$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa File: b358fd28-78e4-32fd-8779-c6ee2c15a485.roa (raw, json) Hash identifier: JFdx6qVCtbd6kIZqhH6PPZ8dLc0Z4uyIVdtMO/VJDCI= Subject key identifier: 88:85:A2:6D:B4:67:94:1F:E9:87:5E:A2:94:F1:76:0D:23:47:C2:5D Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F43285848BE861AEFA8FC0756841E3100 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa Signing time: Sun 02 Feb 2025 02:00:39 +0000 ROA not before: Sun 02 Feb 2025 02:00:39 +0000 ROA not after: Sat 03 May 2025 01:00:39 +0000 asID: 1239 IP address blocks: 67.159.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:be:86:1a:ef:a8:fc:07:56:84:1e:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Feb 2 02:00:39 2025 GMT Not After : May 3 01:00:39 2025 GMT Subject: CN=0c6d67c2-fc4f-4e46-9818-197ac0f36980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:30:00:f0:9b:ea:67:4e:f6:b5:27:65:37:a5: 91:88:20:6b:3f:76:a3:9b:97:60:a2:6a:8b:f0:b1: fe:83:e6:f9:7c:23:d2:d4:e8:c0:7a:52:d5:aa:f5: 21:4c:07:36:2d:50:c7:69:ef:5d:03:1b:03:66:78: 7f:56:79:c0:99:5d:92:9c:25:1b:cc:9d:ed:5c:7a: 67:60:4e:cd:43:4e:a8:3d:81:34:bd:fd:4d:25:cc: 78:26:28:3e:f3:a2:bd:a9:ee:41:2a:a5:a9:f9:6f: 41:e2:87:c2:78:90:6a:1a:08:5a:6b:17:a7:35:0e: 64:34:1b:3d:5f:79:79:5f:5e:fa:dd:ba:eb:89:12: 77:8f:a6:b2:95:70:26:1f:ac:cf:78:b1:3d:9c:86: be:93:3a:09:40:24:69:fa:8a:fd:70:d2:19:77:f4: 5a:a6:a1:f4:7e:2a:6e:24:c4:cb:5e:06:e3:12:51: 11:db:6b:42:bc:90:b7:8b:3e:8b:f4:55:a2:d9:1c: 12:b9:5f:19:98:47:72:a8:dd:41:e2:f4:06:90:22: 80:bc:3b:62:7f:98:a7:37:78:09:df:dd:50:d2:07: 0f:a5:b9:ab:0f:81:a5:80:de:7e:ad:45:e4:2b:d2: 1c:20:5a:e3:4d:db:91:5e:33:0e:65:cd:c5:d2:7d: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:85:A2:6D:B4:67:94:1F:E9:87:5E:A2:94:F1:76:0D:23:47:C2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/b358fd28-78e4-32fd-8779-c6ee2c15a485.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:04:42:ee:35:ce:75:35:b3:4b:d1:da:9a:86:11:46:6b:ab: 2e:fc:6d:ff:33:00:3f:db:92:9a:90:85:88:80:d5:24:c1:c8: d6:98:aa:b3:72:c2:de:93:8d:8e:e3:36:7e:8a:d9:90:a2:4a: 66:b8:ed:af:dc:b5:9a:90:83:fa:10:92:14:92:12:01:d0:8b: df:73:5d:1d:9e:88:21:0d:63:b3:12:f1:67:f2:b4:5f:e1:b8: ce:22:25:8e:b8:93:7c:9a:16:de:62:76:25:90:f3:30:9b:58: 35:40:d5:05:17:56:bf:5b:be:93:10:ad:56:9c:83:ef:1e:cf: a0:ec:c8:8e:3c:d3:e4:ac:58:ca:08:d9:f0:56:a8:9e:3a:91: ee:ca:5a:6d:27:fe:17:fe:06:2c:70:f0:05:94:cd:3e:82:9e: 30:e6:3d:31:0c:ea:d0:cd:0b:38:28:ff:9c:db:5c:ba:d8:58: ee:74:74:d7:a9:ba:78:6a:a6:a0:65:48:4f:83:1a:64:06:77: e7:36:ea:ca:a1:bb:bd:eb:91:2b:f7:94:02:43:1a:83:d4:6b: d4:3d:45:34:3e:e6:34:79:9d:95:8f:43:ba:d5:b6:76:51:8e: 76:b0:aa:0f:8b:e2:1a:01:0c:4c:d2:00:07:5f:f6:8e:c3:49: e4:e5:1d:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hhrvqPwHVoQeMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk MGM2ZDY3YzItZmM0Zi00ZTQ2LTk4MTgtMTk3YWMwZjM2OTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zAA8JvqZ072tSdlN6WRiCBrP3ajm5dgomqL 8LH+g+b5fCPS1OjAelLVqvUhTAc2LVDHae9dAxsDZnh/VnnAmV2SnCUbzJ3tXHpn YE7NQ06oPYE0vf1NJcx4Jig+86K9qe5BKqWp+W9B4ofCeJBqGghaaxenNQ5kNBs9 X3l5X1763brriRJ3j6aylXAmH6zPeLE9nIa+kzoJQCRp+or9cNIZd/RapqH0fipu JMTLXgbjElER22tCvJC3iz6L9FWi2RwSuV8ZmEdyqN1B4vQGkCKAvDtif5inN3gJ 391Q0gcPpbmrD4GlgN5+rUXkK9IcIFrjTduRXjMOZc3F0n3ZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIiFom20Z5Qf6YdeopTxdg0jR8JdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYjM1OGZkMjgtNzhlNC0z MmZkLTg3NzktYzZlZTJjMTVhNDg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwEQu41znU1s0vR2pqGEUZrqy78bf8zAD/bkpqQhYiA1STByNaYqrNy wt6TjY7jNn6K2ZCiSma47a/ctZqQg/oQkhSSEgHQi99zXR2eiCENY7MS8WfytF/h uM4iJY64k3yaFt5idiWQ8zCbWDVA1QUXVr9bvpMQrVacg+8ez6DsyI480+SsWMoI 2fBWqJ46ke7KWm0n/hf+Bixw8AWUzT6CnjDmPTEM6tDNCzgo/5zbXLrYWO50dNep unhqpqBlSE+DGmQGd+c26sqhu73rkSv3lAJDGoPUa9Q9RTQ+5jR5nZWPQ7rVtnZR jnawqg+L4hoBDEzSAAdf9o7DSeTlHZs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:54 2025 by rpki-client