$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa File: 02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa (raw, json) Hash identifier: dvpmn3ZI/TlpRaoifTE9K6viiouf8Fqst0igJxas+VY= Subject key identifier: 03:8E:AE:FB:45:D0:37:07:93:38:31:76:70:55:4B:FD:61:02:F5:6B Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FC9BF1F67E2BAEDE6AD80 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 67.221.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c9:bf:1f:67:e2:ba:ed:e6:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=4938d525-65d9-4490-9d8b-9031f0d359b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:d8:58:6f:44:58:74:47:c8:f0:b8:e3:e9: 45:ae:ed:9c:cb:cf:80:f4:6d:31:18:2b:67:85:95: a7:8a:fe:6e:44:10:4a:ce:be:7e:91:2d:5c:ef:c1: 70:82:67:40:46:a8:97:d6:9c:9d:50:b5:1d:1a:bf: b2:a5:50:9a:57:78:54:0f:27:15:66:21:e6:09:66: 8b:a7:6a:ca:b6:0e:01:09:ca:9f:ef:38:57:df:b7: 99:fc:26:35:10:a4:e9:8a:8e:4c:bb:b8:a8:40:40: fc:f3:d1:09:42:ec:5e:25:53:2c:d9:ee:75:25:ca: 72:f5:ee:b3:fa:29:dd:e7:c8:cf:48:a0:c2:16:0a: 59:09:97:75:23:83:71:e5:45:47:d5:db:8a:81:6f: 12:b4:f5:b2:a5:ba:de:66:f8:5c:31:2c:23:89:e4: 7e:b7:a5:a9:a5:2e:43:6c:1b:77:36:9f:77:0a:49: 00:cf:da:e4:37:93:96:c6:e5:4d:e3:87:33:a9:a7: 16:1c:95:56:00:33:20:a2:8a:80:17:d3:52:25:2f: e6:73:cc:a6:4a:2d:1e:c5:f2:3f:fd:41:ce:e2:47: 8e:fe:27:04:27:d8:37:83:c9:78:62:d0:81:e8:1e: 97:b7:a6:85:83:31:90:44:d1:e3:4a:2f:1b:30:d4: 13:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:8E:AE:FB:45:D0:37:07:93:38:31:76:70:55:4B:FD:61:02:F5:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:c7:ed:16:1d:18:21:e5:87:43:49:b8:2c:62:60:86:89:5a: 32:26:60:02:83:87:37:55:4f:2e:06:01:b3:32:66:ee:9b:e1: 18:3c:40:13:b6:5a:a6:0f:14:db:0b:26:be:e6:1e:8f:6b:58: 43:d7:db:93:4f:0e:6b:6b:7c:f5:cc:2d:5f:a8:ad:f9:fc:f1: 4c:85:b5:f7:7f:63:3f:7d:56:1f:a9:23:13:b3:62:58:f6:0f: dd:21:9c:5f:dd:cd:12:3a:40:ab:d3:95:b7:d0:81:80:a9:dc: 80:d6:6f:d0:81:08:e1:41:6b:49:48:63:5e:78:51:70:57:07: 64:aa:fd:82:c8:7c:49:5c:51:a2:13:63:28:d8:f4:fe:29:22: 3b:05:f7:30:ac:3e:69:ad:3e:4a:41:3b:a2:5f:47:4c:d0:a7: 66:11:1e:5f:c6:10:02:5e:94:27:dd:84:4b:b4:06:c3:32:e5: 0b:4c:52:41:cc:f0:bb:4b:73:0b:3f:c4:a1:d5:98:fb:67:f5: 63:35:01:8b:25:45:87:05:00:94:08:fc:27:e1:42:e7:1c:1c: 8d:53:ec:0c:30:a3:4f:c9:b2:37:21:c0:b2:3b:de:bc:a2:47: 47:38:33:c0:ef:da:d5:19:61:0f:78:1d:17:41:4f:da:cb:ae: dc:65:7b:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8m/H2fiuu3mrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk NDkzOGQ1MjUtNjVkOS00NDkwLTlkOGItOTAzMWYwZDM1OWIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr3YWG9EWHRHyPC44+lFru2cy8+A9G0xGCtn hZWniv5uRBBKzr5+kS1c78FwgmdARqiX1pydULUdGr+ypVCaV3hUDycVZiHmCWaL p2rKtg4BCcqf7zhX37eZ/CY1EKTpio5Mu7ioQED889EJQuxeJVMs2e51Jcpy9e6z +ind58jPSKDCFgpZCZd1I4Nx5UVH1duKgW8StPWypbreZvhcMSwjieR+t6WppS5D bBt3Np93CkkAz9rkN5OWxuVN44czqacWHJVWADMgooqAF9NSJS/mc8ymSi0exfI/ /UHO4keO/icEJ9g3g8l4YtCB6B6Xt6aFgzGQRNHjSi8bMNQTdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOOrvtF0DcHkzgxdnBVS/1hAvVrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDIyMzhmZjgtYjdhZC0z ZjMxLWJiMTYtZmY0YzBhNmExMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATH7RYdGCHlh0NJuCxiYIaJWjImYAKDhzdVTy4GAbMyZu6b4Rg8QBO2 WqYPFNsLJr7mHo9rWEPX25NPDmtrfPXMLV+orfn88UyFtfd/Yz99Vh+pIxOzYlj2 D90hnF/dzRI6QKvTlbfQgYCp3IDWb9CBCOFBa0lIY154UXBXB2Sq/YLIfElcUaIT YyjY9P4pIjsF9zCsPmmtPkpBO6JfR0zQp2YRHl/GEAJelCfdhEu0BsMy5QtMUkHM 8LtLcws/xKHVmPtn9WM1AYslRYcFAJQI/CfhQuccHI1T7Awwo0/JsjchwLI73ryi R0c4M8Dv2tUZYQ94HRdBT9rLrtxle9I= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:28 2025 by rpki-client