$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa File: 3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa (raw, json) Hash identifier: HWa70Y99tJGUnPS/2J/LMyftsOM/BN777VGH/Un8T8s= Subject key identifier: 9B:66:21:43:D0:81:FD:0F:A7:DA:B5:4D:B2:65:A7:FF:44:B5:40:0E Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858499DBF3A6589FE1255DA1A10C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 174 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3a:65:89:fe:12:55:da:1a:10:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=3bab3b1f-ed5c-414f-aedf-186a1509d544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:19:80:7a:ab:0f:16:5a:b6:2a:eb:1a:f3: 58:2a:32:1c:e2:b8:57:16:03:5b:30:39:b3:b5:6e: 89:91:9a:f2:59:6e:c0:fd:7e:a5:6c:aa:50:44:4f: 8b:53:a0:f7:8f:b5:a9:ef:eb:bf:9b:43:6a:4e:06: f1:08:5a:b6:b8:4c:d4:71:aa:a6:86:d1:c5:8b:92: 04:82:6e:5d:8e:65:91:8f:95:b6:e0:fe:b5:ea:ae: 7a:e6:ee:58:2e:ec:63:4d:7f:dc:4e:b4:f0:69:db: 2a:70:40:73:80:b5:a8:e5:79:41:67:eb:b5:58:19: f7:e4:bf:d3:d3:03:44:a7:50:37:ea:32:e5:b0:e4: 31:10:59:35:ce:fd:a6:ed:24:fa:ee:9f:2f:48:f4: 3d:34:73:a1:f4:f7:3f:66:b6:ad:8b:7d:cf:e0:9f: fd:06:ec:d2:fe:fc:81:cc:27:10:f7:5a:af:2d:a8: 44:9d:3e:f8:d0:40:1b:c9:51:97:fd:c2:5d:aa:e0: 0f:f7:2c:19:b8:bd:34:92:ac:d7:52:1c:06:c6:8c: b0:61:83:a4:e1:3b:fb:fa:1f:1e:b6:79:32:a6:48: 77:56:ba:36:ed:c3:ce:b2:93:60:49:f0:3b:ab:b3: e9:ba:dd:dc:a9:19:b9:be:56:1e:55:7b:99:3a:6e: 7b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:66:21:43:D0:81:FD:0F:A7:DA:B5:4D:B2:65:A7:FF:44:B5:40:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3170fc8b-adb9-3bad-ab6a-8642a6af37ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:11:7a:a0:3f:0d:99:74:b6:97:90:80:86:9d:d7:3f:4b:e1: a8:4c:1b:60:db:2b:a4:94:fb:ff:bb:00:9c:3f:93:b2:6c:a3: fa:30:d6:93:e7:5d:7c:95:06:93:a6:5d:fb:10:88:40:78:7c: 6c:df:ed:8e:61:3a:e1:24:63:bd:96:96:41:8d:ab:19:26:a3: e3:76:af:e8:4e:39:69:52:7f:5b:78:6d:54:45:5d:56:f2:06: 0c:45:d7:12:55:ee:e0:7b:d6:e1:cd:0d:84:74:4b:f4:5b:39: cb:df:6c:9e:46:6a:f2:c9:69:a5:84:da:de:bf:a4:3b:8c:ee: 84:10:25:f8:f0:42:6e:26:48:51:35:c3:b6:8d:31:51:97:b5: a3:a6:6a:59:aa:67:75:0b:41:37:44:2e:12:e5:86:93:24:48: 33:c6:a7:6a:f0:ce:ac:c1:72:27:59:f9:2d:bd:14:a6:51:7b: ed:91:ad:1d:1d:8c:30:11:55:05:99:91:3f:e6:a9:f3:c3:9c: 0e:97:a0:59:0b:91:2d:8c:f8:4e:b0:8d:4d:e9:c4:9b:ff:7c: 88:57:e7:80:91:8c:4a:f1:b9:5d:04:4f:4e:04:04:0a:77:e2: 88:29:a6:9f:36:b2:f9:5b:49:91:82:77:61:22:41:85:84:43: 8c:a6:04:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzplif4SVdoaEMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk M2JhYjNiMWYtZWQ1Yy00MTRmLWFlZGYtMTg2YTE1MDlkNTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMwZgHqrDxZatirrGvNYKjIc4rhXFgNbMDmz tW6JkZryWW7A/X6lbKpQRE+LU6D3j7Wp7+u/m0NqTgbxCFq2uEzUcaqmhtHFi5IE gm5djmWRj5W24P616q565u5YLuxjTX/cTrTwadsqcEBzgLWo5XlBZ+u1WBn35L/T 0wNEp1A36jLlsOQxEFk1zv2m7ST67p8vSPQ9NHOh9Pc/Zrati33P4J/9BuzS/vyB zCcQ91qvLahEnT740EAbyVGX/cJdquAP9ywZuL00kqzXUhwGxoywYYOk4Tv7+h8e tnkypkh3Vro27cPOspNgSfA7q7Pput3cqRm5vlYeVXuZOm576QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJtmIUPQgf0Pp9q1TbJlp/9EtUAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMzE3MGZjOGItYWRiOS0z YmFkLWFiNmEtODY0MmE2YWYzN2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOEReqA/DZl0tpeQgIad1z9L4ahMG2DbK6SU+/+7AJw/k7Jso/ow1pPn XXyVBpOmXfsQiEB4fGzf7Y5hOuEkY72WlkGNqxkmo+N2r+hOOWlSf1t4bVRFXVby BgxF1xJV7uB71uHNDYR0S/RbOcvfbJ5GavLJaaWE2t6/pDuM7oQQJfjwQm4mSFE1 w7aNMVGXtaOmalmqZ3ULQTdELhLlhpMkSDPGp2rwzqzBcidZ+S29FKZRe+2RrR0d jDARVQWZkT/mqfPDnA6XoFkLkS2M+E6wjU3pxJv/fIhX54CRjErxuV0ET04EBAp3 4ogppp82svlbSZGCd2EiQYWEQ4ymBKA= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:28 2025 by rpki-client