$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa File: 961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa (raw, json) Hash identifier: MVu/RbrLBn3Byabyezj3RwnPeWclpz0Iq0rsA7phpiA= Subject key identifier: BA:2D:5B:70:8B:34:1F:63:A9:F9:AA:64:78:7E:19:13:56:9C:73:81 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F4328584A18954DB4BFE06F7B7C8CC020 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa Signing time: Fri 06 Jun 2025 01:00:50 +0000 ROA not before: Fri 06 Jun 2025 01:00:50 +0000 ROA not after: Thu 04 Sep 2025 01:00:50 +0000 asID: 174 IP address blocks: 67.159.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:18:95:4d:b4:bf:e0:6f:7b:7c:8c:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Jun 6 01:00:50 2025 GMT Not After : Sep 4 01:00:50 2025 GMT Subject: CN=7920a96d-27f7-4b20-af15-477d07522b3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:52:0f:53:f7:b4:3f:11:1e:05:9c:20:de:44: 09:95:d9:10:a8:e5:75:90:31:c7:83:de:3e:f0:42: 91:33:cd:21:b8:47:96:9c:76:0c:a6:2a:54:63:b7: f6:07:21:91:dc:f3:37:7b:ba:9c:2a:30:fe:1b:d2: 84:11:e1:85:e1:d9:25:5e:a2:6b:6c:1b:3d:57:b5: 9d:94:35:aa:5a:94:52:b3:74:4f:e0:0b:23:92:5e: 2b:08:fb:20:2b:aa:fa:02:c9:9e:e4:b7:6b:59:9a: 2b:7d:57:62:c1:f6:29:a8:6c:7e:56:28:a6:1e:cb: 43:7f:0a:ea:b6:2c:f1:51:fe:44:82:e0:8e:2c:78: a4:12:d0:9a:91:72:3b:79:9d:c3:b8:14:b4:12:be: 9c:ff:24:3f:1a:c5:96:3a:9b:4d:18:17:9c:7e:0d: c9:bd:38:31:76:d5:d7:4c:d8:89:e5:7b:3f:a9:e1: a2:4a:05:8d:9f:8d:c0:e2:91:48:e2:d1:73:30:13: 03:69:de:6a:0c:a7:66:bf:f3:42:e7:37:fe:8e:08: fd:c4:c5:f5:b6:e5:49:b2:de:c6:dc:9a:a7:6f:d1: ab:57:cb:03:2b:3b:45:4f:38:0b:0f:c4:38:8f:a4: 5c:4f:f5:96:4b:bc:ef:ac:35:dd:64:80:fb:5a:8a: 49:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:2D:5B:70:8B:34:1F:63:A9:F9:AA:64:78:7E:19:13:56:9C:73:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/961b5219-9fb9-3d5a-b6ef-4fb052bd109d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:76:06:41:fb:d8:c9:45:a6:62:ae:16:21:15:fc:56:45:92: 3f:9e:47:c7:06:50:6d:ad:62:c1:50:d3:ec:43:bf:a7:25:42: d7:b4:06:35:cf:96:5a:25:4a:55:8a:a7:68:a2:39:e8:ca:fb: a9:fe:ad:22:db:07:e8:5c:5e:72:ba:a1:17:72:05:85:59:88: 19:42:ee:de:e1:46:9e:92:66:d4:96:0d:4a:34:89:6c:f1:46: 87:b2:8e:48:fb:b0:39:0d:5e:08:a9:36:91:e9:22:1a:23:3b: 7e:56:86:c4:69:ba:7a:3b:2c:c0:ec:54:90:d5:1f:85:6d:51: 7c:7d:95:8d:c7:0f:51:a8:18:83:a4:b4:8e:4a:2f:93:d6:77: 8f:ef:c8:67:13:fb:33:26:50:36:0d:8f:9a:f4:af:97:80:5c: 97:e6:98:86:9f:c6:0d:34:ec:6c:aa:de:ca:1e:13:b5:2b:44: 42:f2:43:ba:fc:2c:c3:6c:ab:7a:f8:b3:0b:a1:37:b8:38:16: b9:c4:b7:f1:0e:03:45:8c:a0:6a:d8:6d:26:54:d4:2c:ed:19: 76:2d:01:be:e7:f0:4f:dc:d4:c5:c7:d6:e7:86:b3:ef:ab:cf: 08:9f:be:36:dd:2e:4b:b2:ed:0b:72:4d:0f:c0:e8:90:43:9c: c2:a5:48:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlU20v+Bve3yMwCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk NzkyMGE5NmQtMjdmNy00YjIwLWFmMTUtNDc3ZDA3NTIyYjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFIPU/e0PxEeBZwg3kQJldkQqOV1kDHHg94+ 8EKRM80huEeWnHYMpipUY7f2ByGR3PM3e7qcKjD+G9KEEeGF4dklXqJrbBs9V7Wd lDWqWpRSs3RP4Asjkl4rCPsgK6r6Asme5LdrWZorfVdiwfYpqGx+ViimHstDfwrq tizxUf5EguCOLHikEtCakXI7eZ3DuBS0Er6c/yQ/GsWWOptNGBecfg3JvTgxdtXX TNiJ5Xs/qeGiSgWNn43A4pFI4tFzMBMDad5qDKdmv/NC5zf+jgj9xMX1tuVJst7G 3Jqnb9GrV8sDKztFTzgLD8Q4j6RcT/WWS7zvrDXdZID7WopJzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLotW3CLNB9jqfmqZHh+GRNWnHOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTYxYjUyMTktOWZiOS0z ZDVhLWI2ZWYtNGZiMDUyYmQxMDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE12BkH72MlFpmKuFiEV/FZFkj+eR8cGUG2tYsFQ0+xDv6clQte0BjXP llolSlWKp2iiOejK+6n+rSLbB+hcXnK6oRdyBYVZiBlC7t7hRp6SZtSWDUo0iWzx Roeyjkj7sDkNXgipNpHpIhojO35WhsRpuno7LMDsVJDVH4VtUXx9lY3HD1GoGIOk tI5KL5PWd4/vyGcT+zMmUDYNj5r0r5eAXJfmmIafxg007Gyq3soeE7UrRELyQ7r8 LMNsq3r4swuhN7g4FrnEt/EOA0WMoGrYbSZU1CztGXYtAb7n8E/c1MXH1ueGs++r zwifvjbdLkuy7QtyTQ/A6JBDnMKlSL8= -----END CERTIFICATE-----Generated at Fri Jun 6 11:15:17 2025 by rpki-client