$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa File: 68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa (raw, json) Hash identifier: Uss6iVNKF9ThAxVdgCbF+oW6Bs9bzpqScgNEBopoESM= Subject key identifier: 64:CF:F6:98:81:04:2E:F9:D9:38:F3:B0:AA:5F:85:0A:ED:55:8B:22 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C5F78B1ED5DC3ACD1420 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 67.221.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c5:f7:8b:1e:d5:dc:3a:cd:14:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=273647b4-3329-48dc-bcb7-1bbd4c00a355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:7d:9b:4c:94:8f:0c:38:fd:80:e5:df:46: df:00:5a:93:47:bb:9a:2e:07:01:0b:08:ba:07:6a: 87:d3:d2:16:17:13:e5:01:7c:6c:9a:3c:bf:49:6d: cf:75:f4:3a:53:6e:f8:52:22:97:85:d9:cb:8c:de: 47:16:82:58:40:72:16:0f:32:df:b6:55:41:c3:53: cb:27:31:78:cf:5f:b4:da:df:5b:85:e8:1c:69:b4: 31:d5:f8:1e:7b:73:1a:30:fe:dc:b7:29:a2:f4:3a: 74:c1:7c:68:2b:f3:c3:d6:2d:51:47:50:2a:20:68: b2:d5:b6:89:e9:e4:02:35:dc:0d:0e:d5:54:01:5f: 38:9d:82:cd:a8:46:65:7d:9f:cd:24:a3:27:00:87: b8:59:c9:6d:70:24:e1:09:d7:60:8c:8b:be:42:d3: 1d:32:7f:fd:91:44:f9:18:8b:54:f6:30:38:ad:92: 54:16:ab:9c:2d:af:42:0e:2c:f8:0d:fc:47:72:2c: 0e:bb:5e:02:e5:33:95:f0:94:33:51:ff:0d:41:f7: 78:70:ae:06:73:a1:2c:b9:f9:37:e0:14:44:3f:fc: de:ce:30:4b:d6:cb:af:b7:ab:91:06:70:3d:83:eb: 08:13:26:7a:0b:ae:58:d8:e9:5f:78:20:8c:d1:fe: ce:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CF:F6:98:81:04:2E:F9:D9:38:F3:B0:AA:5F:85:0A:ED:55:8B:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/68be00ea-7a09-3ea0-bba4-85633fdc7cc6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:4e:00:c7:a5:2b:b5:65:37:86:96:19:84:28:82:b4:67:78: ad:95:ee:ca:aa:6a:b9:4c:cc:73:b9:de:31:28:2a:14:6f:e2: bc:9e:30:e1:e3:4f:6b:f4:f8:12:e6:b9:e4:8b:ea:ff:60:70: 4d:36:d6:7b:1b:55:a9:6a:6c:3d:0d:17:1e:57:22:3b:3a:2c: ae:be:7f:1b:48:ee:b2:31:9f:a1:d0:12:4c:20:40:1c:c9:f1: 0e:d9:9f:1d:a5:eb:ff:81:47:5b:1b:09:43:02:fb:0c:52:a2: 96:f5:31:a1:51:bc:8b:f9:41:e8:a3:87:29:1f:30:98:af:9a: d1:ee:2b:c6:4d:12:bc:82:99:d4:8b:f7:a8:75:93:28:83:bc: d6:a8:cb:c3:46:6c:1b:5d:fd:d8:6b:92:fe:5a:46:30:af:d7: 04:a0:50:ea:f9:57:47:d4:e0:9d:2f:1f:67:95:1d:97:ec:12: f7:56:07:72:55:f8:df:47:0c:58:b9:f4:41:14:01:d8:7e:1b: 23:ae:68:1b:89:33:5e:5d:8d:60:ee:23:d0:1a:1d:08:c4:fb: 04:90:73:01:36:bf:5e:92:dc:e7:f1:e0:dd:02:38:bb:7c:bf: bd:e4:d3:b3:2c:1c:dc:f3:96:86:a1:4d:bc:2b:b5:04:ef:c2: df:bb:2b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsX3ix7V3DrNFCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk MjczNjQ3YjQtMzMyOS00OGRjLWJjYjctMWJiZDRjMDBhMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtB9m0yUjww4/YDl30bfAFqTR7uaLgcBCwi6 B2qH09IWFxPlAXxsmjy/SW3PdfQ6U274UiKXhdnLjN5HFoJYQHIWDzLftlVBw1PL JzF4z1+02t9bhegcabQx1fgee3MaMP7ctymi9Dp0wXxoK/PD1i1RR1AqIGiy1baJ 6eQCNdwNDtVUAV84nYLNqEZlfZ/NJKMnAIe4WcltcCThCddgjIu+QtMdMn/9kUT5 GItU9jA4rZJUFqucLa9CDiz4DfxHciwOu14C5TOV8JQzUf8NQfd4cK4Gc6Esufk3 4BREP/zezjBL1suvt6uRBnA9g+sIEyZ6C65Y2OlfeCCM0f7O6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTP9piBBC752TjzsKpfhQrtVYsiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNjhiZTAwZWEtN2EwOS0z ZWEwLWJiYTQtODU2MzNmZGM3Y2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdOAMelK7VlN4aWGYQogrRneK2V7sqqarlMzHO53jEoKhRv4ryeMOHj T2v0+BLmueSL6v9gcE021nsbValqbD0NFx5XIjs6LK6+fxtI7rIxn6HQEkwgQBzJ 8Q7Znx2l6/+BR1sbCUMC+wxSopb1MaFRvIv5QeijhykfMJivmtHuK8ZNEryCmdSL 96h1kyiDvNaoy8NGbBtd/dhrkv5aRjCv1wSgUOr5V0fU4J0vH2eVHZfsEvdWB3JV +N9HDFi59EEUAdh+GyOuaBuJM15djWDuI9AaHQjE+wSQcwE2v16S3Ofx4N0COLt8 v73k07MsHNzzloahTbwrtQTvwt+7K48= -----END CERTIFICATE-----Generated at Mon Apr 28 10:39:17 2025 by rpki-client