$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json) Hash identifier: P4mTGGZEQaDHiqGZPzuaBby2WYLrycqBuJDBl+M+80c= Subject key identifier: 7A:3F:B9:78:09:8C:BB:E1:6F:F9:5E:3A:8A:F9:7B:5E:5B:44:10:A8 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FC9DBDA3937BD182C2A00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 67.221.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c9:db:da:39:37:bd:18:2c:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=91ef8809-79ea-4a54-b7af-9b059816fe92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:4e:e4:ff:cb:89:bc:0f:af:6f:34:07:33:c5: 03:02:0c:48:60:d8:92:69:a3:dc:2b:a9:ea:3c:0c: af:c1:e1:f5:97:fb:e7:84:b7:70:b3:24:19:ed:cb: 72:29:49:9f:c0:27:8f:f7:84:45:d5:f8:88:e0:01: 09:e7:1a:fa:da:af:63:43:ae:26:d1:59:f2:4d:e8: d4:8e:a8:20:2b:03:43:a3:83:94:d8:1a:a3:74:d4: cd:c4:02:94:15:5c:81:b3:e0:d0:4b:b2:99:74:88: ed:f5:14:15:c8:eb:ae:7e:79:cf:c2:12:b1:4e:a0: bd:d3:3c:3e:ee:7c:5b:02:12:8a:2b:50:6b:c7:fe: f5:c2:b2:a4:77:d5:80:14:16:a1:bb:83:af:7b:44: 7d:3d:00:be:8d:f9:83:6a:c3:dd:f8:6c:bb:e9:65: 25:42:a9:d3:d5:8f:90:89:78:0f:f3:2c:ce:e0:a2: 25:71:41:e3:48:e2:98:f3:0e:f0:08:0a:e3:03:cb: e6:1f:01:dc:da:d9:7d:db:28:4d:34:8a:e5:32:50: 35:cb:a1:e0:1c:97:31:92:d9:d2:df:cd:4e:26:c5: 0e:13:70:a6:c2:a5:9c:e4:bf:33:b0:b2:c9:1b:0d: 6e:ff:d5:cc:2f:c3:4e:08:46:2a:39:de:f8:30:df: 95:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:3F:B9:78:09:8C:BB:E1:6F:F9:5E:3A:8A:F9:7B:5E:5B:44:10:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0e:39:20:a2:91:8a:cd:72:6a:c0:de:6a:65:19:9f:c6:f5: fc:92:9a:69:4e:34:83:ae:eb:a2:3c:38:ba:29:77:b1:11:b5: ce:c5:ac:21:5a:5b:8e:06:87:18:0f:b5:de:d5:6a:b2:f1:b0: 71:f3:0e:84:30:cb:fa:3c:12:3f:37:b6:14:5e:98:9e:64:72: f8:a8:19:00:35:aa:89:ac:dd:2e:5f:3c:e1:de:31:5e:46:f2: 24:f0:8e:42:8f:0c:dc:be:c1:c3:f3:7f:b8:f7:2f:5f:64:49: 2d:1c:c9:3b:21:fa:7e:a7:06:a7:84:f4:95:ef:60:e9:38:3b: 16:12:fe:ef:3d:6f:25:2f:cc:18:33:b9:02:5d:6d:5b:0a:ea: 1e:16:7f:a0:df:87:33:73:de:75:c8:95:d9:8f:5e:22:a9:1b: 3e:e0:c0:5a:d8:ed:6e:af:0f:fd:7d:89:6f:e8:8d:9a:0d:08: b4:b4:da:0f:10:8c:9d:95:38:8d:11:c3:24:ef:fb:24:26:5e: 43:88:9c:01:20:36:ac:01:30:58:94:ec:a7:2a:84:4d:39:33: 01:df:29:d8:75:f7:a9:e7:10:7a:2a:62:14:7c:90:ff:85:bc: e9:66:0f:59:bb:bc:7a:d0:50:9c:25:b0:9c:86:f4:86:b4:59: a6:90:28:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8nb2jk3vRgsKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk OTFlZjg4MDktNzllYS00YTU0LWI3YWYtOWIwNTk4MTZmZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx07k/8uJvA+vbzQHM8UDAgxIYNiSaaPcK6nq PAyvweH1l/vnhLdwsyQZ7ctyKUmfwCeP94RF1fiI4AEJ5xr62q9jQ64m0VnyTejU jqggKwNDo4OU2BqjdNTNxAKUFVyBs+DQS7KZdIjt9RQVyOuufnnPwhKxTqC90zw+ 7nxbAhKKK1Brx/71wrKkd9WAFBahu4Ove0R9PQC+jfmDasPd+Gy76WUlQqnT1Y+Q iXgP8yzO4KIlcUHjSOKY8w7wCArjA8vmHwHc2tl92yhNNIrlMlA1y6HgHJcxktnS 381OJsUOE3CmwqWc5L8zsLLJGw1u/9XML8NOCEYqOd74MN+VnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHo/uXgJjLvhb/leOor5e15bRBCoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjhiZTAwZWEtN2EwOS0z ZWEwLWJiYTQtODU2MzNmZGM3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0OOSCikYrNcmrA3mplGZ/G9fySmmlONIOu66I8OLopd7ERtc7FrCFa W44GhxgPtd7VarLxsHHzDoQwy/o8Ej83thRemJ5kcvioGQA1qoms3S5fPOHeMV5G 8iTwjkKPDNy+wcPzf7j3L19kSS0cyTsh+n6nBqeE9JXvYOk4OxYS/u89byUvzBgz uQJdbVsK6h4Wf6DfhzNz3nXIldmPXiKpGz7gwFrY7W6vD/19iW/ojZoNCLS02g8Q jJ2VOI0RwyTv+yQmXkOInAEgNqwBMFiU7KcqhE05MwHfKdh196nnEHoqYhR8kP+F vOlmD1m7vHrQUJwlsJyG9Ia0WaaQKFU= -----END CERTIFICATE-----Generated at Mon Jun 16 11:58:55 2025 by rpki-client