$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa File: c54223f6-3607-352e-8d03-6529dcae3ba8.roa (raw, json) Hash identifier: zXatBoQp9ebvEl0qEfBY21mNEg0VLXKNleW2+A3RKnk= Subject key identifier: B0:5E:8B:18:0F:9B:FB:1A:87:CD:4F:0F:6C:23:B6:BC:20:68:4F:13 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858490F7BEF3BEAF49C9434408900 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa Signing time: Mon 03 Mar 2025 02:00:39 +0000 ROA not before: Mon 03 Mar 2025 02:00:39 +0000 ROA not after: Sun 01 Jun 2025 01:00:39 +0000 asID: 174 IP address blocks: 67.159.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:0f:7b:ef:3b:ea:f4:9c:94:34:40:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 3 02:00:39 2025 GMT Not After : Jun 1 01:00:39 2025 GMT Subject: CN=a3a2ab9a-31ff-45e1-9b02-f6e7c6e84bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:b5:cc:86:b0:fd:ac:13:9b:15:c6:4e:df:e3: 7c:4f:18:6b:01:de:e9:63:db:7d:9d:ed:7c:93:88: a9:53:d3:44:a1:94:a2:7f:34:23:4a:95:01:e5:91: 0e:a4:81:fa:ca:d8:42:5b:ac:aa:a0:98:3c:90:b8: 39:d4:e9:88:b4:e3:74:dd:b0:a1:8d:af:a6:e5:7d: 09:a3:56:6c:0d:a3:6e:4a:79:a0:85:f6:5c:4b:2b: 71:fd:70:2d:47:62:04:37:dd:8e:91:d5:97:5e:ae: 69:62:a3:07:62:c4:6b:9b:19:3b:48:ff:45:b3:90: 5d:3d:d2:e3:e0:b1:cf:cc:9f:2e:fe:cb:f9:29:4b: 67:b3:64:d1:ed:fa:a3:cf:a5:cf:ea:70:7f:9b:08: 89:9e:b5:88:98:0c:7d:90:1e:7d:74:fc:3c:93:be: bd:14:2b:72:db:fc:cb:b8:6f:98:5f:bd:b2:1b:bd: 25:e4:4a:81:76:35:2c:db:4d:c4:11:bc:28:0e:a8: 97:88:4b:b5:17:0a:96:a8:65:49:c8:24:7a:2d:ff: b5:d4:33:3a:1b:42:2b:f0:58:83:59:77:f0:b8:29: 4d:29:c9:d9:fd:0b:95:47:d4:03:de:0d:a8:71:5b: a1:ce:9b:d0:41:cf:b9:14:9c:96:e4:fc:2c:82:2b: e8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:5E:8B:18:0F:9B:FB:1A:87:CD:4F:0F:6C:23:B6:BC:20:68:4F:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c54223f6-3607-352e-8d03-6529dcae3ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:5c:41:03:f7:cb:9c:b0:0d:4e:0d:3d:e4:bb:cf:78:7b:69: 10:4c:54:ff:ec:a5:3e:a4:cc:bf:8b:7d:26:8b:f4:23:50:5d: 5c:0b:7b:69:8e:b5:e1:99:29:7d:35:71:e2:a6:78:86:0c:da: 44:b9:c2:47:a3:d7:c4:65:fd:8e:bb:42:22:b1:8e:ea:18:72: bb:39:2d:f3:0f:51:68:8f:63:dd:8f:4d:06:d8:81:7c:b4:1a: da:7b:d8:de:44:c7:d6:a0:65:b5:4b:1a:7e:83:d4:dc:3c:32: ab:67:10:f4:98:16:b7:0c:b8:e6:4d:ae:66:5e:5b:ef:93:e5: c7:4e:61:d2:b0:81:79:16:ae:8e:f3:38:70:65:bb:96:18:c6: 24:83:92:e6:79:33:f1:c0:00:7d:e8:63:fa:f1:63:d7:87:1b: 21:4d:9b:b6:83:28:f4:ea:b8:cb:b9:c8:26:ff:c7:89:02:99: 5d:7e:ac:da:7d:12:81:8f:af:37:ca:b2:27:58:b8:16:77:82: 29:c9:3b:30:be:9f:72:8a:b5:ea:98:af:96:b6:68:cd:cf:42: 4a:9a:fd:4e:69:f8:54:46:ff:65:27:7c:6c:de:a1:47:4a:c1: de:37:aa:4f:bf:d1:ef:8e:57:fc:09:7a:44:f3:f5:af:c1:33: 98:69:9f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkPe+876vSclDRAiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMwMzAyMDAzOVoXDTI1MDYwMTAxMDAzOVowLzEtMCsGA1UEAxMk YTNhMmFiOWEtMzFmZi00NWUxLTliMDItZjZlN2M2ZTg0YmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9rXMhrD9rBObFcZO3+N8TxhrAd7pY9t9ne18 k4ipU9NEoZSifzQjSpUB5ZEOpIH6ythCW6yqoJg8kLg51OmItON03bChja+m5X0J o1ZsDaNuSnmghfZcSytx/XAtR2IEN92OkdWXXq5pYqMHYsRrmxk7SP9Fs5BdPdLj 4LHPzJ8u/sv5KUtns2TR7fqjz6XP6nB/mwiJnrWImAx9kB59dPw8k769FCty2/zL uG+YX72yG70l5EqBdjUs203EEbwoDqiXiEu1FwqWqGVJyCR6Lf+11DM6G0Ir8FiD WXfwuClNKcnZ/QuVR9QD3g2ocVuhzpvQQc+5FJyW5PwsgivoIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBeixgPm/sah81PD2wjtrwgaE8TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzU0MjIzZjYtMzYwNy0z NTJlLThkMDMtNjUyOWRjYWUzYmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ58SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1cQQP3y5ywDU4NPeS7z3h7aRBMVP/spT6kzL+LfSaL9CNQXVwLe2mO teGZKX01ceKmeIYM2kS5wkej18Rl/Y67QiKxjuoYcrs5LfMPUWiPY92PTQbYgXy0 Gtp72N5Ex9agZbVLGn6D1Nw8MqtnEPSYFrcMuOZNrmZeW++T5cdOYdKwgXkWro7z OHBlu5YYxiSDkuZ5M/HAAH3oY/rxY9eHGyFNm7aDKPTquMu5yCb/x4kCmV1+rNp9 EoGPrzfKsidYuBZ3ginJOzC+n3KKteqYr5a2aM3PQkqa/U5p+FRG/2UnfGzeoUdK wd43qk+/0e+OV/wJekTz9a/BM5hpn/Y= -----END CERTIFICATE-----Generated at Tue Apr 15 06:32:14 2025 by rpki-client