$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa File: 1a058e05-5d24-38e1-8868-0e2b4b598073.roa (raw, json) Hash identifier: Cgz/SZuLsWidvDK6ck/U2UTZSo2Wr+bbxGMww5wXtPo= Subject key identifier: 31:41:E4:4B:5B:29:0A:9D:00:F6:3B:A5:F0:9C:3F:02:15:55:C3:C6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849FCAA7B524CAFDA807DDC8DC0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 1239 IP address blocks: 23.237.198.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:7b:52:4c:af:da:80:7d:dc:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=958f24cf-abdf-4668-b6b7-41083209c186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:cf:77:8b:77:ba:43:10:40:08:c0:61:37:25: a4:b4:b5:ee:df:b7:1e:f4:47:18:08:b6:e8:d7:ab: 35:73:67:a7:1b:1d:26:b9:01:8c:60:80:a3:6f:a5: 23:69:f8:d3:57:fe:6a:75:82:61:c2:79:69:0f:75: b1:d2:d0:ca:32:bc:ee:65:5c:18:8d:c7:10:33:5f: a2:f6:ae:f7:a9:bb:1a:ed:a5:72:8a:be:86:f9:3f: 26:75:35:de:15:f3:d8:d3:0f:b3:bd:db:e7:e9:a2: d6:da:d4:bc:2e:5a:32:f2:27:3f:fc:68:3c:d7:4d: 28:09:b5:c5:2a:25:ba:5f:e6:5f:86:d1:f1:1e:78: 13:cb:ea:62:a0:c8:0b:40:44:e3:fa:d6:a7:f0:d3: 48:9e:bb:21:48:ce:3a:aa:71:01:f8:34:5b:c5:ba: ad:cc:cc:a2:c4:59:f3:b8:9b:6e:a7:23:4d:ec:ef: dc:5b:dd:7f:76:2e:8f:b3:b1:a9:4a:2e:ad:b0:15: 34:a3:2a:bf:de:b8:c9:8c:87:e0:5a:33:15:45:43: 7d:08:1c:63:76:b2:49:cf:5e:9e:e4:4e:53:20:df: 35:eb:d0:e6:85:ff:7c:15:af:d2:81:6e:36:dd:0f: b1:3e:cf:79:25:52:e2:d6:97:36:00:4b:be:4d:a8: b2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:41:E4:4B:5B:29:0A:9D:00:F6:3B:A5:F0:9C:3F:02:15:55:C3:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1a058e05-5d24-38e1-8868-0e2b4b598073.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.198.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:c1:04:4c:ed:66:9c:1c:71:65:5f:ff:71:04:bf:7b:2d:ff: e2:c7:59:96:50:41:ed:d8:df:f7:4f:3b:a3:6e:8d:8b:82:ad: 91:a0:67:8d:8b:e2:06:9a:d0:82:38:04:4e:f6:20:12:90:08: 27:30:90:64:ea:a3:4e:d7:c4:d4:94:1c:07:5d:88:77:a2:60: bb:b1:11:80:9d:62:db:c1:35:cf:5b:32:b5:06:d5:ba:f1:a4: 9b:8f:23:6b:b7:b9:5c:06:2d:26:4e:4b:a3:a0:59:a6:88:8f: 08:aa:41:f7:7f:6d:1f:05:c5:6f:bd:31:62:e8:74:1a:98:a4: e8:ac:90:70:80:75:54:d4:91:03:f6:48:0d:b5:c6:49:66:12: 98:6a:66:f9:91:e2:d9:de:8d:a1:cd:b0:b5:37:c5:6f:eb:bd: 54:d0:30:ff:af:ff:dd:7d:d0:4c:97:8f:6a:65:52:fc:be:8e: df:07:19:5f:d3:f3:8e:f7:db:f2:15:bc:0b:b2:89:15:cc:38: 02:94:f6:25:69:e4:24:bb:0b:39:8f:f3:e7:f5:97:d9:a9:1a: 7d:76:46:4e:19:02:8f:73:5d:18:fd:c6:7d:7c:66:7b:1f:2b: af:16:a4:68:84:dc:0b:33:df:b5:62:da:f6:91:28:82:57:bb: ff:29:d4:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qntSTK/agH3cjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk OTU4ZjI0Y2YtYWJkZi00NjY4LWI2YjctNDEwODMyMDljMTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws93i3e6QxBACMBhNyWktLXu37ce9EcYCLbo 16s1c2enGx0muQGMYICjb6UjafjTV/5qdYJhwnlpD3Wx0tDKMrzuZVwYjccQM1+i 9q73qbsa7aVyir6G+T8mdTXeFfPY0w+zvdvn6aLW2tS8Lloy8ic//Gg8100oCbXF KiW6X+ZfhtHxHngTy+pioMgLQETj+tan8NNInrshSM46qnEB+DRbxbqtzMyixFnz uJtupyNN7O/cW91/di6Ps7GpSi6tsBU0oyq/3rjJjIfgWjMVRUN9CBxjdrJJz16e 5E5TIN8169Dmhf98Fa/SgW423Q+xPs95JVLi1pc2AEu+TaiyewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDFB5EtbKQqdAPY7pfCcPwIVVcPGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWEwNThlMDUtNWQyNC0z OGUxLTg4NjgtMGUyYjRiNTk4MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+3GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTBBEztZpwccWVf/3EEv3st/+LHWZZQQe3Y3/dPO6NujYuCrZGgZ42L 4gaa0II4BE72IBKQCCcwkGTqo07XxNSUHAddiHeiYLuxEYCdYtvBNc9bMrUG1brx pJuPI2u3uVwGLSZOS6OgWaaIjwiqQfd/bR8FxW+9MWLodBqYpOiskHCAdVTUkQP2 SA21xklmEphqZvmR4tnejaHNsLU3xW/rvVTQMP+v/9190EyXj2plUvy+jt8HGV/T 84732/IVvAuyiRXMOAKU9iVp5CS7CzmP8+f1l9mpGn12Rk4ZAo9zXRj9xn18Znsf K68WpGiE3Asz37Vi2vaRKIJXu/8p1Ck= -----END CERTIFICATE-----Generated at Sun Jun 15 17:21:59 2025 by rpki-client