$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa File: 96e227a2-d436-397b-82d9-f9ece14a3136.roa (raw, json) Hash identifier: ooQvFbCX+NnTvUlTm1YKJgu2ujNmlth2mOFoJvWlv3A= Subject key identifier: F8:FD:E3:8A:A0:2A:66:1F:09:7B:5E:4E:E4:2B:71:58:E4:ED:74:91 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849D85F7A9D421DC0F6A3E10F80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa Signing time: Wed 14 May 2025 01:00:47 +0000 ROA not before: Wed 14 May 2025 01:00:47 +0000 ROA not after: Tue 12 Aug 2025 01:00:47 +0000 asID: 30058 IP address blocks: 23.237.59.0/24 maxlen: 24 216.227.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d8:5f:7a:9d:42:1d:c0:f6:a3:e1:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 14 01:00:47 2025 GMT Not After : Aug 12 01:00:47 2025 GMT Subject: CN=f2b7373e-b840-487a-acc1-b0a6900d9080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:8f:57:6b:ed:11:79:2c:1b:70:f6:58:36: b8:47:51:11:05:87:7d:69:54:e6:fc:b8:9c:33:c1: 64:8f:f2:70:a5:d0:9c:9c:a0:ac:55:3f:9a:05:9d: c5:bc:68:e2:69:27:da:5e:32:d8:cd:34:45:84:7a: d8:37:12:d1:96:e0:d2:20:e6:9b:f3:ea:7b:a5:56: 8b:7d:1c:fc:2b:96:83:1d:bb:da:56:3d:26:bc:23: 8c:c1:2d:29:d5:66:48:bf:31:d2:3d:7a:5b:9d:ec: e5:c7:c7:5c:21:90:7c:e4:6c:4c:9f:e1:f5:bd:27: 4f:1b:5b:95:b7:d9:ca:78:bd:38:68:fe:1c:91:5c: 93:59:7a:20:a6:f4:57:9f:f5:eb:11:b9:d5:18:5e: 2c:47:0e:59:f6:88:2c:f2:fc:ff:64:25:e2:50:ea: 31:92:bc:6c:c1:15:c9:6f:ca:48:f4:cd:3e:b2:73: 89:da:d4:4d:a6:92:ee:62:6e:30:fb:2a:ab:4f:d7: 01:be:92:9b:d8:80:b7:6c:e1:0c:34:e4:4d:16:33: 15:84:c5:82:a0:89:eb:f3:ce:30:a7:9f:0d:32:5a: b4:3f:6f:ea:7d:b1:e0:e6:a4:e5:27:56:3b:cf:72: 73:9c:91:ef:d3:70:0b:a6:25:62:83:9f:1a:13:b4: 14:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:FD:E3:8A:A0:2A:66:1F:09:7B:5E:4E:E4:2B:71:58:E4:ED:74:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/96e227a2-d436-397b-82d9-f9ece14a3136.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 23.237.59.0/24 216.227.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2e:71:b1:0d:91:3b:5c:a5:39:70:db:b7:cd:d2:53:a1:9c: ef:6d:3e:b1:ee:cc:85:48:7f:c2:f1:d4:f6:a0:1e:10:40:55: d9:a9:0f:6d:80:be:f3:6c:a7:d9:da:96:20:de:63:08:43:37: ce:a0:fd:be:10:2d:02:3c:d5:7e:cf:27:82:fb:b4:92:ef:d5: 75:35:d4:f7:17:c6:a2:d9:9a:71:f0:97:56:0e:75:d1:3d:45: 4c:05:4a:59:9b:84:96:69:a3:90:54:a0:d4:78:15:1b:ed:b1: 9f:9d:36:76:cc:5f:04:e8:47:14:8b:bf:59:00:1b:20:cd:3d: b3:28:ec:fe:97:3b:40:61:f7:b7:21:48:5f:35:64:62:16:b3: 85:76:54:77:c8:7c:73:e9:a8:9d:7e:53:41:b1:7e:66:29:76: 94:53:37:82:32:4b:d8:19:4c:bb:e3:0e:8a:d3:43:dd:50:d8: ab:fd:6a:a5:a5:03:b2:86:e7:57:6f:a8:88:a9:3e:0a:ee:91: 00:8f:7d:77:b9:e2:bc:0a:45:f6:72:ce:d0:3c:42:52:8f:2a: 35:12:42:cb:43:7e:c7:02:10:e3:ed:8a:ff:2a:e2:bb:69:83: d0:04:5a:5a:c4:c7:ce:3d:6d:db:b4:82:ea:be:d9:76:45:13: 35:01:77:33 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnYX3qdQh3A9qPhD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk ZjJiNzM3M2UtYjg0MC00ODdhLWFjYzEtYjBhNjkwMGQ5MDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4uPV2vtEXksG3D2WDa4R1ERBYd9aVTm/Lic M8Fkj/JwpdCcnKCsVT+aBZ3FvGjiaSfaXjLYzTRFhHrYNxLRluDSIOab8+p7pVaL fRz8K5aDHbvaVj0mvCOMwS0p1WZIvzHSPXpbnezlx8dcIZB85GxMn+H1vSdPG1uV t9nKeL04aP4ckVyTWXogpvRXn/XrEbnVGF4sRw5Z9ogs8vz/ZCXiUOoxkrxswRXJ b8pI9M0+snOJ2tRNppLuYm4w+yqrT9cBvpKb2IC3bOEMNORNFjMVhMWCoInr884w p58NMlq0P2/qfbHg5qTlJ1Y7z3JznJHv03ALpiVig58aE7QUfwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPj944qgKmYfCXteTuQrcVjk7XSRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTZlMjI3YTItZDQzNi0z OTdiLTgyZDktZjllY2UxNGEzMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF+07AwQB 2OOwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEUucbENkTtcpTlw27fN0lOhnO9tPrHuzIVIf8Lx1PagHhBA VdmpD22AvvNsp9naliDeYwhDN86g/b4QLQI81X7PJ4L7tJLv1XU11PcXxqLZmnHw l1YOddE9RUwFSlmbhJZpo5BUoNR4FRvtsZ+dNnbMXwToRxSLv1kAGyDNPbMo7P6X O0Bh97chSF81ZGIWs4V2VHfIfHPpqJ1+U0GxfmYpdpRTN4IyS9gZTLvjDorTQ91Q 2Kv9aqWlA7KG51dvqIipPgrukQCPfXe54rwKRfZyztA8QlKPKjUSQstDfscCEOPt iv8q4rtpg9AEWlrEx849bdu0guq+2XZFEzUBdzM= -----END CERTIFICATE-----Generated at Mon Jun 16 03:27:35 2025 by rpki-client