$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa File: 96e227a2-d436-397b-82d9-f9ece14a3136.roa (raw, json) Hash identifier: btLsCMvndvb8unBVuQSA5uN7wMqe0ge73nhrL78Xsv8= Subject key identifier: 22:72:3A:38:B6:8A:2E:47:F5:40:1E:5F:AB:8A:7E:9A:98:59:4A:2A Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848F80F64E42183065D085663C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa Signing time: Sat 22 Feb 2025 16:38:22 +0000 ROA not before: Sat 22 Feb 2025 16:38:22 +0000 ROA not after: Fri 23 May 2025 15:38:22 +0000 asID: 30058 IP address blocks: 23.237.59.0/24 maxlen: 24 216.227.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f8:0f:64:e4:21:83:06:5d:08:56:63:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 22 16:38:22 2025 GMT Not After : May 23 15:38:22 2025 GMT Subject: CN=9900cc86-794c-4e25-b44c-6d0e8b278b76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:fd:24:f9:b7:4c:27:d8:9b:12:e2:31:e8:e1: 6a:b2:17:70:ab:ff:ef:d2:84:fa:3b:5d:51:06:a3: 0e:85:a2:72:a9:97:77:c3:14:d8:ca:f5:fe:4c:20: 75:1d:5a:41:92:99:fb:ba:af:e6:e5:98:12:79:9a: ff:8a:b2:36:b8:18:1b:b1:04:e0:27:74:93:cb:25: 92:da:fb:60:9d:14:90:01:9e:ec:94:34:31:4e:43: c9:c0:cb:cb:87:4a:26:a3:15:9c:75:b0:a7:58:56: 63:2f:45:66:53:19:ec:b3:db:c3:89:6a:94:cc:ee: f9:ed:ca:2b:6b:34:22:68:54:63:7a:ee:97:2b:ef: a8:68:b5:98:9b:1f:ae:b2:25:16:f1:cb:cd:8b:72: 11:00:58:91:e7:b7:e4:f9:b5:e5:a7:5b:5f:7e:90: 48:56:eb:2f:b1:ed:69:4b:a0:3c:4e:f4:f2:16:bf: 61:5a:ed:7d:4c:1d:cb:fe:9d:c3:2f:a4:9c:4e:2f: 40:bc:a5:66:71:51:a0:4f:7f:f9:01:77:3a:40:bb: ea:8a:0b:6a:f8:62:91:01:52:9e:2e:7c:22:0a:32: 2b:98:9e:59:35:1f:cb:7c:07:83:b0:a6:f9:1d:70: 24:98:b2:f3:d6:9c:22:0b:1c:03:a5:91:85:2f:5e: 04:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:72:3A:38:B6:8A:2E:47:F5:40:1E:5F:AB:8A:7E:9A:98:59:4A:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.59.0/24 216.227.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:1e:a6:bc:fa:3a:1b:fa:94:9d:51:00:ab:16:d6:a4:a9:4c: de:2e:7a:d9:a0:be:28:d0:98:cf:f2:2b:89:44:13:b0:6d:fe: 33:28:99:3b:94:1c:5c:5c:dc:b7:67:24:dc:1a:38:0c:bb:0f: 4b:25:22:2c:d8:75:df:81:25:ef:59:e8:b4:65:f7:6b:85:b8: 62:58:1a:d6:7b:e4:d2:4e:50:08:0f:5c:b8:c0:43:de:fe:54: 7a:e0:2c:7d:e0:0f:42:3a:f6:ed:45:5d:b8:13:5d:a5:f3:6b: 32:7c:48:36:0a:30:45:b6:b7:ef:d3:0c:74:5a:0c:75:36:dd: a8:67:aa:05:7c:f0:8d:c6:7f:f2:11:6a:ac:70:74:e0:ab:a5: 60:49:b0:0e:5e:1e:56:0f:43:44:e8:97:7b:95:f6:e6:74:5f: ba:53:16:9b:b6:b4:69:44:aa:6f:ac:2c:cd:20:81:2a:3c:1e: bf:83:c9:f0:ee:e2:cd:26:bf:af:fd:bf:c7:c0:74:24:81:01: b5:84:61:07:50:7c:95:f0:9b:31:62:b2:70:1d:12:68:da:7d: 54:ef:30:65:f9:90:7f:1c:42:67:b6:6d:60:95:ad:d3:88:7e: 1f:f4:34:78:64:98:93:ab:83:73:b1:04:84:ed:c1:20:c6:56: dc:d9:40:e9 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj4D2TkIYMGXQhWY8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDIyMjE2MzgyMloXDTI1MDUyMzE1MzgyMlowLzEtMCsGA1UEAxMk OTkwMGNjODYtNzk0Yy00ZTI1LWI0NGMtNmQwZThiMjc4Yjc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7v0k+bdMJ9ibEuIx6OFqshdwq//v0oT6O11R BqMOhaJyqZd3wxTYyvX+TCB1HVpBkpn7uq/m5ZgSeZr/irI2uBgbsQTgJ3STyyWS 2vtgnRSQAZ7slDQxTkPJwMvLh0omoxWcdbCnWFZjL0VmUxnss9vDiWqUzO757cor azQiaFRjeu6XK++oaLWYmx+usiUW8cvNi3IRAFiR57fk+bXlp1tffpBIVusvse1p S6A8TvTyFr9hWu19TB3L/p3DL6ScTi9AvKVmcVGgT3/5AXc6QLvqigtq+GKRAVKe LnwiCjIrmJ5ZNR/LfAeDsKb5HXAkmLLz1pwiCxwDpZGFL14E5QIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCJyOji2ii5H9UAeX6uKfpqYWUoqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTZlMjI3YTItZDQzNi0z OTdiLTgyZDktZjllY2UxNGEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+07AwQB 2OOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAI4eprz6Ohv6lJ1RAKsW1qSpTN4uetmgvijQmM/yK4lEE7Bt /jMomTuUHFxc3LdnJNwaOAy7D0slIizYdd+BJe9Z6LRl92uFuGJYGtZ75NJOUAgP XLjAQ97+VHrgLH3gD0I69u1FXbgTXaXzazJ8SDYKMEW2t+/TDHRaDHU23ahnqgV8 8I3Gf/IRaqxwdOCrpWBJsA5eHlYPQ0Tol3uV9uZ0X7pTFpu2tGlEqm+sLM0ggSo8 Hr+DyfDu4s0mv6/9v8fAdCSBAbWEYQdQfJXwmzFisnAdEmjafVTvMGX5kH8cQme2 bWCVrdOIfh/0NHhkmJOrg3OxBITtwSDGVtzZQOk= -----END CERTIFICATE-----Generated at Fri Mar 14 15:03:25 2025 by rpki-client