$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5bf61de8-5170-34dc-9de0-a33e7f05155c.roa File: 5bf61de8-5170-34dc-9de0-a33e7f05155c.roa (raw, json) Hash identifier: k6OXXxZDN4FIFCLWrArPKPLhNOI7MZVCW2MJkbIGJPw= Subject key identifier: 18:9E:7C:31:F4:2E:45:F1:00:C0:AD:6A:F2:E9:C6:21:3B:C3:B1:A8 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858492CB22CF4033344B5C3E8A9C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5bf61de8-5170-34dc-9de0-a33e7f05155c.roa Signing time: Thu 13 Mar 2025 13:00:52 +0000 ROA not before: Thu 13 Mar 2025 13:00:52 +0000 ROA not after: Wed 11 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 23.237.74.0/23 maxlen: 24 23.237.82.0/23 maxlen: 24 23.237.158.0/23 maxlen: 24 23.237.208.0/24 maxlen: 24 50.7.72.0/22 maxlen: 24 192.240.100.0/23 maxlen: 24 198.255.121.0/24 maxlen: 24 2001:49f0:d002::/48 maxlen: 48 2001:49f0:d048::/48 maxlen: 48 2001:49f0:d090::/48 maxlen: 48 2001:49f0:d0c9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2c:b2:2c:f4:03:33:44:b5:c3:e8:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 13 13:00:52 2025 GMT Not After : Jun 11 13:00:52 2025 GMT Subject: CN=a32201ec-94ab-4ace-9585-a6dab5c5852b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:25:4e:7d:75:bb:fb:d7:65:a0:ec:72:e6:19: 52:4d:47:76:35:ba:ea:ca:b0:71:0f:5a:96:0f:44: 77:f7:fc:b4:bc:61:4b:b0:94:1d:a5:14:72:89:9b: 9a:3d:3b:a6:b7:f6:91:0b:6a:2a:65:7f:c5:21:20: 00:24:97:c7:36:ab:04:63:fb:3a:ad:0d:00:80:6b: 47:56:06:6d:8a:85:62:49:1b:cd:72:b3:54:c8:21: dd:e9:9d:8f:c3:83:53:18:57:36:95:f1:dc:76:d1: 72:4f:22:c3:45:57:9a:9d:c6:d1:a9:00:57:06:fb: 8e:bb:ae:33:e0:81:77:1e:89:91:92:b0:2f:2e:6d: 0d:72:fb:99:c8:76:27:b9:ad:24:7d:c7:2b:4b:0a: c9:ad:c9:a3:f0:52:ca:5c:a2:84:4f:92:26:03:3b: 6f:4c:58:b9:4e:35:58:0d:38:8a:35:96:27:a0:6d: 2a:ee:a8:91:8a:e5:33:56:22:58:96:fd:cf:3d:cb: 63:b9:1c:a4:73:e5:91:41:43:ed:c0:cf:fc:fc:db: 93:9e:8c:67:32:10:aa:d5:15:83:a9:20:06:a5:4c: c7:9c:8d:32:ae:c6:14:59:a4:90:a5:1e:95:b3:a3: d6:14:f4:15:36:f3:9d:f8:91:86:f8:93:4f:c6:cb: 14:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:9E:7C:31:F4:2E:45:F1:00:C0:AD:6A:F2:E9:C6:21:3B:C3:B1:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/5bf61de8-5170-34dc-9de0-a33e7f05155c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.74.0/23 23.237.82.0/23 23.237.158.0/23 23.237.208.0/24 50.7.72.0/22 192.240.100.0/23 198.255.121.0/24 IPv6: 2001:49f0:d002::/48 2001:49f0:d048::/48 2001:49f0:d090::/48 2001:49f0:d0c9::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d3:c4:f2:7c:6a:4d:58:c1:85:36:a0:79:8d:91:93:90:48:48: 43:43:5e:70:cd:5c:09:77:b3:53:a3:b1:3e:f7:2c:21:27:e6: c3:c5:fc:82:84:d4:af:b3:03:b3:be:a3:4b:a2:80:a1:72:6f: 19:70:ca:ae:6b:6b:c4:3c:cc:88:11:e0:c5:4f:14:03:9d:cb: bd:dd:42:62:95:c0:26:29:a0:86:a4:b9:06:ee:94:be:18:4d: 57:0c:d7:47:e2:4f:c8:f5:03:28:3a:9b:a6:15:79:a7:64:f7: bc:bb:4e:a3:13:f6:f1:56:7e:41:3a:e8:f9:bc:3b:39:2e:20: 63:fc:87:c1:73:ad:c2:e5:35:72:cf:fe:aa:a0:ea:a4:62:95: b2:6c:a3:e7:bf:fd:86:a3:da:85:31:c0:14:62:48:f3:1b:23: c7:8d:3e:7c:83:83:11:f0:dd:85:7b:8a:23:96:66:ae:da:f8: d6:74:6d:24:12:36:5b:f9:eb:d1:ba:df:8e:3b:d7:ae:d6:95: 0f:ab:1e:0d:a7:26:01:d5:6c:dd:d4:4b:a3:80:43:a9:5f:a6: e3:74:d3:a6:bd:b5:7f:f1:ca:e4:dd:fb:0b:dc:32:d9:da:17: ff:25:cb:4e:99:5a:11:84:f9:03:d0:bf:07:4e:ef:13:b6:2b: 4e:c5:9a:1b -----BEGIN CERTIFICATE----- MIIGkzCCBXugAwIBAgIUAQ0Mn0MoWEkssiz0AzNEtcPoqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxMzEzMDA1MloXDTI1MDYxMTEzMDA1MlowLzEtMCsGA1UEAxMk YTMyMjAxZWMtOTRhYi00YWNlLTk1ODUtYTZkYWI1YzU4NTJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2yVOfXW7+9dloOxy5hlSTUd2NbrqyrBxD1qW D0R39/y0vGFLsJQdpRRyiZuaPTumt/aRC2oqZX/FISAAJJfHNqsEY/s6rQ0AgGtH VgZtioViSRvNcrNUyCHd6Z2Pw4NTGFc2lfHcdtFyTyLDRVeancbRqQBXBvuOu64z 4IF3HomRkrAvLm0NcvuZyHYnua0kfccrSwrJrcmj8FLKXKKET5ImAztvTFi5TjVY DTiKNZYnoG0q7qiRiuUzViJYlv3PPctjuRykc+WRQUPtwM/8/NuTnoxnMhCq1RWD qSAGpUzHnI0yrsYUWaSQpR6Vs6PWFPQVNvOd+JGG+JNPxssUdQIDAQABo4IDpTCC A6EwHQYDVR0OBBYEFBiefDH0LkXxAMCtavLpxiE7w7GoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNWJmNjFkZTgtNTE3MC0z NGRjLTlkZTAtYTMzZTdmMDUxNTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMG8GCCsGAQUFBwEHAQH/BGAwXjAwBAIAATAqAwQBF+1KAwQB F+1SAwQBF+2eAwQAF+3QAwQCMgdIAwQBwPBkAwQAxv95MCoEAgACMCQDBwAgAUnw 0AIDBwAgAUnw0EgDBwAgAUnw0JADBwAgAUnw0MkwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEA08TyfGpNWMGF NqB5jZGTkEhIQ0NecM1cCXezU6OxPvcsISfmw8X8goTUr7MDs76jS6KAoXJvGXDK rmtrxDzMiBHgxU8UA53Lvd1CYpXAJimghqS5Bu6UvhhNVwzXR+JPyPUDKDqbphV5 p2T3vLtOoxP28VZ+QTro+bw7OS4gY/yHwXOtwuU1cs/+qqDqpGKVsmyj57/9hqPa hTHAFGJI8xsjx40+fIODEfDdhXuKI5Zmrtr41nRtJBI2W/nr0brfjjvXrtaVD6se DacmAdVs3dRLo4BDqV+m43TTpr21f/HK5N37C9wy2doX/yXLTplaEYT5A9C/B07v E7YrTsWaGw== -----END CERTIFICATE-----Generated at Fri Mar 14 10:47:52 2025 by rpki-client