$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa File: f1675267-9cfa-39aa-adfb-425d746e3821.roa (raw, json) Hash identifier: iuq4w8h85HM+hN/5PDwa1ie27lrYXdaKdiJuPAJG25g= Subject key identifier: 2A:F0:1F:34:36:45:69:8B:3C:42:DE:FE:50:96:7B:F8:7C:90:4C:2D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858484D7581BE09A3CEBA76AFC540 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa Signing time: Mon 23 Dec 2024 14:00:51 +0000 ROA not before: Mon 23 Dec 2024 14:00:51 +0000 ROA not after: Sun 23 Mar 2025 13:00:51 +0000 asID: 1239 IP address blocks: 23.237.162.0/23 maxlen: 24 23.237.247.0/24 maxlen: 24 50.7.49.0/24 maxlen: 24 216.227.133.0/24 maxlen: 24 2001:49f0:d0d1::/48 maxlen: 48 2001:49f0:d122::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:75:81:be:09:a3:ce:ba:76:af:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 23 14:00:51 2024 GMT Not After : Mar 23 13:00:51 2025 GMT Subject: CN=3dfe5a03-43c0-4a4a-9380-94c27d0c52fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:31:75:db:f8:e0:ee:ca:50:eb:8b:88:e1: 2e:f1:10:c6:4b:ba:e1:f4:34:08:aa:b3:18:5d:81: 2b:47:ac:91:83:7a:fa:05:2a:ce:ad:da:a5:ea:19: 96:9e:68:c6:72:f4:1d:bf:bb:4e:98:62:5c:9f:fd: 80:e0:c5:e9:09:83:7a:7e:e2:8c:a1:2b:31:92:c3: 37:35:24:7d:f3:ab:d9:01:3c:3a:0d:4a:f2:00:be: a5:82:44:05:af:95:4f:e5:63:cc:d9:e7:f7:62:31: ec:a1:aa:fd:88:69:1d:c1:7f:c1:91:b9:62:84:81: 58:8a:f1:14:bd:1c:ce:83:2e:57:d6:76:93:31:77: 84:45:7d:98:be:d9:5f:26:0f:eb:bb:a3:d9:1b:f7: f8:7e:67:f1:98:6e:33:72:54:ab:e4:5a:1a:e6:71: fd:7e:e9:e6:87:ab:8f:fe:12:b3:46:b8:d5:4d:25: 33:d1:fa:56:e9:96:91:d7:d9:b1:46:4b:f1:9a:78: a6:9d:59:05:fc:bc:0a:64:08:4f:28:73:2d:fc:37: 03:29:18:f5:09:74:58:13:47:fe:15:31:20:0e:32: 10:d0:84:1a:41:fe:c6:2c:df:59:8f:20:7f:c0:db: 6a:a5:c5:bc:b0:b6:6e:a4:b1:f2:2a:c9:0a:37:77: 1c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F0:1F:34:36:45:69:8B:3C:42:DE:FE:50:96:7B:F8:7C:90:4C:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f1675267-9cfa-39aa-adfb-425d746e3821.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.162.0/23 23.237.247.0/24 50.7.49.0/24 216.227.133.0/24 IPv6: 2001:49f0:d0d1::/48 2001:49f0:d122::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:52:c0:64:8f:dd:2b:c8:88:9b:1d:33:d4:5c:f9:79:9b:7d: ac:d5:21:5e:66:e3:1f:7e:30:10:cb:19:af:50:ff:d8:83:94: 73:d4:56:43:39:b3:a6:8a:a2:40:76:28:ac:49:f6:60:a1:30: 76:2a:dc:9f:3c:c1:67:f2:15:80:bd:04:4a:cb:92:85:d2:ed: dc:5c:ab:ef:39:e7:28:27:fc:54:e8:48:37:08:b5:cb:30:18: 38:38:bf:ed:1d:80:7b:d2:46:38:ac:05:47:e7:c4:a2:c5:9c: e3:ef:7a:ca:10:f9:c3:bd:db:a8:6e:96:b3:00:9e:c0:57:aa: 1e:5c:36:79:b4:09:2b:22:60:23:74:08:6b:18:20:82:f2:07: 33:33:a9:d3:3f:b4:0d:c9:70:69:cd:22:b2:be:e2:34:87:c0: 01:ac:da:5a:70:7b:a1:ca:70:3d:14:7f:2f:68:f5:46:b4:d6: f3:2b:2f:6d:63:0e:41:35:60:3c:a3:76:0f:f4:d6:f5:2d:cf: c2:f2:37:c4:4d:d5:64:1b:fd:a1:08:8d:29:a5:17:6c:84:4a: 02:92:4b:5f:a8:09:60:f2:d7:e6:b0:8c:44:9b:73:db:eb:9f: 0b:36:18:8b:2e:71:44:12:48:7d:9a:df:48:f7:7e:f1:20:0b: ad:d9:09:ad -----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIUAQ0Mn0MoWEhNdYG+CaPOunavxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIyMzE0MDA1MVoXDTI1MDMyMzEzMDA1MVowLzEtMCsGA1UEAxMk M2RmZTVhMDMtNDNjMC00YTRhLTkzODAtOTRjMjdkMGM1MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWQxddv44O7KUOuLiOEu8RDGS7rh9DQIqrMY XYErR6yRg3r6BSrOrdql6hmWnmjGcvQdv7tOmGJcn/2A4MXpCYN6fuKMoSsxksM3 NSR986vZATw6DUryAL6lgkQFr5VP5WPM2ef3YjHsoar9iGkdwX/BkblihIFYivEU vRzOgy5X1naTMXeERX2YvtlfJg/ru6PZG/f4fmfxmG4zclSr5Foa5nH9funmh6uP /hKzRrjVTSUz0fpW6ZaR19mxRkvxmnimnVkF/LwKZAhPKHMt/DcDKRj1CXRYE0f+ FTEgDjIQ0IQaQf7GLN9ZjyB/wNtqpcW8sLZupLHyKskKN3cccwIDAQABo4IDgTCC A30wHQYDVR0OBBYEFCrwHzQ2RWmLPELe/lCWe/h8kEwtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjE2NzUyNjctOWNmYS0z OWFhLWFkZmItNDI1ZDc0NmUzODIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMEsGCCsGAQUFBwEHAQH/BDwwOjAeBAIAATAYAwQBF+2iAwQA F+33AwQAMgcxAwQA2OOFMBgEAgACMBIDBwAgAUnw0NEDBwAgAUnw0SIwVAYDVR0g AQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5h cmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOC AQEAVVLAZI/dK8iImx0z1Fz5eZt9rNUhXmbjH34wEMsZr1D/2IOUc9RWQzmzpoqi QHYorEn2YKEwdircnzzBZ/IVgL0ESsuShdLt3Fyr7znnKCf8VOhINwi1yzAYODi/ 7R2Ae9JGOKwFR+fEosWc4+96yhD5w73bqG6WswCewFeqHlw2ebQJKyJgI3QIaxgg gvIHMzOp0z+0Dclwac0isr7iNIfAAazaWnB7ocpwPRR/L2j1RrTW8ysvbWMOQTVg PKN2D/TW9S3PwvI3xE3VZBv9oQiNKaUXbIRKApJLX6gJYPLX5rCMRJtz2+ufCzYY iy5xRBJIfZrfSPd+8SALrdkJrQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:12 2025 by rpki-client