$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa File: 8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa (raw, json) Hash identifier: 4CJB9MtK8Ajc4U6UmiA9urR1T8HtDBDQXKc1/jNTEhQ= Subject key identifier: 46:12:1E:F1:8C:2A:15:2C:81:16:2E:A7:11:42:74:AF:C4:FE:B6:A9 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849287E6F18A6B4A07E00B044E0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa Signing time: Wed 12 Mar 2025 01:00:39 +0000 ROA not before: Wed 12 Mar 2025 01:00:39 +0000 ROA not after: Tue 10 Jun 2025 01:00:39 +0000 asID: 174 IP address blocks: 23.237.48.0/24 maxlen: 24 23.237.68.0/23 maxlen: 24 23.237.70.0/23 maxlen: 24 23.237.102.0/23 maxlen: 24 23.237.104.0/23 maxlen: 24 23.237.140.0/23 maxlen: 24 198.255.86.0/23 maxlen: 24 198.255.88.0/23 maxlen: 24 198.255.122.0/24 maxlen: 24 2001:49f0:d04d::/48 maxlen: 48 2001:49f0:d04e::/48 maxlen: 48 2001:49f0:d055::/48 maxlen: 48 2001:49f0:d0a9::/48 maxlen: 48 2001:49f0:d0aa::/48 maxlen: 48 2001:49f0:d0bf::/48 maxlen: 48 2001:49f0:d138::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:28:7e:6f:18:a6:b4:a0:7e:00:b0:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 12 01:00:39 2025 GMT Not After : Jun 10 01:00:39 2025 GMT Subject: CN=24e0def6-2c7e-4192-aef2-212a1776d0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:58:44:0a:c9:ee:24:2b:78:44:3d:91:c2: 69:fb:d7:eb:66:f5:f3:36:7e:70:b3:24:5d:03:8b: c6:e6:c2:f0:3c:6e:a2:d8:2d:9f:15:34:69:a4:bb: e1:76:32:6c:6a:48:45:f1:66:cf:14:ec:e1:2c:58: f8:4b:38:c0:6f:bc:10:9f:7b:64:0b:bb:d0:a7:f3: 9e:0e:de:7e:e6:ae:05:ad:37:54:90:82:b1:c9:07: 44:8b:ad:65:54:a3:00:0b:19:a3:8a:55:c6:76:b3: f0:5b:17:cb:4f:62:0e:c8:43:a4:3a:77:e7:70:03: 53:1e:1e:28:6d:3b:88:87:c0:28:66:3b:bb:b5:ee: 3e:ff:a0:ad:3f:cf:47:70:19:63:55:3c:b4:c9:b8: c8:21:66:e4:41:b7:41:13:dd:12:23:57:fa:55:10: 57:b5:76:94:8e:8d:53:da:1b:1c:07:63:c7:9c:df: e4:6b:31:92:f8:63:15:c5:82:fa:5e:44:be:30:70: 87:c0:fe:99:fe:98:57:f9:a9:93:a3:b1:02:c2:c8: 59:ed:44:0b:47:f8:86:69:1d:21:0f:d9:aa:17:4e: b5:bf:5b:01:81:f4:42:12:c1:a0:da:77:eb:c5:e9: d9:2f:50:a4:7d:0e:40:38:14:5b:1a:d5:20:f8:6a: 3d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:12:1E:F1:8C:2A:15:2C:81:16:2E:A7:11:42:74:AF:C4:FE:B6:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/8ae0b6a9-3aee-303d-8cbc-58416a2570f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.48.0/24 23.237.68.0/22 23.237.102.0-23.237.105.255 23.237.140.0/23 198.255.86.0-198.255.89.255 198.255.122.0/24 IPv6: 2001:49f0:d04d::-2001:49f0:d04e:ffff:ffff:ffff:ffff:ffff 2001:49f0:d055::/48 2001:49f0:d0a9::-2001:49f0:d0aa:ffff:ffff:ffff:ffff:ffff 2001:49f0:d0bf::/48 2001:49f0:d138::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:ca:5e:b8:81:47:d6:0d:a9:cc:1f:21:8b:0f:8d:7d:0e:23: 06:30:fe:35:41:a0:c6:8b:05:99:a6:09:29:dd:90:90:4e:7d: 4f:d0:30:26:10:b2:f4:6c:b3:51:8e:fe:d3:3c:2b:d5:22:25: 60:a9:fc:54:04:86:cb:41:9c:4e:3b:7d:d8:57:cf:36:b3:61: 49:3e:3f:36:d1:98:0c:d2:0a:2d:89:23:18:bd:86:d4:c6:ff: 3c:44:20:87:65:da:b1:2d:5d:e9:4a:0a:e7:0b:1a:9b:39:69: b7:ab:13:3c:d2:22:ce:29:df:51:6c:33:c5:cd:6d:aa:88:98: fd:88:5c:9b:b2:3b:6f:d6:49:ad:b4:f0:b1:a1:45:f9:a9:f1: ea:f8:33:22:69:de:6f:33:73:74:a6:5c:d8:ee:19:e2:83:8e: f0:bb:8d:ef:1d:cd:ec:c0:6d:27:82:91:aa:e6:ce:94:6a:e8: 7d:81:6a:50:3c:64:a8:7f:d7:7a:24:12:e8:17:a5:11:be:de: e0:0b:9d:d5:26:2f:aa:70:8d:bb:f6:02:3d:1f:a4:88:dc:4a: 3c:bc:d1:9e:9f:e0:19:2d:96:64:ad:ff:c3:6c:e4:d4:ca:ff: 81:2e:1e:1c:ad:76:ae:55:29:97:61:d0:b3:14:ce:8c:1f:41: c5:a7:1d:21 -----BEGIN CERTIFICATE----- MIIGvzCCBaegAwIBAgIUAQ0Mn0MoWEkofm8YprSgfgCwROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk MjRlMGRlZjYtMmM3ZS00MTkyLWFlZjItMjEyYTE3NzZkMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOVYRArJ7iQreEQ9kcJp+9frZvXzNn5wsyRd A4vG5sLwPG6i2C2fFTRppLvhdjJsakhF8WbPFOzhLFj4SzjAb7wQn3tkC7vQp/Oe Dt5+5q4FrTdUkIKxyQdEi61lVKMACxmjilXGdrPwWxfLT2IOyEOkOnfncANTHh4o bTuIh8AoZju7te4+/6CtP89HcBljVTy0ybjIIWbkQbdBE90SI1f6VRBXtXaUjo1T 2hscB2PHnN/kazGS+GMVxYL6XkS+MHCHwP6Z/phX+amTo7ECwshZ7UQLR/iGaR0h D9mqF061v1sBgfRCEsGg2nfrxenZL1CkfQ5AOBRbGtUg+Go9fwIDAQABo4ID0TCC A80wHQYDVR0OBBYEFEYSHvGMKhUsgRYupxFCdK/E/rapMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOGFlMGI2YTktM2FlZS0z MDNkLThjYmMtNTg0MTZhMjU3MGYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMIGaBggrBgEFBQcBBwEB/wSBijCBhzA6BAIAATA0AwQAF+0w AwQCF+1EMAwDBAEX7WYDBAEX7WgDBAEX7YwwDAMEAcb/VgMEAcb/WAMEAMb/ejBJ BAIAAjBDMBIDBwAgAUnw0E0DBwAgAUnw0E4DBwAgAUnw0FUwEgMHACABSfDQqQMH ACABSfDQqgMHACABSfDQvwMHACABSfDRODBUBgNVHSABAf8ESjBIMEYGCCsGAQUF Bw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNl cy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBTyl64gUfWDanMHyGL D419DiMGMP41QaDGiwWZpgkp3ZCQTn1P0DAmELL0bLNRjv7TPCvVIiVgqfxUBIbL QZxOO33YV882s2FJPj820ZgM0gotiSMYvYbUxv88RCCHZdqxLV3pSgrnCxqbOWm3 qxM80iLOKd9RbDPFzW2qiJj9iFybsjtv1kmttPCxoUX5qfHq+DMiad5vM3N0plzY 7hnig47wu43vHc3swG0ngpGq5s6Uauh9gWpQPGSof9d6JBLoF6URvt7gC53VJi+q cI279gI9H6SI3Eo8vNGen+AZLZZkrf/DbOTUyv+BLh4crXauVSmXYdCzFM6MH0HF px0h -----END CERTIFICATE-----Generated at Fri Apr 11 22:50:08 2025 by rpki-client