$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa File: 47fd139c-acb1-3096-ace2-587cba189c18.roa (raw, json) Hash identifier: a7Ug+pGOiIWJELW+qAt3DdX9y37uhnvm1B2hdN3gRNQ= Subject key identifier: A9:5E:DD:22:74:E7:1E:B9:94:2F:74:68:90:17:8A:64:47:D2:92:74 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285849EEB502E875753C15E92A41C0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa Signing time: Thu 22 May 2025 01:00:51 +0000 ROA not before: Thu 22 May 2025 01:00:51 +0000 ROA not after: Wed 20 Aug 2025 01:00:51 +0000 asID: 174 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ee:b5:02:e8:75:75:3c:15:e9:2a:41:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: May 22 01:00:51 2025 GMT Not After : Aug 20 01:00:51 2025 GMT Subject: CN=d8a48e40-cd1a-4bd7-a307-d04983d15304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5d:98:cd:ba:5d:5d:96:d8:a6:e2:73:5b:60: 1f:01:e8:8b:6e:7c:f1:ea:20:ec:9f:24:54:7d:62: 89:af:b7:17:6e:d0:40:81:31:fe:28:da:b6:b6:bb: ff:41:75:ce:3d:69:e4:b4:43:50:a0:a1:dc:a5:d5: 30:da:d0:d9:af:b9:9e:86:26:34:0b:83:d2:4d:98: eb:c7:0e:f7:eb:c9:f3:91:be:c1:7c:51:2c:1d:f1: 54:50:85:96:d6:3a:57:1d:98:f7:bb:e7:96:bf:49: cd:59:82:b4:5f:15:b0:bc:9c:9f:5a:7f:2d:88:79: ec:8f:33:d4:22:69:04:de:e6:69:83:de:7a:a4:56: 5a:9f:32:4c:50:84:a1:ea:00:7e:1a:48:27:95:0e: 52:45:54:b9:3c:e4:69:29:8a:32:e0:28:99:3b:f4: 1c:96:db:be:68:4d:06:a6:a5:fb:d5:c0:e3:c4:c2: 5c:96:2b:5d:89:37:fe:69:28:30:2d:f8:1b:63:5b: 8b:99:28:59:6e:5a:13:b2:69:5a:60:ae:e3:5e:a1: c4:3c:48:90:18:f1:27:40:a6:48:7f:71:c0:b8:97: 80:12:82:1a:71:bf:54:0d:c6:e5:2b:dd:e0:39:d2: 24:d3:4b:41:59:44:7a:ac:04:e2:df:20:ac:a7:b5: 8f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:5E:DD:22:74:E7:1E:B9:94:2F:74:68:90:17:8A:64:47:D2:92:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/47fd139c-acb1-3096-ace2-587cba189c18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:a7:c6:8f:d5:a1:22:fb:b6:60:71:ce:38:f4:8e:6b:e2:dd: 86:5a:6e:d9:39:81:bc:1b:2d:db:f2:68:5b:ef:ef:ec:4b:5f: fb:ee:de:76:9f:92:02:44:c1:5d:97:99:5d:56:bc:75:03:f3: d5:3f:e0:bb:e1:c0:e9:fa:c8:73:10:6e:8e:0b:3c:57:81:19: ea:33:1e:41:21:f8:e1:fe:63:1f:16:31:92:ad:57:b8:c6:6d: 0f:e9:fa:c7:cd:d6:89:33:03:ed:70:8a:40:09:4d:31:80:27: 2e:91:15:e3:a1:70:49:e0:74:eb:79:b3:29:20:57:b9:61:c7: af:5e:28:dd:61:d6:48:90:59:9c:24:5e:3d:18:68:8e:7f:ca: f1:89:3b:8c:82:31:4f:22:54:8e:36:04:3e:cd:92:0b:4b:24: 68:01:31:13:95:bb:c6:84:b8:c9:48:d3:dd:87:c1:05:09:0d: 1d:af:3e:f4:14:6b:e8:8a:6e:68:69:d9:78:51:9e:2e:37:65: cf:ec:a8:fc:fe:58:cb:57:f7:77:cb:7e:01:b3:a0:45:07:1b: 4e:34:9e:8b:a0:14:9e:0b:67:97:f1:48:be:c9:a3:82:8f:d0: c4:05:19:6f:49:5e:03:0f:a6:84:45:82:48:d4:b2:98:04:cf: bf:6d:70:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQLodXU8FekqQcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk ZDhhNDhlNDAtY2QxYS00YmQ3LWEzMDctZDA0OTgzZDE1MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV2YzbpdXZbYpuJzW2AfAeiLbnzx6iDsnyRU fWKJr7cXbtBAgTH+KNq2trv/QXXOPWnktENQoKHcpdUw2tDZr7mehiY0C4PSTZjr xw7368nzkb7BfFEsHfFUUIWW1jpXHZj3u+eWv0nNWYK0XxWwvJyfWn8tiHnsjzPU ImkE3uZpg956pFZanzJMUISh6gB+GkgnlQ5SRVS5PORpKYoy4CiZO/Qcltu+aE0G pqX71cDjxMJclitdiTf+aSgwLfgbY1uLmShZbloTsmlaYK7jXqHEPEiQGPEnQKZI f3HAuJeAEoIacb9UDcblK93gOdIk00tBWUR6rATi3yCsp7WPpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKle3SJ05x65lC90aJAXimRH0pJ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNDdmZDEzOWMtYWNiMS0z MDk2LWFjZTItNTg3Y2JhMTg5YzE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAinxo/VoSL7tmBxzjj0jmvi3YZabtk5gbwbLdvyaFvv7+xLX/vu3naf kgJEwV2XmV1WvHUD89U/4LvhwOn6yHMQbo4LPFeBGeozHkEh+OH+Yx8WMZKtV7jG bQ/p+sfN1okzA+1wikAJTTGAJy6RFeOhcEngdOt5sykgV7lhx69eKN1h1kiQWZwk Xj0YaI5/yvGJO4yCMU8iVI42BD7NkgtLJGgBMROVu8aEuMlI092HwQUJDR2vPvQU a+iKbmhp2XhRni43Zc/sqPz+WMtX93fLfgGzoEUHG040nougFJ4LZ5fxSL7Jo4KP 0MQFGW9JXgMPpoRFgkjUspgEz79tcJc= -----END CERTIFICATE-----Generated at Fri Jun 6 11:22:51 2025 by rpki-client