$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa File: 5016c054-af10-3049-934f-3a7fb31397b9.roa (raw, json) Hash identifier: 83QXCVKngWhuFRW9655SBbMkWEYEAwMThNO3il1Ncow= Subject key identifier: D5:5C:E0:7E:17:0B:2F:08:60:CD:C8:8F:36:00:F6:55:23:DF:62:B4 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FC9CF60BD63C1657D3500 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 67.221.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c9:cf:60:bd:63:c1:65:7d:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=ca9a10ac-5336-43d6-b391-f98872268fba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:8e:3c:3c:17:63:25:3a:48:e4:7f:f7:de:f0: 11:e9:02:3f:b2:f3:c5:f3:16:ac:9a:df:88:fc:71: 12:40:e9:42:8b:21:5d:c0:e6:52:63:d2:d6:88:bb: 95:26:96:c9:5a:28:6c:ed:d4:47:bb:48:73:8e:a0: d4:f6:61:cb:fb:d3:a1:cd:c9:c2:8d:39:63:95:9d: a7:6a:a0:c0:a6:c0:e9:b3:3e:b2:10:04:cf:aa:e9: ba:20:20:27:22:c7:d4:48:16:05:74:83:60:62:1b: 23:67:1a:04:41:e4:b0:8a:92:64:3f:95:c5:65:ec: 2e:bd:ed:04:99:89:ac:b6:45:1f:78:6b:da:7c:6a: 87:ad:db:09:3d:23:83:f8:aa:c8:0f:8b:16:6f:f2: c5:ea:ae:d2:9d:04:7b:0f:53:85:15:66:8c:00:79: c0:35:7e:92:cf:ff:52:68:4d:49:e7:b5:46:e9:b1: ee:ec:b8:70:3e:a2:80:94:99:d8:0a:b7:13:c5:21: 78:1a:a6:59:f8:01:a7:60:29:f6:f0:76:b5:35:f3: 74:1d:7f:9f:9e:7d:e0:83:48:b6:5c:a5:5a:17:c3: e5:d6:e2:30:5c:6e:11:d9:76:b4:88:59:c1:11:a6: e0:91:ba:17:ad:6e:b1:b5:c0:4c:99:4a:ed:5b:f2: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5C:E0:7E:17:0B:2F:08:60:CD:C8:8F:36:00:F6:55:23:DF:62:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5016c054-af10-3049-934f-3a7fb31397b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:0b:92:67:9c:02:dc:4a:bd:c0:73:1b:58:f7:d8:cb:08:cb: f8:6e:ac:a0:32:bb:d0:ed:4f:9b:fe:8c:8b:52:ee:00:85:3d: f0:03:f1:32:e6:ee:2c:a7:fb:25:8e:a0:5c:e1:1a:80:1f:90: 48:05:8f:83:11:c9:23:bd:62:18:36:9b:59:95:b6:35:e6:b1: 92:33:ca:06:ad:86:26:aa:64:40:fd:17:8e:76:7b:91:aa:bb: 80:63:4e:fc:1b:dc:c1:55:2d:27:8b:9c:d5:6a:94:b9:a5:07: 86:ca:53:ee:7f:93:23:86:b9:a4:09:fc:dd:74:35:33:bb:64: 32:45:8a:7a:db:b4:a1:b9:39:c0:50:0f:99:00:ef:7d:c9:f3: 25:04:08:0e:ce:1a:c8:60:34:c1:9b:fe:30:02:13:2e:12:7a: b8:10:fc:33:b1:a8:bb:11:36:a9:65:f4:91:e1:2f:17:af:4d: c3:08:50:6a:e6:5b:b8:70:65:ba:f8:ec:a2:a5:52:90:1f:1e: d9:98:47:55:06:e9:a8:a1:52:31:ab:7d:65:aa:cc:9a:42:bf: e4:2c:85:14:89:00:8a:2c:34:f8:65:30:2f:d2:18:88:1e:e7: 4d:1b:ab:9f:16:42:de:9b:40:83:d2:a2:21:42:7f:c5:57:3e: 19:32:0e:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8nPYL1jwWV9NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk Y2E5YTEwYWMtNTMzNi00M2Q2LWIzOTEtZjk4ODcyMjY4ZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAno48PBdjJTpI5H/33vAR6QI/svPF8xasmt+I /HESQOlCiyFdwOZSY9LWiLuVJpbJWihs7dRHu0hzjqDU9mHL+9OhzcnCjTljlZ2n aqDApsDpsz6yEATPqum6ICAnIsfUSBYFdINgYhsjZxoEQeSwipJkP5XFZewuve0E mYmstkUfeGvafGqHrdsJPSOD+KrID4sWb/LF6q7SnQR7D1OFFWaMAHnANX6Sz/9S aE1J57VG6bHu7LhwPqKAlJnYCrcTxSF4GqZZ+AGnYCn28Ha1NfN0HX+fnn3gg0i2 XKVaF8Pl1uIwXG4R2Xa0iFnBEabgkboXrW6xtcBMmUrtW/KwUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVc4H4XCy8IYM3IjzYA9lUj32K0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTAxNmMwNTQtYWYxMC0z MDQ5LTkzNGYtM2E3ZmIzMTM5N2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgLkmecAtxKvcBzG1j32MsIy/hurKAyu9DtT5v+jItS7gCFPfAD8TLm 7iyn+yWOoFzhGoAfkEgFj4MRySO9Yhg2m1mVtjXmsZIzygathiaqZED9F452e5Gq u4BjTvwb3MFVLSeLnNVqlLmlB4bKU+5/kyOGuaQJ/N10NTO7ZDJFinrbtKG5OcBQ D5kA733J8yUECA7OGshgNMGb/jACEy4SergQ/DOxqLsRNqll9JHhLxevTcMIUGrm W7hwZbr47KKlUpAfHtmYR1UG6aihUjGrfWWqzJpCv+QshRSJAIosNPhlMC/SGIge 500bq58WQt6bQIPSoiFCf8VXPhkyDhI= -----END CERTIFICATE-----Generated at Sun Jun 15 16:10:55 2025 by rpki-client