$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcc0174b-4eb6-38b8-8952-dc57231f752e.roa File: fcc0174b-4eb6-38b8-8952-dc57231f752e.roa (raw, json) Hash identifier: wkQS2YVsfwLoE75a8DeUjAEJ5lj59QopVDI0di4eEwU= Subject key identifier: A9:91:C5:8B:E6:DD:4A:1C:A6:7A:82:A5:CE:F8:0C:F7:DE:89:1B:A6 Certificate issuer: /CN=934f4dde-b680-46f3-8723-45f78b94fd80 Certificate serial: 010D0C9F432858499AF471C139AC1FF61D3D2600 Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcc0174b-4eb6-38b8-8952-dc57231f752e.roa Signing time: Tue 22 Apr 2025 01:00:47 +0000 ROA not before: Tue 22 Apr 2025 01:00:47 +0000 ROA not after: Mon 21 Jul 2025 01:00:47 +0000 asID: 30058 IP address blocks: 67.159.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9a:f4:71:c1:39:ac:1f:f6:1d:3d:26:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80 Validity Not Before: Apr 22 01:00:47 2025 GMT Not After : Jul 21 01:00:47 2025 GMT Subject: CN=606dce5d-efe9-4802-a6f6-76b1c68a6232 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c4:38:ef:62:de:07:51:67:e7:11:89:48:f6: 40:d6:f0:a3:80:75:94:35:ae:1d:00:a5:93:f6:0b: 2d:e9:73:a7:f7:ca:09:f6:b8:06:da:aa:4d:b9:f0: 63:61:96:2a:cd:e7:8c:1f:e5:c5:72:9f:12:d2:0b: a7:e2:1c:a6:99:8c:a0:5d:bb:47:9f:01:5c:86:e9: 8b:b9:ca:08:a3:9e:d8:ef:88:7b:5d:6f:f9:f2:5c: 70:98:02:69:2f:fe:58:d4:dd:ea:22:cc:32:ac:9b: ad:9e:4f:79:31:29:47:ae:62:b2:ef:e5:8f:32:bb: a5:23:55:aa:6e:57:8d:ff:ab:6c:27:c7:92:23:67: ed:26:0a:03:52:7a:31:91:7d:5c:97:ea:04:f8:5c: d5:df:89:2b:b5:fb:cd:06:b2:a4:c2:20:2d:17:dd: a2:33:24:6f:f6:72:d0:9b:97:a0:e5:e8:0a:9b:71: 26:64:bb:c1:35:cc:4c:ac:2d:da:76:96:6e:3f:c2: fb:7c:26:5f:5f:62:7d:21:49:85:b6:e3:3b:12:df: 7a:04:64:8b:dc:8f:dd:e4:11:09:3f:38:a7:48:0e: bc:6f:c6:51:5b:22:56:91:c6:c3:f0:06:83:66:e5: 42:b9:56:32:8c:2d:4f:9c:df:6c:95:3e:b1:d5:40: e6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:91:C5:8B:E6:DD:4A:1C:A6:7A:82:A5:CE:F8:0C:F7:DE:89:1B:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/fcc0174b-4eb6-38b8-8952-dc57231f752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl X509v3 Authority Key Identifier: keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer sbgp-ipAddrBlock: critical IPv4: 67.159.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:98:69:04:80:3f:d7:08:74:33:20:63:4b:80:29:00:c9:03: 8e:80:b1:43:12:ad:8b:30:e8:d5:61:30:3b:cd:d6:26:4e:9a: f9:64:86:77:74:3d:3e:09:75:dc:c2:34:38:38:7f:94:f7:a7: 77:6f:61:77:9f:38:60:44:b2:4e:9f:bc:61:cb:47:fd:8d:36: ef:be:73:db:51:54:f6:23:75:42:6b:16:6e:28:9f:14:af:a3: 25:eb:2c:b6:34:52:70:c4:f1:45:e3:e3:bb:17:7d:fb:aa:b9: 30:f4:ff:ae:4d:3a:68:2c:5e:20:e2:67:a3:90:c5:94:67:45: 2d:93:38:f2:e4:49:87:64:1e:b5:8b:87:05:cc:e2:9c:69:43: 4c:1b:5a:1c:ce:10:02:1b:61:10:25:e7:45:c9:50:04:7f:69: cc:12:fd:fc:e4:20:32:02:f9:d9:40:fc:85:43:8e:8f:70:23: 6a:af:29:1c:f2:9b:ff:8b:90:f1:5f:1e:ce:bd:8c:5d:08:a0: b9:16:cf:5d:90:79:04:00:91:42:04:81:3c:96:ed:e0:68:32: 3d:cd:8f:9b:2b:cf:a5:82:98:dc:45:31:ae:7e:a5:af:98:3a: 26:0f:59:33:e1:d6:7b:b3:13:2f:a8:ce:dd:ae:c7:ff:3c:e8: 6a:91:b8:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HHBOawf9h09JgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm ZDgwMB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk NjA2ZGNlNWQtZWZlOS00ODAyLWE2ZjYtNzZiMWM2OGE2MjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicQ472LeB1Fn5xGJSPZA1vCjgHWUNa4dAKWT 9gst6XOn98oJ9rgG2qpNufBjYZYqzeeMH+XFcp8S0gun4hymmYygXbtHnwFchumL ucoIo57Y74h7XW/58lxwmAJpL/5Y1N3qIswyrJutnk95MSlHrmKy7+WPMrulI1Wq bleN/6tsJ8eSI2ftJgoDUnoxkX1cl+oE+FzV34krtfvNBrKkwiAtF92iMyRv9nLQ m5eg5egKm3EmZLvBNcxMrC3adpZuP8L7fCZfX2J9IUmFtuM7Et96BGSL3I/d5BEJ PzinSA68b8ZRWyJWkcbD8AaDZuVCuVYyjC1PnN9slT6x1UDmtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmRxYvm3UocpnqCpc74DPfeiRumMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvZmNjMDE3NGItNGViNi0z OGI4LTg5NTItZGM1NzIzMWY3NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3 MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0 ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3 OGI5NGZkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ585MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMSYaQSAP9cIdDMgY0uAKQDJA46AsUMSrYsw6NVhMDvN1iZOmvlkhnd0 PT4JddzCNDg4f5T3p3dvYXefOGBEsk6fvGHLR/2NNu++c9tRVPYjdUJrFm4onxSv oyXrLLY0UnDE8UXj47sXffuquTD0/65NOmgsXiDiZ6OQxZRnRS2TOPLkSYdkHrWL hwXM4pxpQ0wbWhzOEAIbYRAl50XJUAR/acwS/fzkIDIC+dlA/IVDjo9wI2qvKRzy m/+LkPFfHs69jF0IoLkWz12QeQQAkUIEgTyW7eBoMj3Nj5srz6WCmNxFMa5+pa+Y OiYPWTPh1nuzEy+ozt2ux/886GqRuLE= -----END CERTIFICATE-----Generated at Sat May 10 05:23:27 2025 by rpki-client