:85:b6:cf:9f:37:bb:30:e7:a5:38:5f:4c:02:77:53: 31:bc:68:c3:bc:aa:a0:c6:25:32:17:2c:a9:da:1e:86:f0:89: 7c:32:98:2d:14:ab:d0:82:8e:0e:98:9c:8e:7d:d4:0d:99:a6: 90:e2:9e:cf:01:be:8c:a5:29:33:fc:f0:68:13:fe:2a:17:b7: ca:c0:00:90:65:4c:e6:bc:85:71:8f:4e:8a:56:6f:ee:fb:c9: f9:07:38:e6:b1:97:97:70:0f:10:d3:17:ee:f4:08:4a:cb:c9: 6b:14:a8:b7:c8:0b:50:bf:00:70:24:49:c6:c9:d1:cd:29:02: 4b:9f:b7:b3:0e:17:fa:c1:b5:38:8b:71:54:22:dd:ff:c5:78: e1:33:4f:fd:ba:e0:c0:1d:91:d1:30:a6:ce:8d:45:c9:a6:a8: cf:35:9d:03:47:4c:88:72:99:17:d2:db:df:c9:38:04:ac:65: 7f:f3:bb:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKnFCjy8eOf87AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk Mzg4MGZmNGUtYTJmZC00NzJiLTlhZjMtZjc1Nzg4NmI4MzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXAqEgo1larjGJSanTB0QABAit6U6tVZIxnd V3hnYAuN9ir6i4S1O9xYWMF0NpVuD2wUmNN9XB1SMJtxzvhwapocQ5ABCvds74eC 8JWc5lf/nW5Hd+LtP+Aj6peFK6E6I9O/wWlUKIeNa4bF+db0i+R6MHPJ39bfyCTm r4SBhb9iVu6x8Z9/xn/zuz1XDK28WtJ14RAqmMWq1wyV+j8OWyWyKKFMHjNag5x7 iLpXcbqJJmlb7Iok7ySull+2hiC9CIscuwIlXg44p/qK9+CWPl4f1Z+zVQKRD3ck G1EbGKRcm7xKjTefwQcyOYKW686MwqvFE5Fk8kR7Yb7sANZEowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAH+6vBJ440AyI3SoPk77DxDz6yNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzZhOGNlMGQtMTc2My0z OTNmLThlOWQtNzBjMWJmMTc3Yjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMo6IEAOasRu9A28sQPUOMSm5z0v/mz2CpOJlrqM55oCnPJ4q0wlwN/I gEwiZ/N/qV2WLvgYSY5sJ035DTj+8qiIgD3fG6J7tnETkoW2z583uzDnpThfTAJ3 UzG8aMO8qqDGJTIXLKnaHobwiXwymC0Uq9CCjg6YnI591A2ZppDins8BvoylKTP8 8GgT/ioXt8rAAJBlTOa8hXGPTopWb+77yfkHOOaxl5dwDxDTF+70CErLyWsUqLfI C1C/AHAkScbJ0c0pAkuft7MOF/rBtTiLcVQi3f/FeOEzT/264MAdkdEwps6NRcmm qM81nQNHTIhymRfS29/JOASsZX/zuzk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:40:48 2025 by rpki-client