$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa File: e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa (raw, json) Hash identifier: So7HDlb4L19NOxNSr7K219Oq6rgVowSXokuZPq+/cog= Subject key identifier: 0F:C8:89:CB:86:67:97:27:95:FB:3C:E4:75:6B:2E:B9:20:4A:9B:95 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858491AA6D160E50A17D2C18D3010 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 174 IP address blocks: 23.237.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:d1:60:e5:0a:17:d2:c1:8d:30:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=8c70c072-52e5-49d0-9957-808a14105116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fe:f4:7b:42:65:3d:86:8a:5f:dc:15:f9:41: f4:f3:0c:63:bb:d2:ec:77:e0:05:9d:14:ca:e8:02: fe:9f:9a:5e:f4:3b:b7:d1:01:4d:0f:ad:27:26:b7: d8:03:af:71:16:26:4c:5b:32:9f:d9:84:f8:ce:bc: 90:e5:10:c4:a8:37:fc:0b:10:26:28:e5:75:0c:29: ef:9c:c3:12:41:3b:d4:fe:4a:85:c8:cf:e4:e9:fa: 67:e1:80:7a:6e:aa:5e:2c:a5:d3:74:35:b7:cb:d6: fe:8d:ed:1b:f4:c4:7d:76:01:25:5e:3d:1e:bb:45: 17:eb:eb:53:d2:9c:46:06:d0:06:c5:d6:c9:f0:b7: b3:5d:65:81:06:44:e2:67:80:66:63:96:6e:4e:fa: 4c:96:6f:f1:7f:10:13:32:a0:c1:c1:50:6d:ab:bc: 9e:55:19:29:65:62:4e:97:c9:07:b6:dd:5a:b7:bc: dd:fe:58:84:f5:23:22:57:34:e2:d8:4a:84:30:1c: 5d:9d:ae:a7:15:56:5f:5d:74:d7:6d:19:b6:ea:16: 38:da:47:fa:e5:03:75:ee:bc:e9:cc:46:4c:46:91: 3f:65:a9:f6:69:26:38:c9:9e:b5:0d:c8:43:20:54: bb:e0:ea:7a:6a:29:4c:9b:07:c0:45:67:dd:d5:97: a5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:89:CB:86:67:97:27:95:FB:3C:E4:75:6B:2E:B9:20:4A:9B:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/e9ebfc46-c772-3ee4-8b38-5c4507dbcab7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:c5:36:83:c5:be:da:98:07:0a:56:20:17:73:45:d4:73:70: 0d:82:8c:0e:cc:77:3b:15:83:f0:e7:76:46:7c:bb:3b:2d:17: db:cb:e8:20:29:19:b9:5d:99:0a:a5:09:60:39:77:ab:19:4d: 3f:63:6a:05:7a:1f:be:27:cc:fb:a8:c8:32:eb:cf:e6:26:0e: 58:a8:13:03:2e:d8:90:63:62:84:40:b4:70:ba:18:c4:a0:e9: 05:07:5e:c2:d1:27:7a:4a:cd:f6:1a:4a:11:54:fb:0a:9f:77: 33:2d:ce:2e:c8:96:4e:50:c0:1b:e3:21:12:8e:7e:fa:b8:e2: 60:9a:d7:03:f0:8c:6e:15:06:0d:f4:0d:e2:a0:ed:bc:fe:75: 65:12:9f:bf:93:46:40:12:19:b9:80:9c:81:af:8e:d7:33:3b: 7e:75:ca:fe:05:0a:83:69:fe:9b:b5:9f:da:2b:3b:53:b2:61: 0f:03:cf:91:6f:ce:7d:0f:98:be:40:7a:c4:a0:dd:51:b1:06: 32:dc:a9:2b:d4:bc:46:bd:1d:f8:2a:51:89:23:50:e5:f5:b4: 1e:7b:37:fb:16:bf:4c:e6:6c:63:49:58:10:d9:f2:1a:4c:31: 77:8c:b4:b3:b9:a6:a7:d4:41:3e:34:71:f6:97:12:9a:4d:d2: 19:ee:03:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaptFg5QoX0sGNMBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk OGM3MGMwNzItNTJlNS00OWQwLTk5NTctODA4YTE0MTA1MTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlP70e0JlPYaKX9wV+UH08wxju9Lsd+AFnRTK 6AL+n5pe9Du30QFND60nJrfYA69xFiZMWzKf2YT4zryQ5RDEqDf8CxAmKOV1DCnv nMMSQTvU/kqFyM/k6fpn4YB6bqpeLKXTdDW3y9b+je0b9MR9dgElXj0eu0UX6+tT 0pxGBtAGxdbJ8LezXWWBBkTiZ4BmY5ZuTvpMlm/xfxATMqDBwVBtq7yeVRkpZWJO l8kHtt1at7zd/liE9SMiVzTi2EqEMBxdna6nFVZfXXTXbRm26hY42kf65QN17rzp zEZMRpE/Zan2aSY4yZ61DchDIFS74Op6ailMmwfARWfd1ZelRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/IicuGZ5cnlfs85HVrLrkgSpuVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZTllYmZjNDYtYzc3Mi0z ZWU0LThiMzgtNWM0NTA3ZGJjYWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+2TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDFNoPFvtqYBwpWIBdzRdRzcA2CjA7MdzsVg/DndkZ8uzstF9vL6CAp GbldmQqlCWA5d6sZTT9jagV6H74nzPuoyDLrz+YmDlioEwMu2JBjYoRAtHC6GMSg 6QUHXsLRJ3pKzfYaShFU+wqfdzMtzi7Ilk5QwBvjIRKOfvq44mCa1wPwjG4VBg30 DeKg7bz+dWUSn7+TRkASGbmAnIGvjtczO351yv4FCoNp/pu1n9orO1OyYQ8Dz5Fv zn0PmL5AesSg3VGxBjLcqSvUvEa9HfgqUYkjUOX1tB57N/sWv0zmbGNJWBDZ8hpM MXeMtLO5pqfUQT40cfaXEppN0hnuA/w= -----END CERTIFICATE-----Generated at Fri Apr 11 23:56:44 2025 by rpki-client