$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9a041001-6230-36c7-bb88-c3a71a03b5b3.roa File: 9a041001-6230-36c7-bb88-c3a71a03b5b3.roa (raw, json) Hash identifier: 7pJ+CHHWWwBE28hWXCXBWqobkfUpCZDlhOGxIz10aaQ= Subject key identifier: 37:9E:91:23:62:7A:B2:D3:72:27:4F:DB:DB:50:EB:84:17:72:34:34 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858489BA0A9D91B9828C321C1B980 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9a041001-6230-36c7-bb88-c3a71a03b5b3.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 1239 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a9:d9:1b:98:28:c3:21:c1:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=7eaab1a9-cddd-485f-b049-ff1797c70ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a4:d7:91:6d:d4:96:a4:67:31:31:f4:6a:91: f8:6c:1d:96:33:cb:da:23:1b:44:e9:19:ce:84:3a: 6d:e2:d3:79:bf:d3:a1:a6:e1:56:6e:ef:a7:a8:bb: c6:a5:9d:48:28:88:97:31:2d:7c:51:a3:3d:3c:b0: 2b:33:00:58:b6:5e:87:31:3c:f7:7a:c4:0d:72:d6: 2c:48:25:04:50:e1:8e:69:81:1a:ef:aa:8c:aa:5e: 16:da:68:7d:9b:25:74:1f:69:11:1a:7b:34:44:42: 9c:9d:d4:e5:cf:e6:b4:33:8e:46:28:71:20:84:6c: c4:b8:c8:6b:aa:b9:d2:e6:b9:f8:94:fe:74:90:0b: e3:74:bc:45:1a:cb:55:46:c1:0b:95:20:18:ea:a5: cd:47:f7:59:d8:93:47:71:a8:3f:35:bd:fd:00:44: 52:3b:05:d5:17:7a:ac:ec:f1:fb:05:17:f1:0a:2d: 72:56:51:e2:4f:e5:df:ba:0a:59:c3:61:15:35:e7: 76:61:a3:0c:2c:7d:24:37:5a:0c:04:90:ad:39:fd: 67:6d:62:a5:b9:05:74:dc:07:c8:cb:61:0f:df:6d: 02:90:15:61:54:7c:79:25:4b:1a:59:16:0d:a8:29: d4:67:b1:75:51:28:12:76:9c:13:4b:21:b1:a7:50: 1f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:91:23:62:7A:B2:D3:72:27:4F:DB:DB:50:EB:84:17:72:34:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9a041001-6230-36c7-bb88-c3a71a03b5b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:c0:0e:1e:c9:56:42:d4:e8:c9:4d:06:63:4f:26:23:f3:2b: ce:9a:90:4e:62:b0:b1:cd:e8:bd:d8:5f:e3:1a:a6:53:d2:4b: 49:72:72:b9:15:c0:f7:b8:1c:b9:29:d1:63:ee:9b:a1:60:ba: 75:73:d6:67:a7:05:c3:f3:c1:1a:82:13:15:b8:85:c6:96:ba: 8e:f7:0e:c6:34:12:ef:65:49:80:19:31:99:97:ea:66:4f:8b: 12:61:d0:16:ee:d6:ba:34:f3:98:67:21:5a:d6:43:25:99:18: 94:b2:db:2b:45:02:e7:10:4c:45:08:01:8f:15:4f:23:5c:48: 47:b1:84:de:ce:fe:dd:9d:67:e1:ac:a7:ec:12:bf:ac:5f:20: 3d:9c:03:7b:5f:53:dc:f6:29:44:eb:ea:77:3c:a9:a4:ca:c7: 2f:b5:96:1a:87:67:9a:77:82:e4:07:c0:b4:6a:e3:e8:e0:3b: fd:d1:69:c0:9e:d7:73:0e:67:b6:db:01:f6:da:83:03:d1:81: ff:5b:d3:3d:f2:9b:c8:b3:e5:09:47:73:21:56:d5:b1:bf:3f: 96:4a:7c:ef:78:d3:c0:11:9e:d3:43:66:a6:44:2d:95:7f:7b: ad:d1:a9:6b:77:e3:b2:a9:df:d2:2a:62:0f:74:b9:d8:6d:f4: 48:46:a2:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKnZG5gowyHBuYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk N2VhYWIxYTktY2RkZC00ODVmLWIwNDktZmYxNzk3YzcwYWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6aTXkW3UlqRnMTH0apH4bB2WM8vaIxtE6RnO hDpt4tN5v9OhpuFWbu+nqLvGpZ1IKIiXMS18UaM9PLArMwBYtl6HMTz3esQNctYs SCUEUOGOaYEa76qMql4W2mh9myV0H2kRGns0REKcndTlz+a0M45GKHEghGzEuMhr qrnS5rn4lP50kAvjdLxFGstVRsELlSAY6qXNR/dZ2JNHcag/Nb39AERSOwXVF3qs 7PH7BRfxCi1yVlHiT+XfugpZw2EVNed2YaMMLH0kN1oMBJCtOf1nbWKluQV03AfI y2EP320CkBVhVHx5JUsaWRYNqCnUZ7F1USgSdpwTSyGxp1AfVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeekSNierLTcidP29tQ64QXcjQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOWEwNDEwMDEtNjIzMC0z NmM3LWJiODgtYzNhNzFhMDNiNWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAvADh7JVkLU6MlNBmNPJiPzK86akE5isLHN6L3YX+MaplPSS0lycrkV wPe4HLkp0WPum6FgunVz1menBcPzwRqCExW4hcaWuo73DsY0Eu9lSYAZMZmX6mZP ixJh0Bbu1ro085hnIVrWQyWZGJSy2ytFAucQTEUIAY8VTyNcSEexhN7O/t2dZ+Gs p+wSv6xfID2cA3tfU9z2KUTr6nc8qaTKxy+1lhqHZ5p3guQHwLRq4+jgO/3RacCe 13MOZ7bbAfbagwPRgf9b0z3ym8iz5QlHcyFW1bG/P5ZKfO9408ARntNDZqZELZV/ e63RqWt347Kp39IqYg90udht9EhGok4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:35 2025 by rpki-client