$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa File: 56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa (raw, json) Hash identifier: Qr5nml3gZrSzSEKUmAgVb31dXdW54EZV6ahiR8INgnw= Subject key identifier: D0:F9:D2:F7:47:C0:9C:07:3E:59:D7:F4:19:C9:A0:5E:51:A0:40:A7 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584840E5508988E8DA3C38041A90 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa Signing time: Thu 19 Dec 2024 02:00:39 +0000 ROA not before: Thu 19 Dec 2024 02:00:39 +0000 ROA not after: Wed 19 Mar 2025 01:00:39 +0000 asID: 174 IP address blocks: 23.237.28.0/23 maxlen: 23 2001:49f0:d076::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:40:e5:50:89:88:e8:da:3c:38:04:1a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 19 02:00:39 2024 GMT Not After : Mar 19 01:00:39 2025 GMT Subject: CN=8e133be4-35c1-44e5-aa5a-c446561e1ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a5:43:f0:70:4a:ed:aa:a4:6a:0f:fb:67:af: 4f:9b:c5:4b:fc:6e:43:32:8a:94:db:fd:2a:39:b0: 5e:46:d6:ee:b3:fe:43:97:ac:f0:fb:68:4a:1f:cd: a0:91:c3:33:c4:de:65:df:0c:2c:27:9c:d4:f7:d5: 68:57:f7:4e:c2:81:6c:16:ff:6e:37:47:0a:1d:8d: 80:34:a9:d2:34:97:6b:f8:80:34:41:b6:df:ae:6f: 16:e4:ab:5c:c1:cb:95:31:93:e4:a4:11:0f:34:1a: 69:a0:5a:45:cf:dd:7c:c3:66:a9:ce:6f:9d:05:5b: 9c:86:a2:72:1b:3f:0e:e2:0f:f1:2e:5d:9b:23:d6: 07:09:78:3b:e4:b0:93:4a:fd:6a:e3:fc:54:14:28: 91:b2:7a:6c:68:2d:1d:64:8a:59:42:01:28:84:11: 87:87:8a:07:17:ab:f1:e5:fa:e3:ee:d5:9d:7e:55: 90:57:51:38:b7:89:d0:8c:9c:54:97:27:3f:29:f7: 63:42:77:06:26:21:24:c4:a4:ba:22:06:25:50:48: 16:c7:a1:05:24:bc:b3:71:8e:5b:70:91:e8:44:89: 5b:9d:78:75:d2:6c:ba:a5:da:48:a9:67:cd:00:ea: 66:b9:a5:91:cd:8b:e9:a4:8a:92:a5:dc:66:36:f3: 41:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F9:D2:F7:47:C0:9C:07:3E:59:D7:F4:19:C9:A0:5E:51:A0:40:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/56d2c7d3-d9a2-3650-bba7-7c9dfaa2d589.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.28.0/23 IPv6: 2001:49f0:d076::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:e4:e1:a7:9e:9e:c8:be:be:ab:59:a3:b6:b9:4d:0d:f0:1d: 8c:a5:b9:85:32:55:3e:dd:7e:ab:96:9a:1b:0f:31:03:61:a4: c5:65:23:32:1c:b1:2f:56:2e:8a:93:f4:6d:0a:79:72:61:83: 7b:46:53:99:61:96:c9:df:5b:42:2c:67:99:a3:86:ff:bb:99: 3b:dc:43:2f:5a:b0:b7:df:a7:57:08:e7:75:05:6a:ff:3e:79: fc:7b:57:ea:f6:c2:2a:85:5a:d1:c1:ee:2e:df:63:c0:fe:88: 08:63:b9:d1:07:fe:0d:a6:9c:cb:69:81:a9:48:cf:62:d0:3d: 3d:af:1f:8c:9e:9d:bb:03:c3:4f:04:fe:0b:11:2b:22:c3:c7: 8f:aa:6d:07:65:f2:e5:85:80:c4:77:1b:30:b9:2b:a6:9a:b5: c3:09:a4:f1:36:3a:f2:44:e0:c3:dc:37:61:5d:dd:b2:34:44: 33:c8:c6:5a:98:e1:db:a6:73:fd:34:07:a7:e8:37:4f:81:ab: 31:52:65:bb:3a:b5:60:0a:de:26:7a:24:ab:59:0c:71:77:b2: 11:2f:43:55:66:c9:9d:49:76:60:35:53:2d:67:aa:79:d7:e8: 59:7b:0e:dc:f0:69:ff:8b:07:f7:0b:a1:f4:55:60:55:9a:0e: 92:fa:d5:55 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEhA5VCJiOjaPDgEGpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIxOTAyMDAzOVoXDTI1MDMxOTAxMDAzOVowLzEtMCsGA1UEAxMk OGUxMzNiZTQtMzVjMS00NGU1LWFhNWEtYzQ0NjU2MWUxY2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKVD8HBK7aqkag/7Z69Pm8VL/G5DMoqU2/0q ObBeRtbus/5Dl6zw+2hKH82gkcMzxN5l3wwsJ5zU99VoV/dOwoFsFv9uN0cKHY2A NKnSNJdr+IA0Qbbfrm8W5KtcwcuVMZPkpBEPNBppoFpFz918w2apzm+dBVuchqJy Gz8O4g/xLl2bI9YHCXg75LCTSv1q4/xUFCiRsnpsaC0dZIpZQgEohBGHh4oHF6vx 5frj7tWdflWQV1E4t4nQjJxUlyc/KfdjQncGJiEkxKS6IgYlUEgWx6EFJLyzcY5b cJHoRIlbnXh10my6pdpIqWfNAOpmuaWRzYvppIqSpdxmNvNBrQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFND50vdHwJwHPlnX9BnJoF5RoECnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNTZkMmM3ZDMtZDlhMi0z NjUwLWJiYTctN2M5ZGZhYTJkNTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0cMA8E AgACMAkDBwAgAUnw0HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAd+Thp56eyL6+q1mjtrlNDfAdjKW5hTJV Pt1+q5aaGw8xA2GkxWUjMhyxL1YuipP0bQp5cmGDe0ZTmWGWyd9bQixnmaOG/7uZ O9xDL1qwt9+nVwjndQVq/z55/HtX6vbCKoVa0cHuLt9jwP6ICGO50Qf+Daacy2mB qUjPYtA9Pa8fjJ6duwPDTwT+CxErIsPHj6ptB2Xy5YWAxHcbMLkrppq1wwmk8TY6 8kTgw9w3YV3dsjREM8jGWpjh26Zz/TQHp+g3T4GrMVJluzq1YAreJnokq1kMcXey ES9DVWbJnUl2YDVTLWeqedfoWXsO3PBp/4sH9wuh9FVgVZoOkvrVVQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:02:26 2025 by rpki-client