$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa File: c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa (raw, json) Hash identifier: /Ms1YJz0gT+2QWSiatLqBZRTDnQS9UnFqMehtZNI1A4= Subject key identifier: 28:CF:8C:DB:7A:37:84:25:45:6B:67:4D:75:B5:74:EA:A9:19:CC:83 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584925B3AE109FEEBEF3DF5979A0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa Signing time: Tue 11 Mar 2025 01:00:40 +0000 ROA not before: Tue 11 Mar 2025 01:00:40 +0000 ROA not after: Mon 09 Jun 2025 01:00:40 +0000 asID: 174 IP address blocks: 23.237.116.0/23 maxlen: 23 2001:49f0:d0b7::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:25:b3:ae:10:9f:ee:be:f3:df:59:79:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 11 01:00:40 2025 GMT Not After : Jun 9 01:00:40 2025 GMT Subject: CN=3cb9a978-bb12-4c00-bf7a-fcfc45f81605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:95:43:2f:2f:86:81:9f:96:b9:df:42:00: 5d:67:a2:49:64:38:72:02:91:82:d9:aa:f6:ed:50: 60:a7:b8:77:8a:a1:73:58:fb:90:9b:56:7c:6b:e3: c1:41:14:35:92:dd:fc:a7:06:3b:ac:a0:a1:4a:d7: ea:d3:ef:38:23:b9:78:c2:fe:06:1c:11:d4:03:91: 2c:64:1b:0b:f4:78:9b:a8:23:70:d4:92:9f:15:03: de:bb:92:d1:84:dd:39:b7:2f:42:c7:0e:08:89:19: bf:d7:54:1e:a6:5f:a2:2a:25:82:f0:37:af:e8:40: 63:ec:01:9c:d3:e6:90:c1:27:3b:68:c4:e4:6c:9f: 54:25:ad:b8:6e:1e:b9:c9:5b:7c:04:ca:67:49:a4: da:50:0b:7f:fa:88:10:e0:66:5a:a4:13:6d:06:bd: 17:d7:6e:1d:0d:63:6c:a5:d8:ba:24:8f:19:39:d4: 7f:76:4d:6e:52:0a:8e:2b:06:fa:b3:63:d7:73:7b: 6f:5f:5e:df:e3:69:f3:a2:b0:42:2b:52:d9:09:4f: c1:3f:be:38:f5:3a:0b:8f:dc:5a:60:10:ac:74:dd: 7d:3e:eb:a6:e5:69:c4:ae:fb:e0:f9:ec:5b:be:07: 94:f5:ea:02:c8:3e:d0:47:03:01:da:64:0a:6b:fe: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:CF:8C:DB:7A:37:84:25:45:6B:67:4D:75:B5:74:EA:A9:19:CC:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c40ff04c-bd4a-3b41-9bc5-bea67ae4f899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.116.0/23 IPv6: 2001:49f0:d0b7::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:ee:f7:be:56:f1:a2:87:7d:46:4d:89:74:be:a7:19:c1:09: 4e:d8:f7:57:aa:d0:0e:2c:b7:c8:d5:df:89:bd:cd:a5:d4:75: b8:3d:b2:2b:39:b2:3a:6f:e0:4b:e6:82:56:7b:e0:93:80:ad: 69:18:c7:8e:f7:17:12:6e:77:9d:66:e8:54:e5:3d:cc:00:d1: 57:0c:3c:62:c1:a5:1f:5e:bb:8a:ec:49:f3:15:68:3a:8f:21: 11:57:7a:a8:c4:2c:31:f7:00:c1:e2:e0:53:78:62:0a:9b:af: 1e:9d:c8:57:07:78:91:af:d3:21:af:cc:73:6f:66:7c:1a:64: b9:9b:cc:ed:55:d5:f3:36:08:6c:93:12:3d:84:0c:67:f7:3a: 14:6a:67:4d:f7:26:b2:66:71:dc:49:19:5d:d7:f8:fe:b0:e6: 63:bb:2f:c3:0f:df:6e:ab:95:a6:ba:d0:8b:e8:80:b6:22:2b: 94:8e:ec:41:b7:4d:fa:f3:35:99:06:0f:6b:32:16:79:86:2f: 19:02:37:aa:22:b5:fb:c5:59:81:1d:b5:62:88:66:75:3e:bb: e2:30:c2:85:ff:bd:49:02:09:a5:7d:5e:7f:c8:9d:6e:f4:69: 7f:42:e9:3b:c6:09:b8:de:ba:2d:d5:0e:a2:03:5b:97:62:92: b1:34:49:91 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkls64Qn+6+899ZeaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMxMTAxMDA0MFoXDTI1MDYwOTAxMDA0MFowLzEtMCsGA1UEAxMk M2NiOWE5NzgtYmIxMi00YzAwLWJmN2EtZmNmYzQ1ZjgxNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju+VQy8vhoGflrnfQgBdZ6JJZDhyApGC2ar2 7VBgp7h3iqFzWPuQm1Z8a+PBQRQ1kt38pwY7rKChStfq0+84I7l4wv4GHBHUA5Es ZBsL9HibqCNw1JKfFQPeu5LRhN05ty9Cxw4IiRm/11Qepl+iKiWC8Dev6EBj7AGc 0+aQwSc7aMTkbJ9UJa24bh65yVt8BMpnSaTaUAt/+ogQ4GZapBNtBr0X124dDWNs pdi6JI8ZOdR/dk1uUgqOKwb6s2PXc3tvX17f42nzorBCK1LZCU/BP7449ToLj9xa YBCsdN19Puum5WnErvvg+exbvgeU9eoCyD7QRwMB2mQKa/6svwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFCjPjNt6N4QlRWtnTXW1dOqpGcyDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzQwZmYwNGMtYmQ0YS0z YjQxLTliYzUtYmVhNjdhZTRmODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+10MA8E AgACMAkDBwAgAUnw0LcwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEApO73vlbxood9Rk2JdL6nGcEJTtj3V6rQ Diy3yNXfib3NpdR1uD2yKzmyOm/gS+aCVnvgk4CtaRjHjvcXEm53nWboVOU9zADR Vww8YsGlH167iuxJ8xVoOo8hEVd6qMQsMfcAweLgU3hiCpuvHp3IVwd4ka/TIa/M c29mfBpkuZvM7VXV8zYIbJMSPYQMZ/c6FGpnTfcmsmZx3EkZXdf4/rDmY7svww/f bquVprrQi+iAtiIrlI7sQbdN+vM1mQYPazIWeYYvGQI3qiK1+8VZgR21YohmdT67 4jDChf+9SQIJpX1ef8idbvRpf0LpO8YJuN66LdUOogNbl2KSsTRJkQ== -----END CERTIFICATE-----Generated at Fri Mar 14 08:33:55 2025 by rpki-client