$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa File: b1b96800-888f-3087-b255-7df30b1557be.roa (raw, json) Hash identifier: q00R5xMQRvnwLhEhG+ODWTNi09Ub/HVBiqa2q/s30/Q= Subject key identifier: 52:7C:9A:9D:92:DB:C3:C5:01:99:A1:75:2B:0F:ED:0F:8B:CE:7B:6B Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858482EEA4EE180176F0CE0739F80 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa Signing time: Thu 12 Dec 2024 15:26:10 +0000 ROA not before: Thu 12 Dec 2024 15:26:10 +0000 ROA not after: Wed 12 Mar 2025 14:26:10 +0000 asID: 30058 IP address blocks: 67.159.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 20 Feb 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:2e:ea:4e:e1:80:17:6f:0c:e0:73:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Dec 12 15:26:10 2024 GMT Not After : Mar 12 14:26:10 2025 GMT Subject: CN=8a4977ea-bff4-4557-9486-9f73bd0f7f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:79:14:49:34:46:6e:5d:0b:a2:53:69:4f:59: 3c:58:f5:10:06:1d:1e:58:7a:82:5e:42:f8:67:d7: 81:43:25:2e:92:ac:cd:11:6b:1e:55:01:a1:4d:ad: fa:88:f3:14:54:f3:d4:e8:69:9f:ad:f6:8b:b1:f0: 7e:18:80:00:2c:e0:2d:91:8c:b8:26:4a:ee:d8:33: a3:c5:5c:09:15:fe:03:80:d4:55:93:96:17:89:eb: cc:b3:95:eb:87:1e:3e:19:30:24:e8:4f:ce:1b:f3: 5e:7d:86:6d:dc:c2:a3:5b:8f:71:b7:c8:59:4a:ef: e3:79:cd:e0:91:9f:0d:20:5b:db:15:32:31:a9:90: 5b:b8:bf:24:81:d3:a3:87:a3:31:f7:2e:5d:f0:8d: 9d:a5:1c:ad:e2:4a:ad:07:9b:97:ec:96:dc:c9:26: 78:43:a4:fd:12:61:95:95:e6:a5:d9:15:27:57:13: 41:68:f1:33:b7:77:78:1a:d0:be:d0:73:87:24:fe: bf:5b:f8:29:b0:9d:dd:db:4a:2c:3e:07:60:60:7e: 8f:a8:33:a9:b4:0f:00:ef:aa:8f:82:49:67:7d:5d: bd:b6:84:84:88:b6:56:76:7b:32:10:e6:90:0d:db: d9:79:16:07:9f:a0:17:c1:f0:74:49:39:c7:9c:2a: 23:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7C:9A:9D:92:DB:C3:C5:01:99:A1:75:2B:0F:ED:0F:8B:CE:7B:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b1b96800-888f-3087-b255-7df30b1557be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7c:c4:16:3b:f4:c6:bf:d4:3a:de:8c:4a:c9:1d:f3:86:1a: ac:82:2a:51:21:ad:a9:f2:45:00:9c:7d:8b:53:c4:c1:e8:00: 31:1f:ed:e1:0d:94:58:2c:6a:04:0a:19:90:05:c4:9c:35:06: b6:dc:57:fd:00:ef:37:d0:d0:06:6a:89:9a:c8:ba:05:82:fc: bd:fc:e2:80:8c:99:2f:7e:e5:7c:bc:ae:9e:94:0c:0c:3c:c2: b4:5c:d8:5a:59:34:99:49:66:59:1e:d5:4b:84:d8:9c:70:f0: a8:cd:fe:75:2f:c0:bf:f3:3f:93:d0:19:67:66:e6:dc:73:52: 9e:3b:eb:6e:ed:48:01:e7:e7:d0:15:b6:27:87:e8:49:7d:4c: 29:7c:3a:f5:af:f2:9f:10:01:4c:bf:43:a6:68:70:d5:15:9b: 32:7a:b9:bb:bc:5e:83:56:ea:6f:88:63:6c:de:89:ee:84:1f: 92:f8:e7:be:77:b5:be:9d:a9:9a:97:af:6e:d7:25:0e:35:5e: c4:33:35:97:9e:33:41:b3:86:3b:2f:81:b0:3c:6a:ed:78:1b: 4a:81:6b:21:0c:6a:75:dc:25:42:97:7f:0a:ce:58:e0:04:52: 17:69:c1:8e:0a:bf:80:c8:9a:8c:1a:74:93:35:fb:68:6e:24: bd:44:31:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgu6k7hgBdvDOBzn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI0MTIxMjE1MjYxMFoXDTI1MDMxMjE0MjYxMFowLzEtMCsGA1UEAxMk OGE0OTc3ZWEtYmZmNC00NTU3LTk0ODYtOWY3M2JkMGY3ZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3kUSTRGbl0LolNpT1k8WPUQBh0eWHqCXkL4 Z9eBQyUukqzNEWseVQGhTa36iPMUVPPU6GmfrfaLsfB+GIAALOAtkYy4Jkru2DOj xVwJFf4DgNRVk5YXievMs5Xrhx4+GTAk6E/OG/NefYZt3MKjW49xt8hZSu/jec3g kZ8NIFvbFTIxqZBbuL8kgdOjh6Mx9y5d8I2dpRyt4kqtB5uX7JbcySZ4Q6T9EmGV leal2RUnVxNBaPEzt3d4GtC+0HOHJP6/W/gpsJ3d20osPgdgYH6PqDOptA8A76qP gklnfV29toSEiLZWdnsyEOaQDdvZeRYHn6AXwfB0STnHnCojCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ8mp2S28PFAZmhdSsP7Q+LzntrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjFiOTY4MDAtODg4Zi0z MDg3LWIyNTUtN2RmMzBiMTU1N2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl8xBY79Ma/1DrejErJHfOGGqyCKlEhranyRQCcfYtTxMHoADEf7eEN lFgsagQKGZAFxJw1BrbcV/0A7zfQ0AZqiZrIugWC/L384oCMmS9+5Xy8rp6UDAw8 wrRc2FpZNJlJZlke1UuE2Jxw8KjN/nUvwL/zP5PQGWdm5txzUp47627tSAHn59AV tieH6El9TCl8OvWv8p8QAUy/Q6ZocNUVmzJ6ubu8XoNW6m+IY2zeie6EH5L45753 tb6dqZqXr27XJQ41XsQzNZeeM0GzhjsvgbA8au14G0qBayEManXcJUKXfwrOWOAE UhdpwY4Kv4DImowadJM1+2huJL1EMeQ= -----END CERTIFICATE-----Generated at Wed Feb 19 20:46:53 2025 by rpki-client