$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa File: b358fd28-78e4-32fd-8779-c6ee2c15a485.roa (raw, json) Hash identifier: TP6DmRYEmPqfrXWk0/YXc15CoNB7sYcfjA8XJjjWJb4= Subject key identifier: 09:9C:90:3E:A7:99:45:51:35:9F:35:AA:03:3E:E5:60:98:49:B4:50 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858499DBF3AB4ADBCC56C2ECC1080 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 1239 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3a:b4:ad:bc:c5:6c:2e:cc:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=905ba041-e74f-4540-a59f-9472bd172743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f3:23:2c:df:68:90:29:48:ea:b3:ee:64:7a: bb:46:6e:95:ef:18:1b:ef:0d:ac:18:9b:60:fa:d8: fb:44:5d:2a:cb:33:5d:36:2e:c0:76:c8:f8:f4:26: d3:46:f2:77:41:d3:19:3d:1d:5e:5d:da:8b:7f:63: 84:97:f5:01:0e:d7:4e:64:04:c7:84:f9:b1:fa:ed: 97:a5:8b:a7:22:eb:94:57:94:ee:9c:72:a8:04:57: 42:9e:4f:41:4d:2c:69:31:79:93:ac:59:ee:17:3e: 58:a2:2e:6c:28:c6:45:09:da:5f:57:1a:2f:dd:3a: 10:57:36:2c:06:5f:1f:d9:29:88:1b:21:9c:f3:1e: aa:f0:45:68:9f:e6:df:4f:7f:33:ae:07:8b:ec:2c: d0:c2:fb:a3:e3:cc:a0:9c:a7:48:80:25:01:41:0e: 9c:f6:2a:72:c8:10:fb:9d:33:1f:9b:cc:f4:99:5e: fa:3c:74:f4:48:16:8f:1a:3b:82:63:12:76:c3:e2: a4:49:ef:0f:91:cd:ab:8c:fd:d4:d0:a2:f9:fa:bf: 95:55:8f:73:20:d1:6e:95:d5:59:96:08:fd:c2:1f: 75:a4:49:b6:ca:79:ce:a1:f6:4f:6f:28:6b:0e:1f: 5d:fa:9c:5a:2e:b7:22:9a:61:6c:f0:dd:cb:24:89: 9d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:9C:90:3E:A7:99:45:51:35:9F:35:AA:03:3E:E5:60:98:49:B4:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:de:41:85:0b:20:ae:19:55:13:29:e6:ee:ce:75:45:4c:e3: 46:0a:22:e2:38:ec:5c:aa:86:9b:b1:d1:14:3f:06:9b:f6:43: f0:95:af:60:32:f7:07:83:13:fe:df:f4:85:2e:05:97:97:98: 63:5a:b0:cd:84:bb:53:5e:9b:11:3e:68:83:62:0c:2b:b2:b0: e7:e2:3d:d0:dd:23:68:bd:50:14:54:e3:a8:d1:09:a5:f4:de: d5:73:8e:8c:32:f3:76:ab:88:fe:65:54:05:4f:46:83:0e:fa: 4d:de:7f:6d:44:5c:bb:a1:9c:c3:a2:1b:9f:27:2a:67:b0:57: a2:6d:2f:ba:23:57:5f:e0:43:7b:c8:e3:14:a4:b6:ee:78:3f: 9b:ef:fd:4b:7a:26:6a:3b:e2:79:57:01:28:6e:a3:09:95:8d: 4e:71:04:a1:81:b8:b1:01:ed:33:da:38:d3:10:29:f5:38:a3: bf:ae:40:8a:f3:f3:28:51:66:ad:92:92:a6:92:89:bb:a4:1e: c7:57:6b:f7:95:b4:81:2a:0e:09:73:9a:29:50:86:56:66:59: fc:dd:e1:a0:9d:37:36:b3:c4:6f:c1:b2:56:46:5d:29:3f:04: 13:e2:91:81:a9:d7:4c:23:41:82:8f:d3:8f:69:cb:8e:14:f0: ee:3e:fe:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzq0rbzFbC7MEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk OTA1YmEwNDEtZTc0Zi00NTQwLWE1OWYtOTQ3MmJkMTcyNzQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvMjLN9okClI6rPuZHq7Rm6V7xgb7w2sGJtg +tj7RF0qyzNdNi7Adsj49CbTRvJ3QdMZPR1eXdqLf2OEl/UBDtdOZATHhPmx+u2X pYunIuuUV5TunHKoBFdCnk9BTSxpMXmTrFnuFz5Yoi5sKMZFCdpfVxov3ToQVzYs Bl8f2SmIGyGc8x6q8EVon+bfT38zrgeL7CzQwvuj48ygnKdIgCUBQQ6c9ipyyBD7 nTMfm8z0mV76PHT0SBaPGjuCYxJ2w+KkSe8Pkc2rjP3U0KL5+r+VVY9zINFuldVZ lgj9wh91pEm2ynnOofZPbyhrDh9d+pxaLrcimmFs8N3LJImd7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmckD6nmUVRNZ81qgM+5WCYSbRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjM1OGZkMjgtNzhlNC0z MmZkLTg3NzktYzZlZTJjMTVhNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIveQYULIK4ZVRMp5u7OdUVM40YKIuI47Fyqhpux0RQ/Bpv2Q/CVr2Ay 9weDE/7f9IUuBZeXmGNasM2Eu1NemxE+aINiDCuysOfiPdDdI2i9UBRU46jRCaX0 3tVzjowy83ariP5lVAVPRoMO+k3ef21EXLuhnMOiG58nKmewV6JtL7ojV1/gQ3vI 4xSktu54P5vv/Ut6Jmo74nlXAShuowmVjU5xBKGBuLEB7TPaONMQKfU4o7+uQIrz 8yhRZq2SkqaSibukHsdXa/eVtIEqDglzmilQhlZmWfzd4aCdNzazxG/BslZGXSk/ BBPikYGp10wjQYKP049py44U8O4+/k4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:14:43 2025 by rpki-client