$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa File: 1e9a1734-b5da-39df-a786-befd67f76d5c.roa (raw, json) Hash identifier: VG8xNCiRxjs+2Xohrw92EBKYcgbAjpeRzTl6FWAhl18= Subject key identifier: 44:31:AF:9F:45:ED:FE:CD:4C:FD:DD:79:14:BC:F9:23:44:74:51:D2 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849806F1534A580F54BFEFEE100 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 174 IP address blocks: 67.159.31.0/24 maxlen: 24 67.159.63.0/24 maxlen: 24 2001:49f0:d119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:15:34:a5:80:f5:4b:fe:fe:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=e670d87b-e74c-4948-bfe0-18ce76561298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ba:c3:d8:0a:fb:b1:ed:bc:31:43:17:64:62: e0:cc:05:a0:64:e6:6d:40:64:e0:59:d3:d4:8a:04: 08:a2:a0:80:e7:30:64:03:31:19:df:65:92:96:23: 2f:80:60:43:3f:23:7c:ef:a6:58:88:63:7a:63:d9: 05:84:b1:20:21:89:ff:aa:0a:8b:87:0c:bd:5b:f1: 68:73:e0:50:3b:ec:f7:2d:c8:8b:64:4d:c9:03:33: f7:24:12:e3:6f:43:31:38:f5:48:2e:d6:97:96:bc: 42:fd:cd:6d:2c:48:52:da:8d:4b:c2:34:f0:5c:9b: 60:63:7c:f8:9b:b2:f7:c3:be:99:12:a3:f1:9a:af: ee:27:51:d8:a5:37:27:ad:50:64:cf:b6:fb:cb:8c: 01:98:df:51:c5:c7:b1:a6:60:92:50:5f:ad:c2:0d: 3a:c0:7a:11:a3:da:8d:3b:de:48:67:e7:94:a8:55: d3:36:d6:8b:bc:55:1d:f9:b6:8a:ee:83:e3:a1:a2: e4:e4:b1:45:23:aa:6f:ba:5d:d2:5a:56:c3:9f:dd: d7:24:e1:c2:5e:9b:7e:eb:5a:f1:b8:e4:bc:e8:64: 52:87:09:89:06:bd:c6:3d:db:87:4f:01:ee:61:ce: 68:e4:b6:bd:82:2b:12:30:06:e9:46:d3:dc:fa:ec: b8:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:31:AF:9F:45:ED:FE:CD:4C:FD:DD:79:14:BC:F9:23:44:74:51:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.31.0/24 67.159.63.0/24 IPv6: 2001:49f0:d119::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c9:57:3c:5e:94:ca:ca:ca:7b:7c:c1:e2:12:a8:19:d8:2a: 99:cf:ff:0c:d0:d9:9b:e8:1c:89:9e:58:67:b0:f7:cf:37:d4: 3d:bd:a5:a0:1b:81:75:98:84:97:47:7f:f2:c3:1c:80:76:ae: 04:52:18:c5:f3:a4:36:a5:8d:ac:7c:bf:7c:5c:84:d6:33:af: 2b:7b:4a:b5:ec:15:98:ee:dc:9d:a6:0d:a4:48:a1:10:07:c4: 99:97:0f:2d:4b:ff:b7:95:1c:0c:5e:07:3a:0d:74:c1:63:ff: 53:a0:65:22:58:0c:e2:e4:e6:fa:9e:2e:b6:2d:62:6c:8c:5f: 90:75:0f:92:9f:01:b4:44:62:92:b8:3a:b6:7d:68:7b:f2:10: 21:bb:cd:be:66:02:72:34:74:ac:fe:64:7a:60:1d:0d:c1:73: dd:d8:6d:04:16:84:5d:d9:91:f1:ab:45:25:d2:c8:a0:b5:d8: 08:b8:02:24:3c:c5:5e:d6:2b:b4:37:8d:c5:99:55:53:29:48: fb:2b:2e:f7:bb:e8:4e:fc:33:43:7e:e5:4f:9e:36:16:8b:9a: bd:76:3d:ff:92:51:02:66:d5:aa:b5:83:71:6b:52:c5:0f:fb: 93:d6:0d:89:91:89:9f:d8:11:f2:aa:dc:9a:9d:1c:f8:52:b3: 0b:f7:4b:9b -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEmAbxU0pYD1S/7+4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZTY3MGQ4N2ItZTc0Yy00OTQ4LWJmZTAtMThjZTc2NTYxMjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7rD2Ar7se28MUMXZGLgzAWgZOZtQGTgWdPU igQIoqCA5zBkAzEZ32WSliMvgGBDPyN876ZYiGN6Y9kFhLEgIYn/qgqLhwy9W/Fo c+BQO+z3LciLZE3JAzP3JBLjb0MxOPVILtaXlrxC/c1tLEhS2o1LwjTwXJtgY3z4 m7L3w76ZEqPxmq/uJ1HYpTcnrVBkz7b7y4wBmN9RxcexpmCSUF+twg06wHoRo9qN O95IZ+eUqFXTNtaLvFUd+baK7oPjoaLk5LFFI6pvul3SWlbDn93XJOHCXpt+61rx uOS86GRShwmJBr3GPduHTwHuYc5o5La9gisSMAbpRtPc+uy4fQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFEQxr59F7f7NTP3deRS8+SNEdFHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWU5YTE3MzQtYjVkYS0z OWRmLWE3ODYtYmVmZDY3Zjc2ZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQ58fAwQA Q58/MA8EAgACMAkDBwAgAUnw0RkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlMlXPF6UysrKe3zB4hKoGdgq mc//DNDZm+gciZ5YZ7D3zzfUPb2loBuBdZiEl0d/8sMcgHauBFIYxfOkNqWNrHy/ fFyE1jOvK3tKtewVmO7cnaYNpEihEAfEmZcPLUv/t5UcDF4HOg10wWP/U6BlIlgM 4uTm+p4uti1ibIxfkHUPkp8BtERikrg6tn1oe/IQIbvNvmYCcjR0rP5kemAdDcFz 3dhtBBaEXdmR8atFJdLIoLXYCLgCJDzFXtYrtDeNxZlVUylI+ysu97voTvwzQ37l T542FouavXY9/5JRAmbVqrWDcWtSxQ/7k9YNiZGJn9gR8qrcmp0c+FKzC/dLmw== -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:42 2025 by rpki-client