$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa File: 4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa (raw, json) Hash identifier: XO67Ud/sCCrYbNwWrpddLB3BB4+6W8/pDlZ1el03III= Subject key identifier: 78:0D:51:E6:00:09:97:67:E9:FF:6C:92:57:54:26:85:C6:D0:34:76 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A7D16027C11B262A83CD61C20 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa Signing time: Sat 12 Jul 2025 01:00:50 +0000 ROA not before: Sat 12 Jul 2025 01:00:50 +0000 ROA not after: Fri 10 Oct 2025 01:00:50 +0000 asID: 30058 IP address blocks: 67.159.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7d:16:02:7c:11:b2:62:a8:3c:d6:1c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jul 12 01:00:50 2025 GMT Not After : Oct 10 01:00:50 2025 GMT Subject: CN=3c823a9e-5397-416c-8650-ae66656e5651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:80:e2:4d:00:55:b6:85:5a:bc:3b:cc:0d:25: 98:94:cd:48:33:a1:c5:34:11:47:0a:fa:87:f9:f0: 17:b9:27:8c:b3:7e:7d:63:bc:36:53:f5:e7:1b:69: 89:59:38:06:14:dc:00:0b:5c:77:5f:7f:60:6e:ec: 4b:62:fa:3b:52:da:db:78:91:b8:5e:23:5a:e5:33: 64:7f:9c:14:e3:f7:c6:13:a5:71:e2:c6:ee:21:b7: 80:d2:8e:23:3e:24:7d:84:2a:43:e4:a4:e4:42:44: cb:29:54:29:ec:96:5d:c5:d7:b3:4b:e4:19:a3:10: 00:93:b1:71:89:f6:7c:41:a4:54:46:0f:45:3b:e4: e8:ab:b9:0c:15:50:f5:64:85:7c:c2:6c:7d:7a:fa: 16:78:0c:88:cf:9e:a4:2d:29:90:4d:c5:ba:21:76: 76:41:08:92:a9:49:1f:de:63:1b:b3:86:b0:ab:ca: 76:29:a3:f1:5e:b2:b6:42:4b:d7:7f:d1:59:cf:ca: b2:88:5b:3d:42:9d:d2:a6:3a:b2:92:d2:d1:21:0e: 23:82:12:b6:77:94:8b:1e:7a:b9:6f:43:0c:be:dd: d9:d4:c5:b5:82:db:8c:af:c3:f3:70:5e:23:3c:1d: a7:40:5c:84:1d:07:72:b1:bf:84:16:11:a9:4c:4f: 2a:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0D:51:E6:00:09:97:67:E9:FF:6C:92:57:54:26:85:C6:D0:34:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/4bceaa4d-4ac6-3768-84fa-88c768f46b14.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:26:be:5a:4d:4a:29:be:53:dc:f2:a9:fe:3c:c6:4b:51:5d: f7:f3:93:ae:1b:46:1e:c5:33:db:64:1a:38:59:2f:12:16:01: f1:bb:8f:e9:8b:53:e8:e5:a0:1c:e3:a2:aa:a1:05:51:dd:37: 47:ce:39:e4:17:b1:ae:e8:d5:ef:03:0d:b4:30:ac:6e:2a:1b: 7b:5f:91:4a:bc:1a:d2:47:17:90:a1:a3:5c:84:4f:e7:46:fe: 49:37:ab:1d:18:70:c7:56:9a:88:f9:2c:91:fc:15:7a:8b:82: 71:f4:66:84:ce:3d:7a:24:21:a7:d6:1c:62:f2:c8:80:1e:57: 06:af:e2:45:2a:64:50:fd:02:0f:d2:1f:45:a2:71:c6:14:92: 26:a3:ab:a1:6d:4e:a2:10:2b:5f:5c:7c:6d:26:03:01:fb:40: fc:13:9d:52:46:02:81:f6:84:82:07:5a:95:d7:35:a3:f8:11: 61:39:8f:a9:32:03:3e:ff:99:b4:68:40:6e:1b:66:59:d9:db: c0:fc:f0:a7:3d:07:41:d8:e5:c3:5a:1c:98:9e:1e:2f:cd:db: 08:f1:e9:a5:8a:2a:6e:f4:94:bf:57:41:0b:f0:e2:70:77:32: bf:03:94:d1:44:a9:7f:3a:df:37:bb:d2:35:68:f3:61:d3:de: 2c:ce:25:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp9FgJ8EbJiqDzWHCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk M2M4MjNhOWUtNTM5Ny00MTZjLTg2NTAtYWU2NjY1NmU1NjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIDiTQBVtoVavDvMDSWYlM1IM6HFNBFHCvqH +fAXuSeMs359Y7w2U/XnG2mJWTgGFNwAC1x3X39gbuxLYvo7UtrbeJG4XiNa5TNk f5wU4/fGE6Vx4sbuIbeA0o4jPiR9hCpD5KTkQkTLKVQp7JZdxdezS+QZoxAAk7Fx ifZ8QaRURg9FO+Toq7kMFVD1ZIV8wmx9evoWeAyIz56kLSmQTcW6IXZ2QQiSqUkf 3mMbs4awq8p2KaPxXrK2QkvXf9FZz8qyiFs9Qp3SpjqyktLRIQ4jghK2d5SLHnq5 b0MMvt3Z1MW1gtuMr8PzcF4jPB2nQFyEHQdysb+EFhGpTE8qbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgNUeYACZdn6f9skldUJoXG0DR2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNGJjZWFhNGQtNGFjNi0z NzY4LTg0ZmEtODhjNzY4ZjQ2YjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALUmvlpNSim+U9zyqf48xktRXffzk64bRh7FM9tkGjhZLxIWAfG7j+mL U+jloBzjoqqhBVHdN0fOOeQXsa7o1e8DDbQwrG4qG3tfkUq8GtJHF5Cho1yET+dG /kk3qx0YcMdWmoj5LJH8FXqLgnH0ZoTOPXokIafWHGLyyIAeVwav4kUqZFD9Ag/S H0WiccYUkiajq6FtTqIQK19cfG0mAwH7QPwTnVJGAoH2hIIHWpXXNaP4EWE5j6ky Az7/mbRoQG4bZlnZ28D88Kc9B0HY5cNaHJieHi/N2wjx6aWKKm70lL9XQQvw4nB3 Mr8DlNFEqX863ze70jVo82HT3izOJS0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:31 2025 by rpki-client