$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa File: dab1331a-4269-3d35-9330-184ddf84b5d0.roa (raw, json) Hash identifier: ozcMkme624g3yWKwTASCCdbblXmh6UAl4oEN2+yoWe8= Subject key identifier: D8:56:FC:95:65:31:4D:6E:9C:7A:15:1C:19:AB:F9:FA:A1:D9:A7:A6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858499DBF3B2FB96112A9B28DEA20 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa Signing time: Wed 23 Apr 2025 01:00:46 +0000 ROA not before: Wed 23 Apr 2025 01:00:46 +0000 ROA not after: Tue 22 Jul 2025 01:00:46 +0000 asID: 30058 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9d:bf:3b:2f:b9:61:12:a9:b2:8d:ea:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 23 01:00:46 2025 GMT Not After : Jul 22 01:00:46 2025 GMT Subject: CN=b8b181bb-1ac8-412e-a63f-dccbdece6bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e0:f1:15:18:92:50:8d:2f:a3:9f:51:8f:e9: bb:62:32:dd:e8:d1:bb:c2:7a:5a:e5:f4:fc:e4:b1: 14:67:5f:48:3b:f3:ca:1e:3f:63:e5:8a:02:81:bf: 7f:83:64:58:e6:87:88:48:ff:2e:4b:27:7c:ce:da: fc:2d:be:3a:be:88:c6:52:48:52:97:4d:75:ee:77: dc:7d:62:50:62:8b:23:ad:e1:9c:9c:fd:4c:75:63: 25:53:ec:95:91:22:58:9e:a5:ba:80:2d:17:7b:73: bd:37:4a:3c:a7:80:05:3c:40:24:d4:31:ae:85:34: 4f:14:b3:24:2c:5a:bd:36:a3:d2:44:0a:c6:c4:32: e1:7b:5f:9f:3e:e3:33:2a:49:cb:0a:1b:3c:c7:64: 64:07:c3:a9:f0:a7:37:eb:86:c4:b6:ac:68:de:19: a4:11:c2:86:4e:b2:3f:e4:4a:cc:83:30:34:e6:33: 64:b9:99:b1:c3:20:b6:e0:71:44:1f:d0:b7:f8:26: 11:f9:04:96:b4:8f:b6:74:f1:42:c5:42:f1:81:c2: 64:23:43:3c:df:e9:31:84:cf:30:f3:73:3f:44:50: 60:c0:a8:af:56:6c:07:22:1b:a3:8d:45:f8:44:7b: ec:92:0c:b8:a5:3d:38:f3:da:ee:c6:f9:85:58:bb: b2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:56:FC:95:65:31:4D:6E:9C:7A:15:1C:19:AB:F9:FA:A1:D9:A7:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/dab1331a-4269-3d35-9330-184ddf84b5d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:11:50:1e:61:d3:ec:cf:15:0b:1f:ea:9c:1d:aa:38:79:55: fe:e9:22:2f:b5:50:33:d6:1d:9f:2a:28:df:02:87:a3:2e:ba: d1:09:ac:63:9b:36:e0:62:0b:05:59:63:05:2a:4d:e4:22:c6: 50:78:9c:81:c7:f7:fb:43:04:04:46:6d:68:b8:40:ff:79:cc: c6:83:30:ac:ff:cf:f6:74:67:05:b2:fb:e5:33:2d:c5:6e:f8: d4:8d:df:f5:94:3a:a3:7b:81:19:34:46:69:32:38:ce:6b:b1: 09:87:60:82:94:cb:ff:52:f3:37:eb:4f:53:7a:3f:64:32:8d: 35:9d:e2:ef:1e:63:de:29:77:f3:09:a7:9a:0d:c7:08:c7:1d: 6c:9e:9f:ca:77:68:2a:c9:59:61:02:03:49:54:3f:07:e8:b9: 25:02:56:39:3a:c7:14:00:4a:13:d9:f2:61:33:d7:68:fb:df: dc:cf:f6:5e:49:22:bc:f7:8a:d4:8c:81:e9:18:86:68:6d:60: 07:c2:93:0a:43:af:d2:67:f8:04:b5:1b:49:c9:a4:e9:59:b5: 44:ba:18:d0:8a:79:02:82:d6:8a:2d:55:26:1f:41:db:10:2b: f5:7a:8e:22:9e:32:4e:ff:89:95:4e:40:20:05:b8:30:bf:e6: 13:30:60:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmdvzsvuWESqbKN6iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQyMzAxMDA0NloXDTI1MDcyMjAxMDA0NlowLzEtMCsGA1UEAxMk YjhiMTgxYmItMWFjOC00MTJlLWE2M2YtZGNjYmRlY2U2YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+DxFRiSUI0vo59Rj+m7YjLd6NG7wnpa5fT8 5LEUZ19IO/PKHj9j5YoCgb9/g2RY5oeISP8uSyd8ztr8Lb46vojGUkhSl0117nfc fWJQYosjreGcnP1MdWMlU+yVkSJYnqW6gC0Xe3O9N0o8p4AFPEAk1DGuhTRPFLMk LFq9NqPSRArGxDLhe1+fPuMzKknLChs8x2RkB8Op8Kc364bEtqxo3hmkEcKGTrI/ 5ErMgzA05jNkuZmxwyC24HFEH9C3+CYR+QSWtI+2dPFCxULxgcJkI0M83+kxhM8w 83M/RFBgwKivVmwHIhujjUX4RHvskgy4pT0489ruxvmFWLuyJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNhW/JVlMU1unHoVHBmr+fqh2aemMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZGFiMTMzMWEtNDI2OS0z ZDM1LTkzMzAtMTg0ZGRmODRiNWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAsRUB5h0+zPFQsf6pwdqjh5Vf7pIi+1UDPWHZ8qKN8Ch6MuutEJrGOb NuBiCwVZYwUqTeQixlB4nIHH9/tDBARGbWi4QP95zMaDMKz/z/Z0ZwWy++UzLcVu +NSN3/WUOqN7gRk0RmkyOM5rsQmHYIKUy/9S8zfrT1N6P2QyjTWd4u8eY94pd/MJ p5oNxwjHHWyen8p3aCrJWWECA0lUPwfouSUCVjk6xxQAShPZ8mEz12j739zP9l5J Irz3itSMgekYhmhtYAfCkwpDr9Jn+AS1G0nJpOlZtUS6GNCKeQKC1ootVSYfQdsQ K/V6jiKeMk7/iZVOQCAFuDC/5hMwYDw= -----END CERTIFICATE-----Generated at Sun Apr 27 22:11:55 2025 by rpki-client