$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa File: c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa (raw, json) Hash identifier: POcWCF86WxNCR0gt32lF5OVtlynR4Mh+OZ2R3b3FHuk= Subject key identifier: 1A:C4:49:DB:F3:87:CD:F3:CA:93:AA:CD:28:B0:FE:3C:28:17:DA:13 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858494F646F402577A41AF5E73100 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa Signing time: Tue 25 Mar 2025 23:25:03 +0000 ROA not before: Tue 25 Mar 2025 23:25:03 +0000 ROA not after: Mon 23 Jun 2025 23:25:03 +0000 asID: 30058 IP address blocks: 67.159.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:64:6f:40:25:77:a4:1a:f5:e7:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Mar 25 23:25:03 2025 GMT Not After : Jun 23 23:25:03 2025 GMT Subject: CN=7984e60c-8074-4b4b-a420-5ff750e8fb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1c:61:2c:81:31:1f:26:32:96:30:3e:4f:3f: de:4d:97:ff:2b:b7:fd:5c:ce:0d:bc:8b:62:e5:49: 89:d3:b4:bf:0f:bb:94:84:36:af:4a:69:21:e4:c0: 50:ab:78:eb:73:b3:30:60:9a:9e:17:1e:26:47:f1: 3e:fd:04:f8:db:e2:a1:76:35:28:13:1a:59:9d:ca: be:3a:29:bb:15:63:98:fb:80:0e:11:4f:5e:2d:01: 60:c2:5a:7c:b6:c6:52:4f:07:84:16:30:c9:86:8f: 61:00:3a:ee:ee:b5:e4:46:50:6e:be:d9:b7:e7:10: 86:43:70:2a:69:1a:39:1d:1b:be:e1:0e:28:39:6e: e0:d7:f4:bd:5f:21:cf:f0:ae:3e:d5:64:1d:7e:56: e8:16:77:04:a0:10:a2:62:3e:25:5d:74:72:2f:9c: 65:21:ee:90:9c:9b:34:b0:c8:86:cb:d7:b0:43:ee: 7c:b5:d1:cf:6a:d1:73:6e:c8:86:85:2e:c4:ed:89: fc:79:d9:47:a9:97:98:f1:3f:94:d8:7f:43:94:5c: cc:04:03:f9:93:10:55:f4:84:ac:6e:49:51:fd:e4: b7:67:5e:bd:34:41:e6:1f:2a:c2:36:c4:ec:38:86: 9b:cd:53:b0:f9:e1:c3:95:41:86:8a:52:de:f6:c5: 1e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:C4:49:DB:F3:87:CD:F3:CA:93:AA:CD:28:B0:FE:3C:28:17:DA:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/c56e15a6-0eab-3d6f-8c9c-5401b10d3100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:cb:37:3d:20:ae:32:13:b1:cc:bd:b0:a8:d5:cc:04:99:23: 5a:55:1b:1a:d6:af:3b:2d:b7:85:d6:1b:9d:73:c6:c9:1a:08: 27:bd:1a:c3:f0:13:bd:b0:6b:7b:43:f7:22:2a:9f:69:97:96: fd:21:17:8c:67:42:2a:6e:1d:6b:9c:1c:4d:9a:5c:51:d8:e3: 4d:4b:3f:13:2a:15:1a:43:15:ab:08:5a:d3:ef:e7:12:2c:ae: ea:d5:6d:74:d7:2b:d4:6f:5a:4f:93:24:0c:3e:18:21:2d:16: f3:ac:fe:1c:cc:2b:73:5b:59:b7:d5:1a:3d:44:7e:35:8a:cf: 4d:77:e1:6e:40:bf:78:88:8c:b4:b5:eb:e2:fe:ed:a6:5c:eb: 45:24:73:13:4d:6b:89:ed:1b:cc:76:02:01:bf:68:75:19:c8: f4:98:c2:57:a9:e7:1c:91:cb:ea:56:d9:0d:bc:4e:07:ae:d3: a4:1d:bb:7b:4a:80:3b:58:45:ec:05:d6:ab:42:c5:a6:e7:34: 86:a6:2f:93:28:82:48:1a:af:77:ee:5d:e4:1e:fe:4d:7c:e3: 91:41:12:04:6d:a0:d9:75:54:d6:1b:77:c8:4a:55:41:1b:b7: 04:f8:73:a1:dc:1d:80:64:68:32:97:28:24:14:04:61:43:fc: 3a:35:6d:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPZG9AJXekGvXnMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDMyNTIzMjUwM1oXDTI1MDYyMzIzMjUwM1owLzEtMCsGA1UEAxMk Nzk4NGU2MGMtODA3NC00YjRiLWE0MjAtNWZmNzUwZThmYjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRxhLIExHyYyljA+Tz/eTZf/K7f9XM4NvIti 5UmJ07S/D7uUhDavSmkh5MBQq3jrc7MwYJqeFx4mR/E+/QT42+KhdjUoExpZncq+ Oim7FWOY+4AOEU9eLQFgwlp8tsZSTweEFjDJho9hADru7rXkRlBuvtm35xCGQ3Aq aRo5HRu+4Q4oOW7g1/S9XyHP8K4+1WQdflboFncEoBCiYj4lXXRyL5xlIe6QnJs0 sMiGy9ewQ+58tdHPatFzbsiGhS7E7Yn8edlHqZeY8T+U2H9DlFzMBAP5kxBV9ISs bklR/eS3Z169NEHmHyrCNsTsOIabzVOw+eHDlUGGilLe9sUeMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrESdvzh83zypOqzSiw/jwoF9oTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvYzU2ZTE1YTYtMGVhYi0z ZDZmLThjOWMtNTQwMWIxMGQzMTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ584MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfLNz0grjITscy9sKjVzASZI1pVGxrWrzstt4XWG51zxskaCCe9GsPw E72wa3tD9yIqn2mXlv0hF4xnQipuHWucHE2aXFHY401LPxMqFRpDFasIWtPv5xIs rurVbXTXK9RvWk+TJAw+GCEtFvOs/hzMK3NbWbfVGj1EfjWKz0134W5Av3iIjLS1 6+L+7aZc60UkcxNNa4ntG8x2AgG/aHUZyPSYwlep5xyRy+pW2Q28Tgeu06Qdu3tK gDtYRewF1qtCxabnNIamL5Mogkgar3fuXeQe/k1845FBEgRtoNl1VNYbd8hKVUEb twT4c6HcHYBkaDKXKCQUBGFD/Do1bXs= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:37 2025 by rpki-client