$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75f7936c-3860-325f-a473-8bed9b592d6a.roa File: 75f7936c-3860-325f-a473-8bed9b592d6a.roa (raw, json) Hash identifier: TFZzdy460MsqfNkfLH3ulK+pKX4JxS+rU7ndhAnYnI0= Subject key identifier: D6:FD:04:77:B1:49:4F:99:67:FA:1C:1D:89:4C:7B:0E:03:4B:41:60 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584874FFAC9BFBC42794B0C7D7F0 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75f7936c-3860-325f-a473-8bed9b592d6a.roa Signing time: Mon 06 Jan 2025 17:55:48 +0000 ROA not before: Mon 06 Jan 2025 17:55:48 +0000 ROA not after: Sun 06 Apr 2025 16:55:48 +0000 asID: 30058 IP address blocks: 67.159.44.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:74:ff:ac:9b:fb:c4:27:94:b0:c7:d7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jan 6 17:55:48 2025 GMT Not After : Apr 6 16:55:48 2025 GMT Subject: CN=f4eac4bc-2842-4a6b-824b-6c6beea2d862 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:f5:0c:48:42:1c:2f:e5:d7:33:b8:7b:29: 26:7d:30:f7:db:ac:16:0d:3d:aa:e1:8c:56:cd:c2: 83:da:cd:ce:32:fd:7d:1b:b7:45:1b:59:bf:49:6a: 4a:cc:0a:11:20:40:71:a9:41:03:74:e3:66:b4:b6: ec:b2:78:96:76:2a:eb:2d:82:8c:76:4a:08:9a:05: ca:1c:cb:9d:da:f2:f9:42:3b:bd:2c:6a:4d:3f:28: ad:2b:61:41:4d:76:58:ea:4c:57:b2:b1:eb:b1:08: 8a:1c:06:d2:ae:2d:bb:c1:83:16:39:4a:fe:6b:8d: dc:3a:ee:c8:a0:0b:85:05:04:c6:0a:c5:50:fb:d8: b7:18:4f:10:b3:0f:ca:7e:09:e4:9c:31:45:c6:40: ee:41:03:0f:b3:8b:06:0a:da:39:ff:21:69:fb:10: 8d:10:5f:1b:22:c7:10:7f:00:0e:7b:80:9d:bf:b5: 87:dd:c2:11:36:3e:eb:df:d8:ce:cc:c9:9e:7e:ae: 3c:cb:aa:b3:e3:32:fb:e5:7f:1f:7f:d2:12:06:e5: 44:54:74:06:b4:6f:5c:64:1d:3e:94:a3:c8:07:0e: d6:b4:67:ed:f7:2c:10:5e:5b:b8:73:28:c5:39:f9: 9c:59:fb:07:de:d3:20:20:b6:ee:2c:29:99:9a:73: dc:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FD:04:77:B1:49:4F:99:67:FA:1C:1D:89:4C:7B:0E:03:4B:41:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/75f7936c-3860-325f-a473-8bed9b592d6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.44.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:bf:74:fb:06:92:2d:c8:69:e8:e9:2d:b3:68:f2:26:fa:f2: 91:f1:0b:6c:f8:3e:b7:5d:5e:23:48:f0:bc:70:67:63:50:81: ec:9e:f4:07:a0:6a:c6:f8:93:67:96:5f:01:16:64:ff:c5:4a: a4:12:ab:f3:62:02:d1:dd:11:d7:68:1f:63:0c:23:cf:7b:11: 68:e6:1d:c0:14:fd:99:b5:29:f6:80:e9:34:e4:6e:72:19:ed: 37:78:50:fd:ec:ba:a9:9d:08:33:1b:bb:cc:94:58:9a:28:0f: 54:3f:4c:a7:e8:b4:0d:84:e3:83:d7:f6:93:fe:df:f4:73:75: 01:11:75:61:2c:c4:c0:a3:11:cd:3c:26:dd:f7:4c:59:19:bc: db:04:f7:ad:91:64:4a:74:19:fb:21:f4:c3:89:16:5b:d3:2b: b3:fe:b8:e3:26:7d:f5:32:ad:a2:c4:c4:5a:a6:8c:74:7e:0a: 7f:a3:10:dc:78:c2:ba:b5:67:db:0f:48:bc:0e:e0:40:84:20: f8:ed:23:71:d0:85:50:39:54:04:d8:f4:3e:f2:8f:5c:4c:20: fd:f9:31:f2:db:40:ca:23:da:a8:05:87:d5:8c:c2:e0:b6:14: b8:f9:cc:af:0f:11:8c:a0:49:7a:c4:34:21:b5:c0:ce:3c:85: 1e:09:3f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh0/6yb+8QnlLDH1/AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDEwNjE3NTU0OFoXDTI1MDQwNjE2NTU0OFowLzEtMCsGA1UEAxMk ZjRlYWM0YmMtMjg0Mi00YTZiLTgyNGItNmM2YmVlYTJkODYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwT1DEhCHC/l1zO4eykmfTD326wWDT2q4YxW zcKD2s3OMv19G7dFG1m/SWpKzAoRIEBxqUEDdONmtLbssniWdirrLYKMdkoImgXK HMud2vL5Qju9LGpNPyitK2FBTXZY6kxXsrHrsQiKHAbSri27wYMWOUr+a43cOu7I oAuFBQTGCsVQ+9i3GE8Qsw/KfgnknDFFxkDuQQMPs4sGCto5/yFp+xCNEF8bIscQ fwAOe4Cdv7WH3cIRNj7r39jOzMmefq48y6qz4zL75X8ff9ISBuVEVHQGtG9cZB0+ lKPIBw7WtGft9ywQXlu4cyjFOfmcWfsH3tMgILbuLCmZmnPcGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNb9BHexSU+ZZ/ocHYlMew4DS0FgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvNzVmNzkzNmMtMzg2MC0z MjVmLWE0NzMtOGJlZDliNTkyZDZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALe/dPsGki3IaejpLbNo8ib68pHxC2z4PrddXiNI8LxwZ2NQgeye9Aeg asb4k2eWXwEWZP/FSqQSq/NiAtHdEddoH2MMI897EWjmHcAU/Zm1KfaA6TTkbnIZ 7Td4UP3suqmdCDMbu8yUWJooD1Q/TKfotA2E44PX9pP+3/RzdQERdWEsxMCjEc08 Jt33TFkZvNsE962RZEp0Gfsh9MOJFlvTK7P+uOMmffUyraLExFqmjHR+Cn+jENx4 wrq1Z9sPSLwO4ECEIPjtI3HQhVA5VATY9D7yj1xMIP35MfLbQMoj2qgFh9WMwuC2 FLj5zK8PEYygSXrENCG1wM48hR4JP90= -----END CERTIFICATE-----Generated at Wed Feb 19 20:38:56 2025 by rpki-client