$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa File: 0545dbf9-118c-39b7-9f00-b538a6304e31.roa (raw, json) Hash identifier: 2Hx325e9nRanBqz5l0jTY1PHVzZynix8XKKPuihsuIM= Subject key identifier: B3:B5:07:C7:F0:12:89:9E:FD:96:8A:5E:C1:87:8C:02:4F:97:89:BB Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848EF6146D2EE896A74B95EF580 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 67.221.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:46:d2:ee:89:6a:74:b9:5e:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=e7ae131e-892c-41be-94ae-5c931b4f6a5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:40:a2:20:db:49:5a:d7:f9:bf:37:0e:d6: 9a:ca:c6:70:d5:ee:24:4c:38:9b:7f:0d:4e:f6:3c: 4b:e7:ba:b3:58:1f:ba:36:f9:21:03:da:03:a1:15: ca:ce:92:83:4d:48:1d:2f:ca:02:3d:e1:30:69:7e: 3a:4e:9d:fd:11:94:e8:46:2c:d9:45:24:bb:51:14: 45:bd:fc:41:60:60:62:5e:75:ea:e8:ef:93:23:88: c6:4e:e9:58:e1:44:58:84:8a:c0:2d:9b:25:5e:ad: f7:f2:a3:7b:45:14:ac:a0:0c:87:8c:37:d2:7e:5c: b2:dd:54:d7:8a:4b:b8:72:72:3e:11:5d:7e:2d:1c: 37:ae:b2:76:0d:8b:2a:02:75:b2:02:ee:13:fb:50: 16:00:48:14:2c:01:35:9e:d9:27:cf:0d:0d:b8:51: 54:f8:3a:0c:05:c2:b0:c0:80:3d:8e:18:4c:54:c7: 18:80:4b:ed:8e:4f:ba:64:78:1b:bd:3d:f4:d2:9c: 87:b7:15:a3:5a:6c:5f:24:21:ae:82:48:1c:fe:88: 10:97:70:d2:14:d8:e5:10:81:02:9a:e7:b5:10:a6: c8:83:f9:04:32:bf:ee:f2:7b:ab:14:65:c7:94:05: 72:5c:53:a7:fd:be:f5:ac:a9:82:69:42:6f:eb:1c: 91:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:07:C7:F0:12:89:9E:FD:96:8A:5E:C1:87:8C:02:4F:97:89:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/0545dbf9-118c-39b7-9f00-b538a6304e31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:38:a9:02:b3:d4:dc:7c:7b:6a:34:cb:80:92:28:46:7b:29: 83:e8:22:a7:83:7b:69:fe:2a:72:d2:b9:0a:c8:9b:9e:2b:fc: 3f:98:3f:ad:49:17:5a:d4:21:1e:fa:33:fa:17:38:3d:aa:10: 07:00:f1:f3:98:60:ee:12:52:dd:b9:56:f7:e0:2b:e8:2b:fe: 53:61:58:a2:c1:22:3a:09:8a:08:d4:d4:af:5d:84:42:45:c0: 06:e7:4f:3b:a6:64:40:ac:64:50:83:7c:52:d4:8a:e5:4d:ff: 53:54:2a:92:a2:c3:d6:03:c4:d4:1f:5b:da:97:de:dd:4e:6b: 71:7d:ed:cb:3f:5c:94:c5:9e:d5:00:98:4a:17:9c:fc:2d:a6: 7d:b1:d8:e8:25:98:0e:bf:85:0f:bd:00:ed:9b:b3:5d:44:11: 90:d5:05:7d:70:63:e5:d9:d8:22:6c:70:91:c1:d8:f6:75:5d: 5c:3c:18:18:0a:3d:9f:e2:db:bb:ce:1e:b1:53:77:72:6e:79: 61:1a:36:ca:d0:01:0c:3b:ae:4a:87:9d:a5:e2:ee:19:e1:c2: d6:98:b0:8a:a0:5a:42:a5:a6:1b:4e:aa:d0:39:54:fc:ab:a4: 54:a0:0b:65:0a:67:db:d8:39:2b:80:fd:7f:2b:9e:6d:19:ec: cb:f3:93:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUbS7olqdLle9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk ZTdhZTEzMWUtODkyYy00MWJlLTk0YWUtNWM5MzFiNGY2YTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQxAoiDbSVrX+b83DtaaysZw1e4kTDibfw1O 9jxL57qzWB+6NvkhA9oDoRXKzpKDTUgdL8oCPeEwaX46Tp39EZToRizZRSS7URRF vfxBYGBiXnXq6O+TI4jGTulY4URYhIrALZslXq338qN7RRSsoAyHjDfSflyy3VTX iku4cnI+EV1+LRw3rrJ2DYsqAnWyAu4T+1AWAEgULAE1ntknzw0NuFFU+DoMBcKw wIA9jhhMVMcYgEvtjk+6ZHgbvT300pyHtxWjWmxfJCGugkgc/ogQl3DSFNjlEIEC mue1EKbIg/kEMr/u8nurFGXHlAVyXFOn/b71rKmCaUJv6xyR8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO1B8fwEome/ZaKXsGHjAJPl4m7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDU0NWRiZjktMTE4Yy0z OWI3LTlmMDAtYjUzOGE2MzA0ZTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC44qQKz1Nx8e2o0y4CSKEZ7KYPoIqeDe2n+KnLSuQrIm54r/D+YP61J F1rUIR76M/oXOD2qEAcA8fOYYO4SUt25VvfgK+gr/lNhWKLBIjoJigjU1K9dhEJF wAbnTzumZECsZFCDfFLUiuVN/1NUKpKiw9YDxNQfW9qX3t1Oa3F97cs/XJTFntUA mEoXnPwtpn2x2OglmA6/hQ+9AO2bs11EEZDVBX1wY+XZ2CJscJHB2PZ1XVw8GBgK PZ/i27vOHrFTd3JueWEaNsrQAQw7rkqHnaXi7hnhwtaYsIqgWkKlphtOqtA5VPyr pFSgC2UKZ9vYOSuA/X8rnm0Z7Mvzk68= -----END CERTIFICATE-----Generated at Mon Apr 28 09:05:28 2025 by rpki-client