$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cac87766-4405-38f7-8c01-1e24b979e452.roa File: cac87766-4405-38f7-8c01-1e24b979e452.roa (raw, json) Hash identifier: krHjsP+WEcQzcjJaDR9p9oDnyDrjtxMr7c2JnhsJKn4= Subject key identifier: C2:08:43:85:9A:25:9C:D6:A3:09:06:64:56:3B:3B:92:97:50:A3:60 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584953C414656C79FD8564A53D80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cac87766-4405-38f7-8c01-1e24b979e452.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 1239 IP address blocks: 23.237.194.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:14:65:6c:79:fd:85:64:a5:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=4b7805ea-067b-48dc-8c2c-bb9724a98b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:14:38:1a:17:9f:12:19:90:2b:54:54:2f: b1:be:8d:35:3b:1b:ea:cf:4b:3c:d3:ac:18:2b:f0: 6b:01:49:be:8c:db:c8:b2:83:2f:4a:46:6d:60:ec: 6d:6b:f5:3f:ba:d0:6c:68:82:9b:ef:90:0c:ee:24: 9d:2e:4a:eb:bc:dc:22:98:66:5e:c5:5b:8e:11:3d: 3d:74:e4:d6:0e:5e:de:1e:86:c4:43:ae:b8:5a:1f: 73:4e:69:51:4e:6b:c5:19:91:6b:23:0b:27:27:23: 6d:c9:ad:9f:10:2f:e4:82:df:06:d0:82:9e:68:e9: 53:9b:7c:63:4e:a4:70:37:5a:b2:65:ea:b4:66:29: f4:0b:94:99:09:f7:8a:6f:74:7d:e6:ae:71:66:2a: 53:7f:31:c4:a2:f5:58:ed:48:0e:c7:f6:0c:f4:8f: a2:c1:61:93:8b:a9:b8:26:8a:02:87:11:fe:cb:fd: a5:1d:c2:49:9a:e0:15:d2:45:d0:18:23:a9:11:1e: c4:22:87:fe:be:08:e2:96:f8:cc:bb:79:d9:20:3c: f4:43:68:c7:ea:e1:5a:f8:49:76:ca:93:40:a4:7b: 57:f1:99:b0:cd:44:4d:33:0b:09:7f:02:6c:38:68: ef:8b:fc:5e:9e:39:49:08:d5:a9:dc:5e:ed:09:6e: d7:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:43:85:9A:25:9C:D6:A3:09:06:64:56:3B:3B:92:97:50:A3:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/cac87766-4405-38f7-8c01-1e24b979e452.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:32:6c:62:92:e3:86:7c:76:99:22:83:98:68:e7:d3:1a:29: 45:40:0f:69:47:b8:c9:46:6c:2f:48:9c:6d:1d:7e:46:b3:13: 2a:f2:0e:65:08:e9:f8:65:57:75:5b:2e:6e:0b:cd:17:6a:83: 40:05:d9:4e:1c:9d:12:a3:7f:c1:32:28:27:89:12:e3:03:41: d7:d2:f8:f9:09:08:13:79:d4:d1:70:e5:ad:bd:5c:04:0e:d4: 62:12:a1:a9:8b:0a:e2:4a:1d:aa:e3:a2:4f:d0:e4:a4:3c:2f: 53:68:29:6d:79:6c:d0:56:23:8e:fd:23:45:9d:61:57:fe:15: ce:3b:e2:b5:08:e0:53:4e:4b:81:f6:d4:bd:92:34:94:76:07: 39:34:b1:e5:50:f0:c3:74:ed:b0:41:04:e6:7a:2e:e9:b4:e8: 07:77:3b:e8:4c:2b:cc:5d:c8:97:74:28:7f:48:c1:3f:b0:9b: 07:7f:7a:4c:cc:9a:86:00:0f:9e:89:22:31:ef:86:0a:73:18: c1:f2:83:30:cd:4f:a4:11:cf:2e:5c:25:35:8e:0c:8c:c8:27: ec:95:a7:66:c0:7b:5a:f4:30:75:f1:2f:60:3b:c1:0a:d1:8b: 5b:46:fc:79:f6:39:5a:db:00:50:9c:9a:04:d1:4e:f3:59:8d: 41:9e:7a:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxBRlbHn9hWSlPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk NGI3ODA1ZWEtMDY3Yi00OGRjLThjMmMtYmI5NzI0YTk4YjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVkUOBoXnxIZkCtUVC+xvo01Oxvqz0s806wY K/BrAUm+jNvIsoMvSkZtYOxta/U/utBsaIKb75AM7iSdLkrrvNwimGZexVuOET09 dOTWDl7eHobEQ664Wh9zTmlRTmvFGZFrIwsnJyNtya2fEC/kgt8G0IKeaOlTm3xj TqRwN1qyZeq0Zin0C5SZCfeKb3R95q5xZipTfzHEovVY7UgOx/YM9I+iwWGTi6m4 JooChxH+y/2lHcJJmuAV0kXQGCOpER7EIof+vgjilvjMu3nZIDz0Q2jH6uFa+El2 ypNApHtX8ZmwzURNMwsJfwJsOGjvi/xenjlJCNWp3F7tCW7XAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIIQ4WaJZzWowkGZFY7O5KXUKNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvY2FjODc3NjYtNDQwNS0z OGY3LThjMDEtMWUyNGI5NzllNDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4ybGKS44Z8dpkig5ho59MaKUVAD2lHuMlGbC9InG0dfkazEyryDmUI 6fhlV3VbLm4LzRdqg0AF2U4cnRKjf8EyKCeJEuMDQdfS+PkJCBN51NFw5a29XAQO 1GISoamLCuJKHarjok/Q5KQ8L1NoKW15bNBWI479I0WdYVf+Fc474rUI4FNOS4H2 1L2SNJR2Bzk0seVQ8MN07bBBBOZ6Lum06Ad3O+hMK8xdyJd0KH9IwT+wmwd/ekzM moYAD56JIjHvhgpzGMHygzDNT6QRzy5cJTWODIzIJ+yVp2bAe1r0MHXxL2A7wQrR i1tG/Hn2OVrbAFCcmgTRTvNZjUGeevY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:35:01 2025 by rpki-client