$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa File: 5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa (raw, json) Hash identifier: 35sUl9ywQm9es2OG3gO9Bmn0ItqJMhEs1MIEOmZ3S8o= Subject key identifier: B8:94:77:2C:21:10:C1:23:22:3A:E4:55:C7:D7:E8:F7:63:B6:21:49 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584902EC1AA20E51FC8F33E3E000 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 167.94.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1a:a2:0e:51:fc:8f:33:e3:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=fff023a8-41f1-43fa-ba0d-69c9da0fd1f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:9b:05:27:e1:88:c3:b9:ba:81:c3:c6:dc: e5:58:11:14:e0:8c:8f:1b:5f:d5:cb:73:f7:ae:78: 7c:0f:36:37:ff:a4:c7:39:dc:8a:f9:df:8d:6f:54: 25:dc:0c:e1:fc:5d:e6:4a:57:09:9e:b0:cd:37:cc: ae:ec:15:97:ce:1d:a1:78:ee:c4:9d:28:35:49:11: 8b:38:64:c2:f2:eb:02:32:60:3b:e5:14:84:bb:9a: aa:d8:78:34:a3:96:81:0d:03:03:5c:91:e2:88:8f: 27:3f:1e:e7:78:c7:26:94:29:e3:0e:a6:44:05:ba: 04:a7:90:0f:4f:20:04:ea:01:32:a4:d6:91:e6:db: eb:31:07:c4:e7:6b:46:5c:f7:ec:04:45:21:00:48: 2d:6e:b7:f9:f1:37:d4:70:92:9c:4e:c2:90:11:35: c7:e6:02:50:36:8e:53:e9:85:48:ce:a9:f3:6d:69: 49:af:c3:eb:82:c6:e2:3b:de:38:5b:1a:01:19:99: 91:12:bb:9f:ae:5c:e8:d4:28:de:a2:3e:45:1f:8a: 99:48:d2:93:24:7b:2f:2a:a9:34:3d:96:8b:ad:4a: d3:23:1d:45:c7:5d:10:65:bb:71:03:f1:2f:86:66: 67:f6:c9:d4:4d:d5:3f:09:53:ab:d7:2c:a0:54:85: 30:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:94:77:2C:21:10:C1:23:22:3A:E4:55:C7:D7:E8:F7:63:B6:21:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/5048dbbc-08f5-3cf7-8cb9-8fd3ebbd821c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 167.94.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c6:8d:3b:e3:45:5d:cf:83:64:0b:56:3f:d7:77:5e:15:cd: 68:1d:32:18:07:1e:27:14:29:1a:40:6b:5d:57:b5:35:ab:4f: 7c:83:7f:1a:fd:39:74:92:84:a8:35:e0:43:b8:ba:43:65:d4: aa:ce:71:67:91:0b:20:62:00:53:d2:9c:65:c1:6f:18:cd:1a: 94:95:48:49:c2:ae:66:73:81:73:b4:bb:75:67:6a:72:c8:f1: de:c1:22:f3:16:fb:06:13:fb:a2:75:01:4d:fb:51:04:e2:82: d9:0f:67:8d:bc:7d:ea:70:d9:74:cb:0e:6f:d9:73:1e:bf:9f: 8d:a4:81:e8:7a:f7:b3:67:f8:d0:56:54:39:35:dc:9b:f8:16: 47:fb:14:c5:a4:cd:68:b5:90:40:ab:ed:52:72:27:a7:f1:c3: c6:a9:e6:c4:eb:21:51:a3:b1:e9:26:81:ff:16:5c:ad:03:26: cc:23:57:a0:93:59:82:a7:1a:e0:89:8d:3f:64:85:17:0f:03: 1f:ec:56:f6:0d:37:23:45:09:fc:11:93:23:f8:e1:f5:b7:c4: d9:11:56:9c:dc:80:cb:76:b1:5f:4c:e2:ba:1e:d5:e2:96:2f: 22:64:e3:9a:29:fa:91:28:92:b2:73:87:9e:ee:c0:ff:c1:59: cb:9d:2e:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BqiDlH8jzPj4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZmZmMDIzYTgtNDFmMS00M2ZhLWJhMGQtNjljOWRhMGZkMWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLebBSfhiMO5uoHDxtzlWBEU4IyPG1/Vy3P3 rnh8DzY3/6THOdyK+d+Nb1Ql3Azh/F3mSlcJnrDNN8yu7BWXzh2heO7EnSg1SRGL OGTC8usCMmA75RSEu5qq2Hg0o5aBDQMDXJHiiI8nPx7neMcmlCnjDqZEBboEp5AP TyAE6gEypNaR5tvrMQfE52tGXPfsBEUhAEgtbrf58TfUcJKcTsKQETXH5gJQNo5T 6YVIzqnzbWlJr8PrgsbiO944WxoBGZmRErufrlzo1Cjeoj5FH4qZSNKTJHsvKqk0 PZaLrUrTIx1Fx10QZbtxA/EvhmZn9snUTdU/CVOr1yygVIUwUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiUdywhEMEjIjrkVcfX6PdjtiFJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNTA0OGRiYmMtMDhmNS0z Y2Y3LThjYjktOGZkM2ViYmQ4MjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAp15oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/GjTvjRV3Pg2QLVj/Xd14VzWgdMhgHHicUKRpAa11XtTWrT3yDfxr9 OXSShKg14EO4ukNl1KrOcWeRCyBiAFPSnGXBbxjNGpSVSEnCrmZzgXO0u3VnanLI 8d7BIvMW+wYT+6J1AU37UQTigtkPZ428fepw2XTLDm/Zcx6/n42kgeh697Nn+NBW VDk13Jv4Fkf7FMWkzWi1kECr7VJyJ6fxw8ap5sTrIVGjsekmgf8WXK0DJswjV6CT WYKnGuCJjT9khRcPAx/sVvYNNyNFCfwRkyP44fW3xNkRVpzcgMt2sV9M4roe1eKW LyJk45op+pEokrJzh57uwP/BWcudLiU= -----END CERTIFICATE-----Generated at Mon Apr 28 10:39:10 2025 by rpki-client