$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa File: 09a05594-2aa3-3548-8e60-1c580a66bcd7.roa (raw, json) Hash identifier: ziDw7TTKV0xIF9KETmCbVLcnGQWDBMBBa78f9t2wdfs= Subject key identifier: 7A:E0:AD:91:12:07:1D:7A:64:04:5C:FE:56:E2:6B:7C:D5:39:68:92 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858494CC9496EDA968F967A32C240 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa Signing time: Tue 25 Mar 2025 01:00:40 +0000 ROA not before: Tue 25 Mar 2025 01:00:40 +0000 ROA not after: Mon 23 Jun 2025 01:00:40 +0000 asID: 1299 IP address blocks: 67.159.24.0/23 maxlen: 23 67.159.28.0/24 maxlen: 24 67.159.29.0/24 maxlen: 24 2001:49f0:d11a::/48 maxlen: 48 2001:49f0:d124::/48 maxlen: 48 2001:49f0:d125::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4c:c9:49:6e:da:96:8f:96:7a:32:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 25 01:00:40 2025 GMT Not After : Jun 23 01:00:40 2025 GMT Subject: CN=87f27571-a3df-4570-b0ec-549d266f0285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c8:d6:c9:1e:7b:11:25:9d:87:05:ed:b1:c2: a6:b8:c8:66:c8:e2:04:aa:be:34:b0:92:b0:d6:7d: 50:10:bf:d2:90:2d:11:39:25:1d:07:25:17:a8:cb: b9:c3:a2:89:44:3a:9c:fb:a2:7b:7f:11:46:85:64: 7a:fb:9f:cc:83:c5:8c:47:23:24:86:2c:a0:64:6b: 9a:d3:b6:90:13:51:0a:da:c9:8c:45:d2:20:3d:ac: 49:bc:1f:da:85:bd:55:cb:26:c2:2e:d1:1c:63:14: bc:e7:52:39:0b:46:a9:86:99:1b:bc:96:d6:d6:d4: 9e:2c:08:e1:3c:4f:9d:4a:ee:25:62:3d:cf:1f:42: 24:ab:f1:4b:98:5b:26:53:34:23:93:b7:4f:fa:a4: d0:24:49:47:c3:cd:51:3c:22:28:5c:9a:ff:0c:db: 96:90:0c:c3:2d:c6:0a:df:2d:ad:fc:ba:49:ee:7f: ea:9e:43:16:9e:02:79:3f:11:b4:5b:fe:fd:5f:a5: c1:22:39:76:9f:69:59:16:2e:69:22:7d:4b:94:cc: 98:4e:de:12:85:dd:e1:02:ab:59:71:32:b3:d4:a1: 94:3e:c4:c6:45:ca:e2:3c:7f:d8:c0:06:19:06:56: 52:bd:31:83:8d:85:f5:25:5e:9c:8a:4e:98:61:7d: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:E0:AD:91:12:07:1D:7A:64:04:5C:FE:56:E2:6B:7C:D5:39:68:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/09a05594-2aa3-3548-8e60-1c580a66bcd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.24.0/23 67.159.28.0/23 IPv6: 2001:49f0:d11a::/48 2001:49f0:d124::/47 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:55:35:02:fb:f6:a1:80:7e:77:e0:d1:dd:a2:ee:25:97:ed: b2:94:3d:c4:05:c4:ff:3c:df:13:af:22:0b:30:6a:63:7e:f9: 3a:c2:81:40:5b:dd:5d:f1:be:fc:0d:3a:fe:9a:74:09:55:a1: 8f:63:27:4a:2b:39:53:2f:11:84:8b:b2:31:13:b9:05:6c:a1: 1f:07:b1:43:34:2e:0b:4a:ae:ba:43:fd:b3:bc:96:d1:5e:4d: 8e:5a:ab:bc:b9:07:be:b7:22:bf:ff:37:bc:93:8b:d3:dd:92: e3:cb:c3:21:46:53:39:84:73:cf:03:85:75:69:63:f3:06:cc: 78:5c:81:67:8b:3e:5a:a3:c2:6a:39:17:ff:53:ca:a0:b7:86: 2d:a2:d4:51:73:2e:51:68:0d:0c:67:92:3c:c3:49:71:97:b6: 22:dc:3d:28:dc:cf:af:d3:1b:f8:0d:23:76:e2:38:1f:52:f4: cc:ae:d8:00:b1:05:0f:47:da:ae:f9:58:48:f3:fe:91:f8:62: e5:3b:7b:67:fa:5c:21:66:84:3f:ee:f1:3b:c0:ea:3e:4b:4e: c6:5a:66:8a:1d:1f:8d:8d:52:10:2e:dc:dd:b9:20:62:91:2e: d1:fa:c4:c3:c4:f6:c4:ba:d0:d8:0d:65:7e:da:69:be:aa:34: c2:5c:cd:16 -----BEGIN CERTIFICATE----- MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWElMyUlu2paPlnoywkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMyNTAxMDA0MFoXDTI1MDYyMzAxMDA0MFowLzEtMCsGA1UEAxMk ODdmMjc1NzEtYTNkZi00NTcwLWIwZWMtNTQ5ZDI2NmYwMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMjWyR57ESWdhwXtscKmuMhmyOIEqr40sJKw 1n1QEL/SkC0ROSUdByUXqMu5w6KJRDqc+6J7fxFGhWR6+5/Mg8WMRyMkhiygZGua 07aQE1EK2smMRdIgPaxJvB/ahb1VyybCLtEcYxS851I5C0aphpkbvJbW1tSeLAjh PE+dSu4lYj3PH0Ikq/FLmFsmUzQjk7dP+qTQJElHw81RPCIoXJr/DNuWkAzDLcYK 3y2t/LpJ7n/qnkMWngJ5PxG0W/79X6XBIjl2n2lZFi5pIn1LlMyYTt4Shd3hAqtZ cTKz1KGUPsTGRcriPH/YwAYZBlZSvTGDjYX1JV6cik6YYX0RGQIDAQABo4IDdTCC A3EwHQYDVR0OBBYEFHrgrZESBx16ZARc/lbia3zVOWiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMDlhMDU1OTQtMmFhMy0z NTQ4LThlNjAtMWM1ODBhNjZiY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQ58YAwQB Q58cMBgEAgACMBIDBwAgAUnw0RoDBwEgAUnw0SQwVAYDVR0gAQH/BEowSDBGBggr BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAQlU1Avv2oYB+ d+DR3aLuJZftspQ9xAXE/zzfE68iCzBqY375OsKBQFvdXfG+/A06/pp0CVWhj2Mn Sis5Uy8RhIuyMRO5BWyhHwexQzQuC0quukP9s7yW0V5NjlqrvLkHvrciv/83vJOL 092S48vDIUZTOYRzzwOFdWlj8wbMeFyBZ4s+WqPCajkX/1PKoLeGLaLUUXMuUWgN DGeSPMNJcZe2Itw9KNzPr9Mb+A0jduI4H1L0zK7YALEFD0farvlYSPP+kfhi5Tt7 Z/pcIWaEP+7xO8DqPktOxlpmih0fjY1SEC7c3bkgYpEu0frEw8T2xLrQ2A1lftpp vqo0wlzNFg== -----END CERTIFICATE-----Generated at Sat Apr 26 19:13:01 2025 by rpki-client