$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa File: 739ab26e-0527-3580-881d-8e557b779203.roa (raw, json) Hash identifier: aIwIvthJcwwu2/avpJ8sY2JCIj7Dd0Sncm1bnNeclhE= Subject key identifier: 7E:D6:25:44:BF:01:21:BB:D4:E0:B3:F3:73:59:41:A3:0A:CC:F6:CC Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858483E1AA46D819BA44041CD3D80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa Signing time: Wed 18 Dec 2024 02:00:39 +0000 ROA not before: Wed 18 Dec 2024 02:00:39 +0000 ROA not after: Tue 18 Mar 2025 01:00:39 +0000 asID: 174 IP address blocks: 23.237.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:3e:1a:a4:6d:81:9b:a4:40:41:cd:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 18 02:00:39 2024 GMT Not After : Mar 18 01:00:39 2025 GMT Subject: CN=28d7a43c-05f3-45c2-b76a-601b5b751024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:46:6f:08:57:e7:2d:f2:21:bb:92:30:13:a6: 6f:52:4d:13:b3:79:51:15:1a:af:04:0c:fe:21:67: 04:27:7a:fc:79:4f:11:27:49:b8:02:36:1c:f6:9f: 17:c7:67:ea:1a:1b:81:c4:b3:08:99:5d:38:99:6a: f3:db:54:c5:98:10:90:48:1f:43:7e:87:86:e7:75: 35:48:15:bb:30:40:03:17:fd:64:01:18:72:78:ce: ab:c2:79:83:6a:f3:29:34:bc:5e:79:f1:a3:37:61: 19:a0:01:5a:ae:8a:3a:4c:8e:73:49:d5:1b:22:03: 04:90:f2:95:7e:c4:98:b4:da:ad:23:0c:59:6d:b0: fc:45:2d:d5:2b:d7:45:4f:f5:9b:98:49:41:5b:83: 35:5e:7b:d3:9e:40:b6:78:1f:97:42:bc:0f:c5:d2: 5c:34:1d:5a:7b:f3:2c:c1:18:e3:68:9c:1f:6e:e5: e6:a4:ad:53:14:21:87:27:48:02:ab:2c:10:1b:12: f1:4e:fe:89:12:64:23:4d:56:62:90:5b:18:bb:98: 3f:85:a0:cf:3b:37:dd:28:e8:b7:e9:a1:e5:74:7b: f4:f2:97:0e:60:74:c2:8d:e6:e4:9d:e0:2a:72:14: b3:69:7f:2a:95:0d:1c:89:5b:1b:d8:02:a9:15:72: a7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:D6:25:44:BF:01:21:BB:D4:E0:B3:F3:73:59:41:A3:0A:CC:F6:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/739ab26e-0527-3580-881d-8e557b779203.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:aa:e6:6a:8d:84:69:d3:1d:a9:71:27:a3:3f:4a:19:21:02: d1:02:b1:76:e4:7f:ed:4e:57:d2:cd:af:39:6e:7c:b4:91:82: 36:a4:c6:d9:c9:2e:03:f1:b3:5d:14:db:5c:48:c4:99:1b:6e: c3:05:23:ec:8a:7a:72:3f:53:4f:26:6a:b6:d4:88:50:ab:d7: 9f:c8:17:f1:48:10:d4:d1:ab:19:27:cd:e1:c5:f4:37:cf:0e: 79:9a:a7:70:8c:ce:ff:68:f9:22:1b:a2:f5:ed:ea:92:ed:e5: 49:a4:93:7f:6d:05:c4:bc:13:7b:62:6e:8e:d1:e2:ad:2c:5d: 99:cd:0f:85:7b:10:54:2b:8d:68:34:70:d0:a7:b4:62:d7:15: 1a:9d:c6:1e:76:32:4d:c0:0e:ab:0a:b9:5c:71:0d:f9:38:05: a6:f9:5c:7f:13:88:53:c5:48:38:98:c2:c5:07:6c:ff:33:47: 65:9a:9e:7f:07:4d:c6:b4:4e:39:30:e5:4d:31:92:01:85:a1: 96:54:8e:f6:d4:dd:7b:df:33:65:5e:96:58:7a:33:f3:93:84: b3:23:06:fb:37:1d:9c:15:d5:e6:59:7d:08:ea:5a:3e:c9:63: 64:bc:af:07:08:11:ba:d7:1c:2d:f8:1c:67:41:70:60:9a:ff: 9a:50:c6:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+GqRtgZukQEHNPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk MjhkN2E0M2MtMDVmMy00NWMyLWI3NmEtNjAxYjViNzUxMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkZvCFfnLfIhu5IwE6ZvUk0Ts3lRFRqvBAz+ IWcEJ3r8eU8RJ0m4AjYc9p8Xx2fqGhuBxLMImV04mWrz21TFmBCQSB9DfoeG53U1 SBW7MEADF/1kARhyeM6rwnmDavMpNLxeefGjN2EZoAFaroo6TI5zSdUbIgMEkPKV fsSYtNqtIwxZbbD8RS3VK9dFT/WbmElBW4M1XnvTnkC2eB+XQrwPxdJcNB1ae/Ms wRjjaJwfbuXmpK1TFCGHJ0gCqywQGxLxTv6JEmQjTVZikFsYu5g/haDPOzfdKOi3 6aHldHv08pcOYHTCjebkneAqchSzaX8qlQ0ciVsb2AKpFXKnGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH7WJUS/ASG71OCz83NZQaMKzPbMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzM5YWIyNmUtMDUyNy0z NTgwLTg4MWQtOGU1NTdiNzc5MjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSq5mqNhGnTHalxJ6M/ShkhAtECsXbkf+1OV9LNrzlufLSRgjakxtnJ LgPxs10U21xIxJkbbsMFI+yKenI/U08marbUiFCr15/IF/FIENTRqxknzeHF9DfP Dnmap3CMzv9o+SIbovXt6pLt5Umkk39tBcS8E3tibo7R4q0sXZnND4V7EFQrjWg0 cNCntGLXFRqdxh52Mk3ADqsKuVxxDfk4Bab5XH8TiFPFSDiYwsUHbP8zR2Wann8H Tca0Tjkw5U0xkgGFoZZUjvbU3XvfM2Vellh6M/OThLMjBvs3HZwV1eZZfQjqWj7J Y2S8rwcIEbrXHC34HGdBcGCa/5pQxoQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:29 2025 by rpki-client