$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa File: 13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa (raw, json) Hash identifier: NThJfT+t98wNSUqMgkjyMap6lTvMX7Fcf52pcrwYXwo= Subject key identifier: B6:D7:F4:AF:30:83:4D:C9:64:6B:FD:7F:54:F9:EB:A6:77:33:41:2D Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FCA3C5696365871ACC800 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 137.220.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ca:3c:56:96:36:58:71:ac:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=a525450d-c21d-44f0-a162-29cd4b5b7e91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:99:4a:64:80:bc:e6:98:35:69:15:a9:d1: 6f:a0:ba:d4:72:43:0f:de:6f:7b:a7:70:c0:8f:7a: 1a:d7:5a:89:c2:e6:bf:0c:fc:60:a7:9c:97:20:cc: 03:98:03:48:ae:38:d1:4b:62:6b:8c:55:3b:8a:a9: e7:53:23:ab:e8:0a:6b:28:40:28:8e:6e:87:3d:a6: 8e:a8:42:fe:54:cc:e1:3f:36:bd:d2:32:93:76:e0: 0a:66:95:d0:6c:1b:6c:f7:7b:79:42:42:18:98:1e: 98:c1:04:e1:63:c4:6e:72:a9:50:cf:66:c7:e3:28: a2:dc:4b:a5:3d:04:20:87:54:36:f9:0a:03:d4:16: ac:23:75:5a:00:76:1a:6c:6d:bd:81:d4:72:b4:39: f7:b8:36:2c:5e:07:4c:a3:4f:ed:4a:03:1a:56:26: e1:8c:64:4f:03:08:64:5d:1a:b6:c3:1a:9d:49:f1: 56:96:67:9a:e2:24:d4:3d:44:f0:e4:04:b2:e1:c1: d8:cf:25:5f:05:be:0c:b4:07:34:7d:5a:8a:b1:eb: 83:ea:bd:ab:7e:aa:75:91:79:9a:de:a8:5d:45:e2: a5:7c:4f:80:4d:b8:8d:03:07:7d:4b:30:fb:9c:61: f7:b8:fc:1f:94:49:fc:83:85:8c:9b:51:6e:46:16: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:D7:F4:AF:30:83:4D:C9:64:6B:FD:7F:54:F9:EB:A6:77:33:41:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 137.220.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:01:80:f4:bc:6e:8e:a5:61:6f:34:d5:86:2a:ed:1f:db:ca: 27:aa:b7:dd:21:de:43:09:dd:69:e5:75:6a:54:30:28:13:fe: 39:fa:57:f7:5a:29:8f:7c:28:a3:3f:95:01:f6:f1:56:ce:87: a3:52:32:73:0e:b3:1f:58:58:ed:b1:d9:7a:44:83:1e:c6:7d: 8f:fa:29:c0:77:05:78:82:82:10:c5:1d:90:43:8d:1b:28:88: e5:92:b1:73:c0:68:b1:99:f0:48:7d:21:2c:e1:e6:50:58:1d: ed:50:94:52:6f:27:89:c2:0a:5f:da:53:f3:37:7c:af:8b:79: 71:86:29:8a:dc:35:76:ea:fe:3a:5e:2a:eb:bc:1c:04:63:86: e9:cc:2b:a6:f0:fd:28:38:3c:4f:9f:9b:c5:85:98:69:39:30: 86:ea:f0:bb:b8:5a:22:21:1f:26:b3:31:20:0b:a0:77:8a:e5: fb:4a:c7:5a:d8:3d:50:cd:1e:c1:89:b8:b8:26:88:f1:7b:61: 3e:e6:65:7a:a8:35:98:55:6e:65:02:c7:cf:9c:8f:bd:c9:e6: 3a:7f:20:88:e5:40:3c:0f:87:e7:09:83:5a:79:0e:ac:62:14: 67:21:eb:95:05:a6:b9:62:52:88:90:0d:e2:b7:04:db:71:0f: 03:8b:3f:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8o8VpY2WHGsyAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk YTUyNTQ1MGQtYzIxZC00NGYwLWExNjItMjljZDRiNWI3ZTkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+GZSmSAvOaYNWkVqdFvoLrUckMP3m97p3DA j3oa11qJwua/DPxgp5yXIMwDmANIrjjRS2JrjFU7iqnnUyOr6AprKEAojm6HPaaO qEL+VMzhPza90jKTduAKZpXQbBts93t5QkIYmB6YwQThY8RucqlQz2bH4yii3Eul PQQgh1Q2+QoD1BasI3VaAHYabG29gdRytDn3uDYsXgdMo0/tSgMaVibhjGRPAwhk XRq2wxqdSfFWlmea4iTUPUTw5ASy4cHYzyVfBb4MtAc0fVqKseuD6r2rfqp1kXma 3qhdReKlfE+ATbiNAwd9SzD7nGH3uPwflEn8g4WMm1FuRhajSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbX9K8wg03JZGv9f1T566Z3M0EtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMTNiOWRjNjQtZmNkNi0z MTY4LWJiOGYtNWFhMjgyNmQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAidwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwBgPS8bo6lYW801YYq7R/byieqt90h3kMJ3WnldWpUMCgT/jn6V/da KY98KKM/lQH28VbOh6NSMnMOsx9YWO2x2XpEgx7GfY/6KcB3BXiCghDFHZBDjRso iOWSsXPAaLGZ8Eh9ISzh5lBYHe1QlFJvJ4nCCl/aU/M3fK+LeXGGKYrcNXbq/jpe Kuu8HARjhunMK6bw/Sg4PE+fm8WFmGk5MIbq8Lu4WiIhHyazMSALoHeK5ftKx1rY PVDNHsGJuLgmiPF7YT7mZXqoNZhVbmUCx8+cj73J5jp/IIjlQDwPh+cJg1p5Dqxi FGch65UFprliUoiQDeK3BNtxDwOLP0s= -----END CERTIFICATE-----Generated at Sun Jun 15 23:16:24 2025 by rpki-client