$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa File: 21f90337-d188-3ea1-97de-8c8ca38cf817.roa (raw, json) Hash identifier: 7qt5EVVAXaN9BsGez9FAQD7lw131G+nN9Kmssc/0Axw= Subject key identifier: 4D:97:E0:ED:66:5C:8C:A4:ED:42:5C:BE:E1:E3:D9:4A:D0:A4:C3:F3 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849CE9A6B15C574CD9C6042D480 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 67.221.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6b:15:c5:74:cd:9c:60:42:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=314b9f1d-51e3-4aec-8517-79fed3080b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e1:22:0c:02:17:e7:3e:9b:aa:90:77:8e:30: b3:2f:c6:00:4c:1e:9f:2a:dd:37:2b:91:9c:69:62: 03:37:d5:50:a4:4f:0b:8b:c9:aa:d4:ec:8c:a1:e0: f1:4f:96:42:b2:5e:c1:58:ae:d7:75:92:9b:18:7c: 14:7c:bb:54:e0:79:ce:12:c1:c9:84:a5:60:9f:59: 3e:80:8a:14:63:6e:ed:e8:a4:ad:f0:ed:ff:df:40: 85:74:3c:df:ac:f9:e9:3d:7d:fb:80:bd:9c:f5:51: 76:3f:56:35:87:65:06:ac:14:de:3e:6e:12:b8:00: a8:62:77:85:f9:62:46:cc:4c:10:54:fb:db:01:7a: c1:4d:f8:6e:7d:d8:4d:11:2e:a4:f6:de:02:69:97: de:0c:df:5d:e0:7f:dd:0f:fc:a2:e9:17:9a:14:a7: 85:ab:01:d8:24:35:02:cd:05:47:03:63:19:ff:b1: 83:5f:34:14:3d:91:a3:92:d9:f3:6c:84:90:54:51: ff:9a:70:65:cb:ef:f4:23:41:d6:55:ed:bd:32:1f: 22:5c:f3:8f:23:e3:cb:0f:e8:68:6b:53:62:41:45: 42:c0:03:cd:c1:1a:db:ee:fd:dc:bb:29:21:b0:41: 5c:66:9a:bd:bf:cf:e8:c0:ed:9e:93:01:0b:69:66: cc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:97:E0:ED:66:5C:8C:A4:ED:42:5C:BE:E1:E3:D9:4A:D0:A4:C3:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/21f90337-d188-3ea1-97de-8c8ca38cf817.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:0e:bb:c0:c2:a7:8c:2c:b2:e9:0c:0d:71:db:0c:b7:d6:e0: c9:67:fa:7c:c2:7f:78:4e:74:86:ed:f6:ee:c0:a7:7b:e5:8e: ec:e3:96:20:32:6e:f5:ee:32:f5:58:01:b2:e3:9c:69:3d:4d: 7c:02:67:55:87:5d:b9:de:53:0b:0f:c0:90:87:97:0c:24:9d: a1:50:6d:32:d1:9f:80:89:0d:ed:5a:bd:99:ad:d1:f5:e1:2f: 72:e7:9a:ab:63:b0:e5:19:fe:6a:df:a3:b3:0e:cb:fb:61:c3: cb:44:ed:ff:2f:e6:03:77:2e:59:d1:11:e2:c9:32:0d:b5:ad: 08:aa:e4:61:ad:3b:f4:06:5c:fc:68:e5:2c:57:8c:83:4f:68: a1:57:a1:34:7c:a5:35:79:18:48:d8:85:96:7b:5d:67:fe:0e: f6:fd:56:58:1e:ee:64:f8:f2:02:fc:07:7a:99:06:2f:0e:f1: 9f:06:a3:53:52:08:ae:5e:fb:bf:9c:d0:7a:18:5b:e6:d7:c2: 73:f8:55:14:61:9a:fd:18:10:9a:96:e7:28:dd:b7:65:67:19: 27:37:e4:74:89:80:ac:92:41:68:54:77:e4:f7:9a:93:30:45: 3a:81:4b:61:d8:38:c2:bf:fb:7c:21:bf:66:09:9c:53:8a:e8: 05:e0:88:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmsVxXTNnGBC1IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk MzE0YjlmMWQtNTFlMy00YWVjLTg1MTctNzlmZWQzMDgwYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOEiDAIX5z6bqpB3jjCzL8YATB6fKt03K5Gc aWIDN9VQpE8Li8mq1OyMoeDxT5ZCsl7BWK7XdZKbGHwUfLtU4HnOEsHJhKVgn1k+ gIoUY27t6KSt8O3/30CFdDzfrPnpPX37gL2c9VF2P1Y1h2UGrBTePm4SuACoYneF +WJGzEwQVPvbAXrBTfhufdhNES6k9t4CaZfeDN9d4H/dD/yi6ReaFKeFqwHYJDUC zQVHA2MZ/7GDXzQUPZGjktnzbISQVFH/mnBly+/0I0HWVe29Mh8iXPOPI+PLD+ho a1NiQUVCwAPNwRrb7v3cuykhsEFcZpq9v8/owO2ekwELaWbM7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2X4O1mXIyk7UJcvuHj2UrQpMPzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjFmOTAzMzctZDE4OC0z ZWExLTk3ZGUtOGM4Y2EzOGNmODE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsOu8DCp4wssukMDXHbDLfW4Mln+nzCf3hOdIbt9u7Ap3vljuzjliAy bvXuMvVYAbLjnGk9TXwCZ1WHXbneUwsPwJCHlwwknaFQbTLRn4CJDe1avZmt0fXh L3LnmqtjsOUZ/mrfo7MOy/thw8tE7f8v5gN3LlnREeLJMg21rQiq5GGtO/QGXPxo 5SxXjINPaKFXoTR8pTV5GEjYhZZ7XWf+Dvb9Vlge7mT48gL8B3qZBi8O8Z8Go1NS CK5e+7+c0HoYW+bXwnP4VRRhmv0YEJqW5yjdt2VnGSc35HSJgKySQWhUd+T3mpMw RTqBS2HYOMK/+3whv2YJnFOK6AXgiPI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:49:00 2025 by rpki-client