$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa File: b246ad75-ecad-3443-88db-9306bb30ede8.roa (raw, json) Hash identifier: CVvurIcPZ7LWfuGVPpwrp+DXXgH5HsGBdsQKKKkifdE= Subject key identifier: FA:DB:25:59:C9:FE:88:0A:F7:FD:96:E9:A9:2A:56:4C:22:05:10:4C Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848BE861ABD3E397AA50530C680 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 1239 IP address blocks: 67.159.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:1a:bd:3e:39:7a:a5:05:30:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=66e544e5-cd09-48de-965b-893da2ec23ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:20:f8:84:ee:a7:24:49:a0:ad:2a:50:64:19: c0:c5:7d:6e:a4:67:e3:4c:e1:85:b6:12:61:5c:b6: 94:2d:a2:30:64:07:a9:9e:b6:b5:17:e3:bb:a4:a7: 97:bc:89:fd:04:71:07:9d:86:f0:1f:2e:89:cf:20: c7:61:aa:d0:8c:c1:b1:96:83:78:d8:21:5b:d1:aa: 84:08:a7:0e:10:f2:0d:83:e0:2d:8d:fb:e0:03:20: 65:e0:fb:d8:4f:7c:8a:88:0a:2d:0c:32:74:ee:c8: 6c:da:08:0c:6e:ce:12:59:e1:6e:3b:e9:a3:e5:29: 4e:15:bf:5b:01:49:94:0c:2c:1f:b5:e9:36:c8:42: c7:b1:e2:ed:e9:51:2e:ca:7f:e5:44:b1:57:dc:8d: d3:1a:10:d2:d0:c1:0e:af:7a:24:38:eb:b7:18:fb: 4d:7a:bb:b4:3e:b1:17:32:f9:c8:a4:a1:bf:b3:eb: a4:e3:d7:e6:d5:8f:32:42:9f:d5:88:0a:ce:f2:58: 55:6f:a0:7d:34:c3:ea:e6:ad:58:18:e6:9c:e8:1b: 39:a8:06:4b:c5:7b:6b:47:d2:7f:0f:24:b3:b7:ad: 01:10:fd:79:25:d4:f4:e2:c7:bc:fb:78:61:22:17: a1:6d:37:a7:27:6b:47:1a:63:d4:b0:a6:0c:e7:06: 78:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:DB:25:59:C9:FE:88:0A:F7:FD:96:E9:A9:2A:56:4C:22:05:10:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b246ad75-ecad-3443-88db-9306bb30ede8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:e3:e4:3b:20:e4:2f:17:6f:71:2e:d5:4e:ef:15:3b:d4:55: 08:45:60:b6:13:74:95:24:b6:cc:eb:18:dd:03:0e:e3:33:37: 3a:5c:fc:d3:26:f5:a4:f7:a8:bc:1e:73:d5:65:22:aa:cd:11: bf:44:2c:e7:0f:74:a5:7b:7a:ab:b2:55:8e:bd:f5:79:cb:99: 2f:d0:08:09:15:17:88:f0:7a:b0:d5:83:d8:43:14:12:6a:aa: 7d:66:77:48:70:26:5c:d8:16:9b:52:73:7d:bd:58:e0:a0:47: 73:60:eb:72:31:be:86:b4:5c:84:29:2b:e1:63:6f:c9:be:04: af:21:ee:9d:01:fd:3c:40:0b:bd:7e:4b:73:d7:59:f3:ed:b9: 25:d2:93:75:05:68:a1:ba:fc:44:5e:d8:e8:37:74:9f:cd:13: e3:fc:7b:c4:d1:5c:16:32:f3:cb:ab:ec:6d:10:b5:83:c4:2e: 15:a6:3a:82:f2:ac:7d:eb:67:e7:75:c3:5f:b9:f8:52:b7:68: 3d:be:bb:2a:96:27:39:c0:ca:9a:c7:1f:5c:82:5a:36:81:64: 02:a3:dc:ee:5e:90:fa:03:fb:bb:55:d7:e1:6c:af:a1:c2:1a: 78:3d:59:bf:85:9b:c6:58:07:4a:a4:78:79:ab:e8:42:b2:fd: db:55:51:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hhq9Pjl6pQUwxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk NjZlNTQ0ZTUtY2QwOS00OGRlLTk2NWItODkzZGEyZWMyM2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySD4hO6nJEmgrSpQZBnAxX1upGfjTOGFthJh XLaULaIwZAepnra1F+O7pKeXvIn9BHEHnYbwHy6JzyDHYarQjMGxloN42CFb0aqE CKcOEPINg+AtjfvgAyBl4PvYT3yKiAotDDJ07shs2ggMbs4SWeFuO+mj5SlOFb9b AUmUDCwftek2yELHseLt6VEuyn/lRLFX3I3TGhDS0MEOr3okOOu3GPtNeru0PrEX MvnIpKG/s+uk49fm1Y8yQp/ViArO8lhVb6B9NMPq5q1YGOac6Bs5qAZLxXtrR9J/ DySzt60BEP15JdT04se8+3hhIhehbTenJ2tHGmPUsKYM5wZ4OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPrbJVnJ/ogK9/2W6akqVkwiBRBMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjI0NmFkNzUtZWNhZC0z NDQzLTg4ZGItOTMwNmJiMzBlZGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPj5Dsg5C8Xb3Eu1U7vFTvUVQhFYLYTdJUktszrGN0DDuMzNzpc/NMm 9aT3qLwec9VlIqrNEb9ELOcPdKV7equyVY699XnLmS/QCAkVF4jwerDVg9hDFBJq qn1md0hwJlzYFptSc329WOCgR3Ng63Ixvoa0XIQpK+Fjb8m+BK8h7p0B/TxAC71+ S3PXWfPtuSXSk3UFaKG6/ERe2Og3dJ/NE+P8e8TRXBYy88ur7G0QtYPELhWmOoLy rH3rZ+d1w1+5+FK3aD2+uyqWJznAyprHH1yCWjaBZAKj3O5ekPoD+7tV1+Fsr6HC Gng9Wb+Fm8ZYB0qkeHmr6EKy/dtVUTM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:02 2025 by rpki-client