$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa File: 4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa (raw, json) Hash identifier: jLTD+m9ofZVZ9owQirbkeBvlWbJ1b6kR3uYc5TdKnwU= Subject key identifier: F3:3F:85:C2:8C:00:7E:4E:CA:D4:B0:9D:44:2B:68:80:17:10:C1:AE Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584875F05AFC096E98DA257D3000 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa Signing time: Tue 07 Jan 2025 02:00:39 +0000 ROA not before: Tue 07 Jan 2025 02:00:39 +0000 ROA not after: Mon 07 Apr 2025 01:00:39 +0000 asID: 174 IP address blocks: 23.237.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:75:f0:5a:fc:09:6e:98:da:25:7d:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 7 02:00:39 2025 GMT Not After : Apr 7 01:00:39 2025 GMT Subject: CN=f345d3a3-3be2-4a52-b908-7b32fef3deca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e0:93:f5:63:ab:86:c8:b0:a7:15:c5:76:f1: cd:66:52:c2:35:54:69:fa:0c:30:12:0f:55:fc:4c: a0:7c:89:31:ec:16:74:f4:ea:f6:f0:1a:7b:f6:e2: 95:16:8d:84:24:bb:5d:3c:26:f9:f6:f4:83:8a:11: 77:2a:b2:18:3b:69:cd:b7:78:36:bb:3b:c2:a0:ca: 1c:30:38:24:58:3e:bb:9e:60:de:e8:0f:50:36:a9: 1d:8e:dd:ba:93:8c:36:ca:09:70:51:06:3e:1b:db: c7:fe:c0:6a:56:99:df:cd:ce:50:cf:ae:aa:cf:fb: 77:8c:e9:6b:c0:a3:9d:b5:77:f3:b1:0d:1f:40:61: 98:4c:dd:44:2a:64:a9:45:35:76:ce:83:63:c1:b2: c2:20:21:6d:29:14:da:83:df:d0:66:fc:e3:61:dc: be:71:d5:97:40:b7:5c:a8:91:f8:59:cc:ee:d7:8a: c4:bc:68:9f:3a:d4:73:b6:7f:2f:5f:1e:d7:d4:61: 79:17:d3:da:25:4e:68:0d:b3:bd:03:58:70:86:15: 31:25:d7:32:3c:fd:98:38:bc:70:ac:ef:a5:cc:28: 03:04:98:eb:cf:45:74:f2:87:6b:2a:ae:c4:76:9c: ad:c1:9e:1e:89:7d:bc:5b:6c:80:42:56:5c:43:f5: 35:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3F:85:C2:8C:00:7E:4E:CA:D4:B0:9D:44:2B:68:80:17:10:C1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4eaa9020-d85c-3734-87b6-b1c934eb35e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ad:38:cf:93:3b:1f:9a:2e:ba:65:80:74:01:b8:7c:cf:29: e4:f4:fc:85:70:5b:4d:f6:f5:d7:65:dc:04:cb:13:e7:f9:a3: 5b:f3:51:9d:c7:3e:fd:3e:da:e5:8f:bb:89:dd:69:b7:ad:40: 66:32:cf:0e:f0:8a:90:43:79:08:fc:38:bf:f5:8c:03:98:35: 5b:4a:0c:7d:91:6b:e4:5a:9b:c7:11:5f:7c:98:f8:e0:ee:20: 1d:dc:52:58:df:7e:8f:58:04:d9:ff:67:aa:f0:ce:19:ff:13: dc:dc:e8:ce:18:56:7b:df:d9:04:be:3b:a7:02:aa:95:4b:59: a6:9a:00:47:ed:c7:e5:6d:42:94:5b:73:56:dd:75:b8:3d:3c: 55:97:1b:3a:1c:e1:1a:cd:09:93:1d:d4:19:11:df:66:4f:4a: 64:78:69:7e:5a:77:9e:6a:d9:75:42:ff:7a:36:7e:b5:07:05: 09:77:88:ec:c3:45:0d:8f:b1:83:ad:e9:62:f3:e6:9e:9e:84: cd:ab:cf:b5:8e:f1:66:e4:2f:ce:ee:06:19:35:ef:65:3e:74: c0:1c:92:fe:5f:c1:2f:c3:16:c4:5b:58:55:61:a2:28:b7:f9: 45:a8:38:2c:c9:88:ce:a7:2c:7d:59:4a:3a:6e:29:ed:5c:87: fe:9f:f9:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh18Fr8CW6Y2iV9MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEwNzAyMDAzOVoXDTI1MDQwNzAxMDAzOVowLzEtMCsGA1UEAxMk ZjM0NWQzYTMtM2JlMi00YTUyLWI5MDgtN2IzMmZlZjNkZWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuCT9WOrhsiwpxXFdvHNZlLCNVRp+gwwEg9V /EygfIkx7BZ09Or28Bp79uKVFo2EJLtdPCb59vSDihF3KrIYO2nNt3g2uzvCoMoc MDgkWD67nmDe6A9QNqkdjt26k4w2yglwUQY+G9vH/sBqVpnfzc5Qz66qz/t3jOlr wKOdtXfzsQ0fQGGYTN1EKmSpRTV2zoNjwbLCICFtKRTag9/QZvzjYdy+cdWXQLdc qJH4Wczu14rEvGifOtRztn8vXx7X1GF5F9PaJU5oDbO9A1hwhhUxJdcyPP2YOLxw rO+lzCgDBJjrz0V08odrKq7EdpytwZ4eiX28W2yAQlZcQ/U1wQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM/hcKMAH5OytSwnUQraIAXEMGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNGVhYTkwMjAtZDg1Yy0z NzM0LTg3YjYtYjFjOTM0ZWIzNWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGtOM+TOx+aLrplgHQBuHzPKeT0/IVwW0329ddl3ATLE+f5o1vzUZ3H Pv0+2uWPu4ndabetQGYyzw7wipBDeQj8OL/1jAOYNVtKDH2Ra+Ram8cRX3yY+ODu IB3cUljffo9YBNn/Z6rwzhn/E9zc6M4YVnvf2QS+O6cCqpVLWaaaAEftx+VtQpRb c1bddbg9PFWXGzoc4RrNCZMd1BkR32ZPSmR4aX5ad55q2XVC/3o2frUHBQl3iOzD RQ2PsYOt6WLz5p6ehM2rz7WO8WbkL87uBhk172U+dMAckv5fwS/DFsRbWFVhoii3 +UWoOCzJiM6nLH1ZSjpuKe1ch/6f+Z4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:10 2025 by rpki-client