$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa File: f3006f6e-eb09-31d8-8265-4a9386256f5f.roa (raw, json) Hash identifier: Zi+VJJlclTnwWTE72+WF5s3NC2ABxZIgNfnggZ35yZ0= Subject key identifier: 56:2D:EB:46:D3:D8:5E:15:BF:9F:8B:6F:EA:EC:3E:AC:0F:00:C6:40 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858489BA0A9EDB35A55C68650D980 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa Signing time: Mon 20 Jan 2025 14:00:51 +0000 ROA not before: Mon 20 Jan 2025 14:00:51 +0000 ROA not after: Sun 20 Apr 2025 13:00:51 +0000 asID: 30058 IP address blocks: 23.237.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9b:a0:a9:ed:b3:5a:55:c6:86:50:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 20 14:00:51 2025 GMT Not After : Apr 20 13:00:51 2025 GMT Subject: CN=c9a5f39e-60fa-416c-8fef-02d0cfebf533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:0c:f8:cc:69:b1:cf:3f:21:be:41:b6:86:9b: f6:fb:8f:51:1b:8a:5f:0c:5d:6a:96:39:08:f1:c6: 26:76:ae:2d:71:aa:9a:a0:b5:0b:5a:3d:c8:d6:fe: 09:2f:a0:24:f5:d7:7f:ff:88:3f:a1:3f:5e:35:94: 45:a8:51:63:0c:84:e4:3c:71:14:56:c1:d2:4f:c1: 34:26:74:35:ea:76:25:f6:53:6d:6f:b5:8e:eb:63: 0f:7f:13:1f:7a:8c:8e:66:f5:19:8b:8d:53:95:0c: f3:c5:c5:d1:55:88:2b:17:6a:af:ac:1a:aa:3e:72: 71:8e:c7:8d:82:b5:5a:7d:9c:c5:17:61:ca:b7:a4: c3:de:60:fb:58:5d:0d:31:a8:89:0d:8b:c2:38:df: ef:0c:53:e6:f8:fd:6c:ef:71:65:8d:af:b0:18:0b: 0b:ef:21:57:e1:16:62:2a:d0:5f:08:57:cc:21:09: fe:cd:60:c6:2f:60:b5:c5:b5:d6:a3:96:ea:ae:37: 21:3d:76:15:14:9e:0f:4c:03:f3:c7:13:3d:5f:88: 88:50:c9:e1:1f:fb:9b:04:9d:ed:14:4d:19:de:2c: ad:fb:c8:e6:66:d5:e4:3e:6d:47:06:12:45:61:1b: 0e:d2:95:e6:3e:6f:74:5d:88:e9:50:1a:fa:2a:d1: 68:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:2D:EB:46:D3:D8:5E:15:BF:9F:8B:6F:EA:EC:3E:AC:0F:00:C6:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/f3006f6e-eb09-31d8-8265-4a9386256f5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d6:d6:53:68:0a:8a:18:55:ed:76:15:38:71:78:53:66:7f: 36:c8:d6:e4:4c:de:46:aa:83:6c:ae:6b:87:6d:d7:83:ce:ef: c6:48:7a:42:58:cd:43:6f:83:9d:07:b4:53:73:69:5e:c1:f5: 06:66:cc:fd:aa:f0:ee:bb:14:08:ed:55:70:c0:7b:61:d5:0a: d8:c2:d8:89:0b:de:a2:ff:b9:87:0b:f0:8e:db:6e:67:1a:74: 70:d9:6b:e5:56:33:60:f6:92:01:44:eb:b1:9a:4a:f9:3d:e9: c3:c9:0a:ec:fc:27:bd:e7:3b:63:d2:64:1f:31:6a:c5:94:12: 3f:ce:b3:12:a9:e8:05:61:6f:a9:fb:54:f8:90:0f:08:1d:43: 89:97:35:e2:25:59:c7:c7:19:1d:51:e3:33:02:3d:97:52:14: a2:b3:10:bd:45:08:ce:b6:58:8a:6a:cb:9a:08:08:54:03:d4: f7:da:21:50:aa:f2:da:c6:db:23:9b:80:18:fb:81:07:45:8d: a1:b2:90:55:6b:6b:c1:e3:d0:05:9e:46:0f:bb:80:9f:fa:bd: 34:d7:ec:fa:61:e8:5f:e9:e8:4e:ee:5a:ca:47:49:d1:c9:4e: 66:be:ec:b2:d5:37:8c:f6:fd:67:33:01:a9:d7:63:8d:0a:86: 85:bd:95:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiboKnts1pVxoZQ2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMDE0MDA1MVoXDTI1MDQyMDEzMDA1MVowLzEtMCsGA1UEAxMk YzlhNWYzOWUtNjBmYS00MTZjLThmZWYtMDJkMGNmZWJmNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Az4zGmxzz8hvkG2hpv2+49RG4pfDF1qljkI 8cYmdq4tcaqaoLULWj3I1v4JL6Ak9dd//4g/oT9eNZRFqFFjDITkPHEUVsHST8E0 JnQ16nYl9lNtb7WO62MPfxMfeoyOZvUZi41TlQzzxcXRVYgrF2qvrBqqPnJxjseN grVafZzFF2HKt6TD3mD7WF0NMaiJDYvCON/vDFPm+P1s73Flja+wGAsL7yFX4RZi KtBfCFfMIQn+zWDGL2C1xbXWo5bqrjchPXYVFJ4PTAPzxxM9X4iIUMnhH/ubBJ3t FE0Z3iyt+8jmZtXkPm1HBhJFYRsO0pXmPm90XYjpUBr6KtFoMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYt60bT2F4Vv5+Lb+rsPqwPAMZAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZjMwMDZmNmUtZWIwOS0z MWQ4LTgyNjUtNGE5Mzg2MjU2ZjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+2uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnW1lNoCooYVe12FThxeFNmfzbI1uRM3kaqg2yua4dt14PO78ZIekJY zUNvg50HtFNzaV7B9QZmzP2q8O67FAjtVXDAe2HVCtjC2IkL3qL/uYcL8I7bbmca dHDZa+VWM2D2kgFE67GaSvk96cPJCuz8J73nO2PSZB8xasWUEj/OsxKp6AVhb6n7 VPiQDwgdQ4mXNeIlWcfHGR1R4zMCPZdSFKKzEL1FCM62WIpqy5oICFQD1PfaIVCq 8trG2yObgBj7gQdFjaGykFVra8Hj0AWeRg+7gJ/6vTTX7Pph6F/p6E7uWspHSdHJ Tma+7LLVN4z2/WczAanXY40KhoW9la0= -----END CERTIFICATE-----Generated at Sat Apr 5 19:10:56 2025 by rpki-client