$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa File: 1e9a1734-b5da-39df-a786-befd67f76d5c.roa (raw, json) Hash identifier: EKRQC4aFrV7kmYoCEzfDTOIYmeyoHmzMM9nmdbF3CSc= Subject key identifier: C0:FF:B2:96:FB:42:F1:92:74:14:25:78:1C:60:B8:B9:BA:97:D5:81 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848A101F435E322E63D3FE09E80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa Signing time: Wed 22 Jan 2025 12:15:58 +0000 ROA not before: Wed 22 Jan 2025 12:15:58 +0000 ROA not after: Tue 22 Apr 2025 11:15:58 +0000 asID: 174 IP address blocks: 67.159.31.0/24 maxlen: 24 67.159.63.0/24 maxlen: 24 2001:49f0:d119::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:01:f4:35:e3:22:e6:3d:3f:e0:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 22 12:15:58 2025 GMT Not After : Apr 22 11:15:58 2025 GMT Subject: CN=12c008c5-bf06-47b2-a17c-4a54261ce6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fb:3d:89:c9:6f:a6:31:98:00:64:46:d0:98: 49:1d:52:f6:e5:c2:23:f0:0a:56:ff:e0:30:c4:a1: e8:e2:38:cb:a6:1b:31:19:cf:18:57:cc:b2:39:10: 16:2d:57:c4:91:6a:a5:aa:13:57:0a:47:5a:77:83: 04:16:45:7d:e9:f4:58:0c:a7:6c:86:f6:85:0a:ec: 3d:f8:b8:7c:03:ae:19:37:a2:1c:7f:96:5f:0c:2b: fe:db:ea:e3:60:63:39:5c:e9:1d:3a:fc:de:2b:8f: 9d:48:6c:76:d7:2c:44:4f:a3:0f:9a:45:6f:52:3a: 62:74:97:05:3c:8a:f5:dd:27:14:cd:15:1b:be:8e: 47:d3:e0:26:60:17:35:08:f6:62:0f:bf:2b:76:02: cd:94:50:ab:fb:17:8e:a4:fe:c0:f2:c6:43:ef:47: 8e:09:ba:1d:7a:c4:fb:8a:28:14:2b:90:e6:6b:21: 6c:a9:36:47:e7:d6:1b:37:10:75:4b:85:5a:24:5e: 96:5f:c3:8f:ab:eb:d5:7e:0c:ba:19:c4:bb:2e:b9: 23:a0:63:c4:1f:c7:08:70:45:fb:f0:8a:5a:71:a9: 6f:68:8d:0b:36:95:9b:d7:3d:a1:ff:1d:6b:04:fb: 3d:52:5f:92:38:45:bc:a9:0a:5d:f6:6d:04:2c:9c: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FF:B2:96:FB:42:F1:92:74:14:25:78:1C:60:B8:B9:BA:97:D5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/1e9a1734-b5da-39df-a786-befd67f76d5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.31.0/24 67.159.63.0/24 IPv6: 2001:49f0:d119::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:cf:4a:a8:34:d5:af:2e:8c:e8:7a:9a:2d:f8:0c:03:a2:b7: 7f:ed:e7:67:79:51:23:2b:3d:17:82:96:eb:d6:89:7c:d8:85: c1:28:2f:fa:7a:1c:c4:94:63:2f:a5:6d:28:e2:fc:a4:98:3b: 34:2a:8e:65:ab:dc:04:ff:b4:db:9f:47:e4:a2:47:a4:66:62: b9:b3:87:b7:bc:02:65:85:54:69:22:2a:90:20:40:8c:12:17: b8:d6:31:95:2d:4a:c3:11:21:9c:e2:b6:4b:1d:78:d3:38:60: 8d:3f:0a:29:ad:da:32:bd:9c:d2:bd:8e:5f:0f:9d:68:fa:de: c5:30:22:8b:29:a3:15:eb:79:ff:58:3c:48:84:fc:f5:c6:6a: 61:b7:78:19:df:ab:06:f6:ae:11:74:eb:c7:c3:9d:8f:47:ac: 5f:e8:4b:27:d5:ba:85:4f:4c:13:c6:e4:a7:5d:66:3d:1f:b8: 41:5d:6b:23:a5:f2:33:a4:15:a4:20:0c:c8:bc:55:cd:77:63: 9c:f2:e4:ee:e0:24:eb:f9:6b:b7:39:b5:23:1c:5d:1c:ff:31: 06:0d:34:25:e1:97:d4:b6:9f:a2:89:62:9b:70:d1:51:66:e6: 1a:14:a5:d3:f0:69:76:0e:b9:bd:97:b8:12:4b:b4:05:1e:ad: 73:3d:93:53 -----BEGIN CERTIFICATE----- MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEihAfQ14yLmPT/gnoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEyMjEyMTU1OFoXDTI1MDQyMjExMTU1OFowLzEtMCsGA1UEAxMk MTJjMDA4YzUtYmYwNi00N2IyLWExN2MtNGE1NDI2MWNlNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/s9iclvpjGYAGRG0JhJHVL25cIj8ApW/+Aw xKHo4jjLphsxGc8YV8yyORAWLVfEkWqlqhNXCkdad4MEFkV96fRYDKdshvaFCuw9 +Lh8A64ZN6Icf5ZfDCv+2+rjYGM5XOkdOvzeK4+dSGx21yxET6MPmkVvUjpidJcF PIr13ScUzRUbvo5H0+AmYBc1CPZiD78rdgLNlFCr+xeOpP7A8sZD70eOCbodesT7 iigUK5DmayFsqTZH59YbNxB1S4VaJF6WX8OPq+vVfgy6GcS7LrkjoGPEH8cIcEX7 8IpacalvaI0LNpWb1z2h/x1rBPs9Ul+SOEW8qQpd9m0ELJxJpQIDAQABo4IDbDCC A2gwHQYDVR0OBBYEFMD/spb7QvGSdBQleBxguLm6l9WBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvMWU5YTE3MzQtYjVkYS0z OWRmLWE3ODYtYmVmZDY3Zjc2ZDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAQ58fAwQA Q58/MA8EAgACMAkDBwAgAUnw0RkwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6 MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAz89KqDTVry6M6HqaLfgMA6K3 f+3nZ3lRIys9F4KW69aJfNiFwSgv+nocxJRjL6VtKOL8pJg7NCqOZavcBP+0259H 5KJHpGZiubOHt7wCZYVUaSIqkCBAjBIXuNYxlS1KwxEhnOK2Sx140zhgjT8KKa3a Mr2c0r2OXw+daPrexTAiiymjFet5/1g8SIT89cZqYbd4Gd+rBvauEXTrx8Odj0es X+hLJ9W6hU9ME8bkp11mPR+4QV1rI6XyM6QVpCAMyLxVzXdjnPLk7uAk6/lrtzm1 IxxdHP8xBg00JeGX1Lafoolim3DRUWbmGhSl0/Bpdg65vZe4Eku0BR6tcz2TUw== -----END CERTIFICATE-----Generated at Wed Feb 19 20:37:50 2025 by rpki-client