$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa File: b1b96800-888f-3087-b255-7df30b1557be.roa (raw, json) Hash identifier: guSblXwZTBCqHVLV9MdEcuwtEV58F2UWa+47UlTYT2c= Subject key identifier: C5:E9:7E:37:FB:80:06:4F:98:8C:3C:A9:5B:3F:77:0D:30:AC:84:51 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858490F7BF06A603E7F7D4D7A5A70 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 30058 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:f0:6a:60:3e:7f:7d:4d:7a:5a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=e872f2a6-90a4-45b7-b4b8-f634474d6397 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:26:8e:ac:da:0f:a2:d2:b7:fb:f5:9b:15: e8:18:73:04:a0:1b:c1:ce:f6:99:9b:dd:fe:d2:3e: 3a:90:98:44:ef:15:af:11:9b:f8:d1:b5:42:a4:db: 7d:44:5d:a8:80:8e:4d:59:e0:96:35:19:01:46:8f: 1f:68:4a:28:6a:b7:d0:32:4a:79:98:39:a5:55:a4: 0b:2f:68:e4:4a:8a:a2:c0:72:60:e6:6e:95:87:cd: fb:75:ca:3b:c0:db:f3:85:72:42:ad:18:d0:2d:47: d6:5b:19:30:99:ac:76:ae:db:df:4b:ba:d2:56:3b: 6a:c3:0d:f3:a6:e6:65:21:f8:59:79:b7:ad:8f:f1: 83:c5:4a:07:9f:f9:d2:15:77:22:aa:f0:1a:f0:b7: 53:6b:ad:30:34:bc:16:8d:3b:61:78:45:14:1d:0c: cf:1c:6a:6d:e2:eb:5b:dc:b9:96:87:81:3a:03:11: 71:9b:79:76:44:68:03:9f:d0:de:ba:d8:e3:2a:12: 18:f4:83:b6:de:ca:25:7f:1a:7b:5b:f6:11:26:88: 02:94:e2:82:63:a2:67:de:cb:ca:38:c0:99:48:11: 34:9c:d4:8a:94:88:1f:13:a1:16:c7:3c:31:19:e0: e8:59:d8:4a:1f:9e:fc:6f:b3:ff:a6:c5:0f:b1:2c: cc:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:E9:7E:37:FB:80:06:4F:98:8C:3C:A9:5B:3F:77:0D:30:AC:84:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:d5:3d:37:f3:32:06:c9:c3:ec:77:c8:89:f5:f6:40:fb:05: 1a:36:bd:7a:4e:df:ae:11:7e:4d:66:2a:34:b6:cb:ab:39:0d: 05:90:25:0f:b8:d8:12:56:ad:4c:94:8f:14:26:94:94:08:d0: 95:b3:e5:94:c9:90:bc:08:c4:1a:59:a3:77:e4:6c:fa:bd:12: 58:a5:d1:c8:a8:33:95:d6:ed:2f:29:1a:4e:f4:8e:c8:2d:3f: 5d:df:b4:ba:ee:d3:55:ae:ea:f4:7b:5d:0c:68:d0:c2:90:35: cf:aa:0c:3c:6d:7a:1a:f8:cb:99:d7:4e:85:e5:fd:e2:ce:97: 55:4c:42:be:67:ab:e9:94:57:fc:4d:29:0d:34:60:ff:0e:2a: 7d:1f:80:15:5d:19:6c:fa:ac:a8:77:31:81:ec:28:09:a9:1a: 6a:32:f7:3f:c8:e6:06:49:ad:31:15:03:7d:89:cd:3c:90:e7: 71:56:09:42:c6:62:1f:30:f7:18:3c:14:d4:b2:4d:b6:48:8c: 3b:f0:a4:11:63:ad:27:77:13:03:38:d1:2c:92:cc:d9:30:ca: 6f:ed:5d:b3:01:28:c5:5d:84:26:bd:25:44:d2:0b:49:1f:b2: a4:f1:f1:d1:96:f3:b2:aa:74:3c:3b:f2:e9:60:3a:24:df:6b: c3:4e:9e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe/BqYD5/fU16WnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk ZTg3MmYyYTYtOTBhNC00NWI3LWI0YjgtZjYzNDQ3NGQ2Mzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqX0mjqzaD6LSt/v1mxXoGHMEoBvBzvaZm93+ 0j46kJhE7xWvEZv40bVCpNt9RF2ogI5NWeCWNRkBRo8faEooarfQMkp5mDmlVaQL L2jkSoqiwHJg5m6Vh837dco7wNvzhXJCrRjQLUfWWxkwmax2rtvfS7rSVjtqww3z puZlIfhZebetj/GDxUoHn/nSFXciqvAa8LdTa60wNLwWjTtheEUUHQzPHGpt4utb 3LmWh4E6AxFxm3l2RGgDn9DeutjjKhIY9IO23solfxp7W/YRJogClOKCY6Jn3svK OMCZSBE0nNSKlIgfE6EWxzwxGeDoWdhKH578b7P/psUPsSzM3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMXpfjf7gAZPmIw8qVs/dw0wrIRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjFiOTY4MDAtODg4Zi0z MDg3LWIyNTUtN2RmMzBiMTU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAALVPTfzMgbJw+x3yIn19kD7BRo2vXpO364Rfk1mKjS2y6s5DQWQJQ+4 2BJWrUyUjxQmlJQI0JWz5ZTJkLwIxBpZo3fkbPq9Elil0cioM5XW7S8pGk70jsgt P13ftLru01Wu6vR7XQxo0MKQNc+qDDxtehr4y5nXToXl/eLOl1VMQr5nq+mUV/xN KQ00YP8OKn0fgBVdGWz6rKh3MYHsKAmpGmoy9z/I5gZJrTEVA32JzTyQ53FWCULG Yh8w9xg8FNSyTbZIjDvwpBFjrSd3EwM40SySzNkwym/tXbMBKMVdhCa9JUTSC0kf sqTx8dGW87KqdDw78ulgOiTfa8NOnjg= -----END CERTIFICATE-----Generated at Sun Apr 27 04:11:03 2025 by rpki-client