$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9679e30d-bcbb-30db-9710-0d6d49ff0a18.roa File: 9679e30d-bcbb-30db-9710-0d6d49ff0a18.roa (raw, json) Hash identifier: DYnXJW4ec7r6kqeLQZq/kNDLx3gqAj9KsNKwMZgj0Hg= Subject key identifier: 0C:6F:45:2C:DC:50:96:65:B3:73:BD:B3:9C:9B:10:4F:7B:76:02:EB Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858484DA639B51B70D30FF8897000 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9679e30d-bcbb-30db-9710-0d6d49ff0a18.roa Signing time: Mon 23 Dec 2024 15:39:03 +0000 ROA not before: Mon 23 Dec 2024 15:39:03 +0000 ROA not after: Sun 23 Mar 2025 14:39:03 +0000 asID: 30058 IP address blocks: 67.159.32.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:4d:a6:39:b5:1b:70:d3:0f:f8:89:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 23 15:39:03 2024 GMT Not After : Mar 23 14:39:03 2025 GMT Subject: CN=d0c9b664-8293-461d-9877-203fae937e3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:83:b4:da:a2:ba:fd:74:48:df:72:6c:dc:34: f6:ce:cb:44:fc:ae:8b:e9:64:af:36:45:00:32:bd: b0:ee:ee:df:63:e9:7c:a3:aa:6c:83:e9:92:1f:57: de:4c:50:72:59:37:56:fc:55:49:4a:fe:a9:11:67: 19:82:3f:4a:a9:cb:e3:ee:9b:37:36:c4:e7:d4:52: a3:a4:cf:c9:43:f4:93:f8:fb:81:e5:24:dd:66:13: 4e:0a:c7:4a:f5:81:b6:e8:64:7f:f8:a6:63:9a:97: c9:fc:52:07:58:a9:e4:65:24:a8:1a:93:33:71:e4: f7:02:6a:70:d9:54:32:c3:98:7f:c7:c2:f2:f1:09: 63:fa:da:71:8f:b5:c8:02:65:04:93:35:d1:47:5b: ee:3d:5f:e1:11:c2:50:90:aa:9f:a4:97:a1:e0:7e: 4e:2a:94:bc:ce:06:7d:09:51:94:c0:cb:c1:b4:73: 9a:ae:cc:06:8c:20:3d:62:94:90:92:33:a1:1f:68: a2:b7:fb:eb:6c:e0:d9:43:6f:45:12:47:6f:59:08: b5:a1:9d:19:bf:e7:58:81:aa:35:23:7c:bc:4e:63: 42:78:74:da:47:5a:cd:54:44:53:d8:0c:be:49:c7: 8e:50:28:c5:58:4a:a6:c9:af:83:5d:78:0a:51:4c: 14:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:6F:45:2C:DC:50:96:65:B3:73:BD:B3:9C:9B:10:4F:7B:76:02:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9679e30d-bcbb-30db-9710-0d6d49ff0a18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:bd:e2:15:94:9f:6a:88:a7:df:7d:eb:17:fc:8a:24:52:12: 90:9c:e2:6d:ae:59:ab:7f:03:16:90:ea:ba:4b:96:5c:52:e5: d6:1f:40:4a:cb:ec:40:f0:af:8c:4f:05:75:30:da:0f:67:09: e5:e1:ae:7a:95:1a:2c:b1:e4:45:4e:21:2f:95:4d:6c:44:70: 63:08:17:6f:0e:cd:6a:94:6c:37:75:fd:8d:08:c7:f1:20:58: f7:fe:12:f4:3d:a2:e3:78:3e:c9:ce:46:5d:d4:68:16:76:2e: 67:7c:d7:36:b3:ea:2f:f9:8e:a0:12:6d:bb:34:cd:4f:06:64: a5:85:95:57:a9:68:45:c4:d6:5d:69:fe:25:d8:a2:6a:aa:65: 0b:85:e8:7d:65:72:71:79:9a:21:0d:d8:06:ba:b2:08:49:ff: 42:3c:15:51:da:44:03:6b:ab:7c:4a:a4:81:c2:d1:09:56:65: ca:d9:30:08:b9:51:37:0f:c0:00:c5:8e:7f:16:6c:23:40:81: cb:b2:a0:dd:3a:1d:1f:bb:a8:fa:ce:ed:2a:4e:70:5a:18:d3: e4:c2:9a:b7:06:9c:9d:61:89:7b:0a:d3:05:7c:9d:cd:30:1e: 82:c7:15:a9:52:11:07:9b:9d:28:dd:f8:67:aa:5b:7a:2c:e2: f2:84:ef:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhNpjm1G3DTD/iJcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIyMzE1MzkwM1oXDTI1MDMyMzE0MzkwM1owLzEtMCsGA1UEAxMk ZDBjOWI2NjQtODI5My00NjFkLTk4NzctMjAzZmFlOTM3ZTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIO02qK6/XRI33Js3DT2zstE/K6L6WSvNkUA Mr2w7u7fY+l8o6psg+mSH1feTFByWTdW/FVJSv6pEWcZgj9Kqcvj7ps3NsTn1FKj pM/JQ/ST+PuB5STdZhNOCsdK9YG26GR/+KZjmpfJ/FIHWKnkZSSoGpMzceT3Ampw 2VQyw5h/x8Ly8Qlj+tpxj7XIAmUEkzXRR1vuPV/hEcJQkKqfpJeh4H5OKpS8zgZ9 CVGUwMvBtHOarswGjCA9YpSQkjOhH2iit/vrbODZQ29FEkdvWQi1oZ0Zv+dYgao1 I3y8TmNCeHTaR1rNVERT2Ay+SceOUCjFWEqmya+DXXgKUUwU3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxvRSzcUJZls3O9s5ybEE97dgLrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOTY3OWUzMGQtYmNiYi0z MGRiLTk3MTAtMGQ2ZDQ5ZmYwYTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ58gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKm94hWUn2qIp9996xf8iiRSEpCc4m2uWat/AxaQ6rpLllxS5dYfQErL 7EDwr4xPBXUw2g9nCeXhrnqVGiyx5EVOIS+VTWxEcGMIF28OzWqUbDd1/Y0Ix/Eg WPf+EvQ9ouN4PsnORl3UaBZ2Lmd81zaz6i/5jqASbbs0zU8GZKWFlVepaEXE1l1p /iXYomqqZQuF6H1lcnF5miEN2Aa6sghJ/0I8FVHaRANrq3xKpIHC0QlWZcrZMAi5 UTcPwADFjn8WbCNAgcuyoN06HR+7qPrO7SpOcFoY0+TCmrcGnJ1hiXsK0wV8nc0w HoLHFalSEQebnSjd+GeqW3os4vKE70U= -----END CERTIFICATE-----Generated at Wed Feb 19 20:44:39 2025 by rpki-client