$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3bce2c47-6ce6-34ab-90b4-d100d7553c29.roa File: 3bce2c47-6ce6-34ab-90b4-d100d7553c29.roa (raw, json) Hash identifier: yT/XvNlyUHMo73C00ag92Enb8ZFCGemPFe0KCXj/EkY= Subject key identifier: 70:E2:EB:C8:89:1A:60:F3:4E:B5:E7:9B:B5:65:80:6E:8A:B3:0D:B8 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A5FC5E397F6990ABB02D27800 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3bce2c47-6ce6-34ab-90b4-d100d7553c29.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 30058 IP address blocks: 67.159.31.0/24 maxlen: 24 67.159.63.0/24 maxlen: 24 2001:49f0:d119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:e3:97:f6:99:0a:bb:02:d2:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=61730d76-6b4a-4ea9-b6b1-69469466ad0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:6b:9f:05:d0:38:ab:50:3e:31:ca:0c:14:e8: b0:ee:7f:c6:72:a8:0c:2a:a3:14:5f:94:3d:00:94: c3:52:c8:4c:9a:f1:14:b5:c1:12:95:4a:d6:9d:04: b1:84:1d:ea:10:25:ce:03:c3:04:00:8a:a0:ef:f7: 3d:f7:51:f7:17:55:3c:06:69:c7:23:67:d7:7f:c3: 61:20:2d:75:41:60:5c:08:bd:83:8c:bc:78:ac:7b: 1a:a4:b4:69:73:e8:81:44:a8:c4:92:c2:66:e3:28: e9:a4:67:74:9d:a6:0b:ca:36:02:aa:53:f7:d8:18: 64:1d:17:33:9b:0c:03:18:b5:a8:94:82:44:94:37: 28:75:63:2d:d4:ba:d3:52:c2:d9:84:98:4d:dc:a1: ca:72:10:a3:8d:e9:2a:fc:ab:cf:1c:e8:b3:19:8b: 2a:57:56:90:9b:f2:d3:13:ac:48:e6:cf:e3:0c:24: 25:21:5e:20:82:85:a1:04:04:d9:8c:d3:f6:12:ef: ed:02:ea:61:a4:2c:b6:25:94:6c:69:e9:24:f5:f9: 13:83:2b:c8:43:48:2d:fc:aa:99:9f:92:6f:97:41: 0e:34:58:2f:d9:47:31:19:d4:dd:88:dd:60:46:6f: 93:cd:80:d3:c9:a0:4e:9e:69:98:39:a7:e7:a6:a9: 1c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E2:EB:C8:89:1A:60:F3:4E:B5:E7:9B:B5:65:80:6E:8A:B3:0D:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/3bce2c47-6ce6-34ab-90b4-d100d7553c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.31.0/24 67.159.63.0/24 IPv6: 2001:49f0:d119::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:15:61:06:83:aa:dd:64:95:9b:85:78:b5:a8:92:89:65:74: 75:ed:bb:b8:15:a2:e4:47:58:83:06:f3:d1:50:2a:11:af:20: c4:0a:73:92:0b:97:70:c3:b9:f0:3a:de:88:09:5d:a3:2b:64: a7:09:8a:2c:c5:4a:d6:ae:96:b5:51:d8:a0:54:2d:79:0d:4d: a1:77:4e:f7:42:38:98:89:07:66:60:50:6f:45:0c:ad:93:76: 8b:68:e8:f5:ab:79:33:5a:ee:d2:2e:51:e5:80:c8:18:ed:69: 5d:37:7d:b5:3c:de:51:89:c7:4c:38:99:b9:62:df:bd:8a:bb: 41:24:f4:7f:a4:52:12:84:c2:20:c1:90:9f:6a:f7:bd:3e:a7: ab:9c:13:5a:2e:42:8e:1a:23:aa:33:2d:fa:41:97:ea:4b:df: 39:53:4f:f5:5e:26:16:3e:10:e9:ba:72:9d:f4:0b:74:2f:0f: c5:8b:85:6b:f4:56:73:09:7f:d6:9b:e4:e9:07:32:5a:2c:d4: bb:63:f0:90:0f:1c:42:25:e3:07:9c:43:be:f9:17:4f:ec:4d: 64:80:5e:03:2a:42:4b:99:fa:a9:4f:9c:c4:23:ee:41:d3:0a: 8e:45:ec:03:8a:66:9e:a9:e5:d9:ec:78:e7:0f:8f:99:83:ba: 1a:37:7c:df -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEpfxeOX9pkKuwLSeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NjE3MzBkNzYtNmI0YS00ZWE5LWI2YjEtNjk0Njk0NjZhZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGufBdA4q1A+McoMFOiw7n/GcqgMKqMUX5Q9 AJTDUshMmvEUtcESlUrWnQSxhB3qECXOA8MEAIqg7/c991H3F1U8BmnHI2fXf8Nh IC11QWBcCL2DjLx4rHsapLRpc+iBRKjEksJm4yjppGd0naYLyjYCqlP32BhkHRcz mwwDGLWolIJElDcodWMt1LrTUsLZhJhN3KHKchCjjekq/KvPHOizGYsqV1aQm/LT E6xI5s/jDCQlIV4ggoWhBATZjNP2Eu/tAuphpCy2JZRsaekk9fkTgyvIQ0gt/KqZ n5Jvl0EONFgv2UcxGdTdiN1gRm+TzYDTyaBOnmmYOafnpqkcgwIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFHDi68iJGmDzTrXnm7VlgG6Ksw24MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvM2JjZTJjNDctNmNlNi0z NGFiLTkwYjQtZDEwMGQ3NTUzYzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQ58fAwQA Q58/MA8EAgACMAkDBwAgAUnw0RkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAPhVhBoOq3WSVm4V4taiSiWV0 de27uBWi5EdYgwbz0VAqEa8gxApzkguXcMO58DreiAldoytkpwmKLMVK1q6WtVHY oFQteQ1NoXdO90I4mIkHZmBQb0UMrZN2i2jo9at5M1ru0i5R5YDIGO1pXTd9tTze UYnHTDiZuWLfvYq7QST0f6RSEoTCIMGQn2r3vT6nq5wTWi5CjhojqjMt+kGX6kvf OVNP9V4mFj4Q6bpynfQLdC8PxYuFa/RWcwl/1pvk6QcyWizUu2PwkA8cQiXjB5xD vvkXT+xNZIBeAypCS5n6qU+cxCPuQdMKjkXsA4pmnqnl2ex45w+PmYO6Gjd83w== -----END CERTIFICATE-----Generated at Wed Jul 23 17:12:12 2025 by rpki-client