$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa File: d90d31b8-8155-3610-8198-5dd6d5876243.roa (raw, json) Hash identifier: laVpW/zOmA9V07wOomX/wO63xuDAyC/84l8hd9WLmfQ= Subject key identifier: E2:B7:E6:2E:DC:EC:74:F8:87:41:30:A3:74:D5:F7:AF:7F:E3:9F:BB Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849203C19223800FE8E9F6F05C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa Signing time: Sun 09 Mar 2025 02:00:39 +0000 ROA not before: Sun 09 Mar 2025 02:00:39 +0000 ROA not after: Sat 07 Jun 2025 01:00:39 +0000 asID: 1239 IP address blocks: 23.237.28.0/23 maxlen: 23 2001:49f0:d076::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:20:3c:19:22:38:00:fe:8e:9f:6f:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 9 02:00:39 2025 GMT Not After : Jun 7 01:00:39 2025 GMT Subject: CN=2cf97ce1-9d83-4a16-809c-c14cda40c04a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b9:79:6e:62:03:ee:8c:0a:64:25:4e:8c:dd: de:04:70:69:23:d4:80:c7:16:f1:16:71:08:c6:7a: 42:c3:f0:40:a7:00:51:b4:db:8f:9e:f2:5c:b3:ff: 24:0a:2f:37:2f:51:60:11:ad:7e:49:07:67:f8:05: f8:53:18:33:ff:cd:b3:ec:fa:dc:df:f4:9b:fd:73: 9f:ed:a0:a8:c7:e3:ee:82:07:99:27:b1:f0:39:1d: 02:d9:c8:4d:3a:3f:7f:63:c8:80:dc:04:43:79:4f: ae:57:cd:38:f9:9b:40:e8:2b:d8:44:b9:7b:b5:fd: 73:b6:57:54:94:e1:b4:41:f1:6d:35:f8:38:24:49: 4a:c6:ea:ce:6b:60:56:38:5c:95:a4:9c:1f:ae:3e: 68:01:7a:2d:da:6c:2d:a2:f1:33:69:02:86:13:b7: f6:1e:05:08:6c:48:21:5c:59:22:fb:71:df:70:db: 8c:58:e7:bb:7e:82:1e:92:22:c8:c3:49:0c:3b:62: 77:1b:fc:80:a0:1f:24:16:f1:97:dc:1f:0f:cb:a7: 2f:d0:e7:60:f6:bd:08:85:87:0c:50:08:74:3f:8b: d6:36:48:04:3a:29:46:cc:22:41:13:c9:7a:68:31: d3:50:69:f5:c8:b1:46:d0:91:59:7e:1d:b7:e6:de: a0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B7:E6:2E:DC:EC:74:F8:87:41:30:A3:74:D5:F7:AF:7F:E3:9F:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/d90d31b8-8155-3610-8198-5dd6d5876243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.28.0/23 IPv6: 2001:49f0:d076::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:59:33:62:c4:99:a8:19:a6:17:04:77:5d:7b:ea:a0:4d:4f: 60:b1:83:0d:41:e8:5b:ea:36:88:a0:0d:61:1d:49:36:58:2c: 39:55:40:91:ff:d1:6f:c3:9d:81:c0:a6:e9:fb:ce:d1:43:6e: f6:86:42:06:b9:fb:2a:3f:18:e2:23:1c:7f:23:f1:54:ba:34: 62:d6:bc:40:60:23:ea:38:e2:cd:e8:90:65:a9:d0:25:3d:2d: d8:3a:a6:2d:98:30:2a:3e:85:e8:df:06:4d:60:2a:35:9e:12: 28:03:be:74:4b:42:4f:cd:9f:65:27:dd:4d:45:83:22:83:b7: 77:2a:67:80:07:f9:71:63:92:e5:af:e1:a3:4b:af:74:64:9f: 1d:0e:4d:ff:a5:a6:d1:4e:f8:c0:61:15:19:db:f9:b6:ea:c2: f3:9e:fe:ac:5f:48:f4:38:83:b4:28:40:58:58:5d:c2:2c:a2: 8c:ae:7f:7a:5e:ef:2f:3f:65:ea:e8:47:c0:19:1f:dd:84:20: 32:05:dc:6a:6d:98:12:39:ef:83:f8:60:e7:c4:4e:41:c8:a2: f4:55:2f:a5:08:92:27:fb:65:39:2c:ac:ca:16:39:4d:e2:6d: 97:30:82:69:4d:0f:d0:a4:c2:cf:ac:a4:6c:06:93:d6:bc:00: e7:bb:ca:fe -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEkgPBkiOAD+jp9vBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk MmNmOTdjZTEtOWQ4My00YTE2LTgwOWMtYzE0Y2RhNDBjMDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3rl5bmID7owKZCVOjN3eBHBpI9SAxxbxFnEI xnpCw/BApwBRtNuPnvJcs/8kCi83L1FgEa1+SQdn+AX4Uxgz/82z7Prc3/Sb/XOf 7aCox+PuggeZJ7HwOR0C2chNOj9/Y8iA3ARDeU+uV804+ZtA6CvYRLl7tf1ztldU lOG0QfFtNfg4JElKxurOa2BWOFyVpJwfrj5oAXot2mwtovEzaQKGE7f2HgUIbEgh XFki+3HfcNuMWOe7foIekiLIw0kMO2J3G/yAoB8kFvGX3B8Py6cv0Odg9r0IhYcM UAh0P4vWNkgEOilGzCJBE8l6aDHTUGn1yLFG0JFZfh235t6gaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOK35i7c7HT4h0Ewo3TV969/45+7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZDkwZDMxYjgtODE1NS0z NjEwLTgxOTgtNWRkNmQ1ODc2MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBF+0cMA8E AgACMAkDBwAgAUnw0HYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAEFkzYsSZqBmmFwR3XXvqoE1PYLGDDUHo W+o2iKANYR1JNlgsOVVAkf/Rb8OdgcCm6fvO0UNu9oZCBrn7Kj8Y4iMcfyPxVLo0 Yta8QGAj6jjizeiQZanQJT0t2DqmLZgwKj6F6N8GTWAqNZ4SKAO+dEtCT82fZSfd TUWDIoO3dypngAf5cWOS5a/ho0uvdGSfHQ5N/6Wm0U74wGEVGdv5turC857+rF9I 9DiDtChAWFhdwiyijK5/el7vLz9l6uhHwBkf3YQgMgXcam2YEjnvg/hg58ROQcii 9FUvpQiSJ/tlOSysyhY5TeJtlzCCaU0P0KTCz6ykbAaT1rwA57vK/g== -----END CERTIFICATE-----Generated at Sat Apr 5 10:18:07 2025 by rpki-client