$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa File: 3a89c06e-a521-389e-bffb-da5a48fb6376.roa (raw, json) Hash identifier: 4/ICb0/g90Ga/NT22tE3qxL2HoES0h4VR1R46SL+U8g= Subject key identifier: 20:00:32:A0:96:43:25:0A:30:53:15:A3:DC:71:44:F6:B4:DA:2E:E6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FCA753E7F535571EAC740 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 147.129.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:ca:75:3e:7f:53:55:71:ea:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=8b5e70ed-7788-4549-b8e8-c45815a17dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a2:6e:2e:ae:e6:93:c3:5f:00:3c:c6:af:44: 8b:3b:05:a5:dd:62:d1:7f:94:1f:20:30:fd:77:98: d9:60:72:39:ee:0e:1a:31:b8:77:d6:72:75:0e:44: df:48:22:83:c4:13:3e:2a:b2:37:aa:e0:90:0a:1b: c1:d4:87:73:0d:11:32:5d:92:37:a7:81:43:d1:74: 0c:19:23:79:83:fe:09:89:50:60:ed:3a:7b:94:0b: 64:ce:d3:53:91:89:76:57:23:c7:29:b9:c7:3b:a7: 48:b6:b9:6c:be:db:6f:b0:2f:02:0d:9f:98:b0:58: 99:89:05:ac:97:b5:12:fc:be:06:ab:96:db:fe:19: e8:19:e8:f7:74:9b:92:8e:cd:38:e3:98:23:3e:d9: 8f:45:75:00:9c:bf:40:ae:6f:34:88:aa:b1:4f:d8: 6a:37:45:c9:2e:ae:a3:1e:2a:b5:13:78:c2:5c:87: b7:76:30:c6:66:14:78:a5:c6:87:6c:1a:ee:3d:97: e0:f6:f6:21:bb:0a:04:38:63:41:ae:5c:8c:7e:f8: 49:69:47:c9:71:ee:a3:38:20:11:18:6d:33:92:d6: b1:b7:36:83:b3:a3:12:4d:8a:48:13:fe:64:61:14: 77:10:d5:80:db:22:57:a6:1d:41:22:02:6b:c9:c0: f6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:00:32:A0:96:43:25:0A:30:53:15:A3:DC:71:44:F6:B4:DA:2E:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:d5:a3:13:c0:0e:2a:54:e8:f1:0d:52:52:09:fc:db:87:5f: a2:43:18:a1:09:25:d7:ff:2f:30:02:7d:2f:e0:cc:f2:83:84: ba:cc:d0:22:ca:92:dc:de:d5:fc:a1:75:6e:fb:d9:cc:36:e8: 6e:70:da:d8:97:0a:77:36:a5:36:bb:f4:16:da:7c:61:ac:db: bc:f1:4b:b5:4a:3f:db:47:30:83:52:b1:98:ad:a3:62:00:74: c4:10:ea:44:9e:38:f1:81:ce:39:f0:a6:bd:45:a4:45:41:58: cd:b9:77:53:91:40:11:1d:b3:a6:3b:7d:01:4d:2e:40:7a:a5: 53:e0:d5:d6:63:29:c8:d9:c4:3c:9f:93:61:ac:71:86:4d:9c: de:c3:f6:6f:6e:70:2b:2f:f7:f6:2c:0d:97:f1:14:eb:c5:e6: 9d:cf:4e:85:00:a2:fd:a6:b3:14:08:a1:44:b1:a7:2a:8b:b1: 8f:39:b2:61:be:89:38:bc:00:df:2d:b4:0f:d4:75:d1:2b:ae: b2:a9:c6:b8:37:37:d7:0d:41:d4:cb:f9:9a:80:73:e1:e9:c3: 9e:aa:20:1f:14:66:6b:6a:f0:56:b2:0f:08:9d:36:64:4b:05: d7:15:a2:92:db:31:8e:d1:d1:87:c4:4e:28:23:f9:95:cd:69: 7c:4e:e9:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8p1Pn9TVXHqx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk OGI1ZTcwZWQtNzc4OC00NTQ5LWI4ZTgtYzQ1ODE1YTE3ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqJuLq7mk8NfADzGr0SLOwWl3WLRf5QfIDD9 d5jZYHI57g4aMbh31nJ1DkTfSCKDxBM+KrI3quCQChvB1IdzDREyXZI3p4FD0XQM GSN5g/4JiVBg7Tp7lAtkztNTkYl2VyPHKbnHO6dItrlsvttvsC8CDZ+YsFiZiQWs l7US/L4Gq5bb/hnoGej3dJuSjs0445gjPtmPRXUAnL9Arm80iKqxT9hqN0XJLq6j Hiq1E3jCXIe3djDGZhR4pcaHbBruPZfg9vYhuwoEOGNBrlyMfvhJaUfJce6jOCAR GG0zktaxtzaDs6MSTYpIE/5kYRR3ENWA2yJXph1BIgJrycD2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAAMqCWQyUKMFMVo9xxRPa02i7mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2E4OWMwNmUtYTUyMS0z ODllLWJmZmItZGE1YTQ4ZmI2Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/VoxPADipU6PENUlIJ/NuHX6JDGKEJJdf/LzACfS/gzPKDhLrM0CLK ktze1fyhdW772cw26G5w2tiXCnc2pTa79BbafGGs27zxS7VKP9tHMINSsZito2IA dMQQ6kSeOPGBzjnwpr1FpEVBWM25d1ORQBEds6Y7fQFNLkB6pVPg1dZjKcjZxDyf k2GscYZNnN7D9m9ucCsv9/YsDZfxFOvF5p3PToUAov2msxQIoUSxpyqLsY85smG+ iTi8AN8ttA/UddErrrKpxrg3N9cNQdTL+ZqAc+Hpw56qIB8UZmtq8FayDwidNmRL BdcVopLbMY7R0YfETigj+ZXNaXxO6cw= -----END CERTIFICATE-----Generated at Sun Jun 15 15:23:28 2025 by rpki-client