$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6b9a82a7-168c-3e11-99a9-9035f4356902.roa File: 6b9a82a7-168c-3e11-99a9-9035f4356902.roa (raw, json) Hash identifier: MzzPWQZCcgjU2RwH6AxUAFnSjdNji8fcTAVrD+9DvUY= Subject key identifier: 03:08:6B:FB:42:37:DD:7B:A5:72:9C:60:FC:21:E8:D8:1D:2B:16:A3 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849CE9A6AFB2B8AD72FDCCFB2C0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6b9a82a7-168c-3e11-99a9-9035f4356902.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 67.221.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:6a:fb:2b:8a:d7:2f:dc:cf:b2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=9046fe64-4e87-4ec3-ba90-4c258b1ac066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b5:5e:a2:47:f1:10:20:d2:3f:63:1a:a5:f6: a1:a8:69:d5:f1:d9:61:1d:b4:03:6d:4e:7f:ec:cb: 5a:4b:b3:fb:58:09:1d:70:70:20:64:58:5a:0c:2b: 8a:76:94:92:e4:6a:f1:4b:92:d9:51:d7:6f:1d:cb: 9b:38:c5:f7:d6:16:fd:b2:9b:d3:56:8d:f6:4b:1e: 2e:83:00:ae:58:04:6a:de:f4:32:1a:3f:f2:43:75: 25:de:4b:e0:12:76:2a:f9:4a:b8:5d:bf:23:4c:41: eb:2e:d1:b8:e0:f0:0b:db:9e:c1:ff:5d:d9:33:fe: 25:10:04:c3:10:bf:ec:45:f4:5c:9f:a6:46:ce:f3: f8:73:37:b9:49:9a:53:68:73:71:ed:78:11:9f:62: 59:9a:b1:4a:24:48:79:77:67:bc:25:a7:e8:40:26: d1:3c:15:82:b4:80:de:81:8b:7a:b6:1b:9b:62:06: d5:2d:39:be:dc:e9:66:d4:5c:dd:97:4f:69:c3:28: 0a:01:90:c8:34:5a:32:8d:20:8e:95:24:25:08:1b: 81:4e:e8:c8:bb:b5:00:04:89:b7:c3:88:e7:99:f5: f6:13:eb:7c:e5:27:11:82:2e:7b:82:e4:22:bd:32: 2e:fa:0a:57:52:ac:06:07:59:c6:08:45:fc:9e:37: fd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:08:6B:FB:42:37:DD:7B:A5:72:9C:60:FC:21:E8:D8:1D:2B:16:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6b9a82a7-168c-3e11-99a9-9035f4356902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:ab:f1:a0:20:d2:58:79:b5:df:d9:9e:71:15:d2:e5:12:7e: 93:0c:94:a5:6b:55:4f:f1:15:94:25:99:51:9c:15:d7:a3:7c: 00:37:23:3b:f3:ef:a8:74:33:7b:91:97:32:e5:43:65:68:4e: d6:e2:13:72:45:d4:82:55:00:75:a8:a7:12:98:a8:cd:9d:30: 8b:c1:64:87:c9:7e:4d:1c:94:3a:da:92:dd:22:2e:9b:f8:36: 7e:f9:90:46:17:46:50:35:11:36:a6:0c:ca:e6:87:17:b8:61: 38:5b:3b:45:71:60:2a:f5:c8:5e:cf:98:34:2e:05:c2:79:1f: 3c:22:1f:b8:3d:0f:fe:2a:58:c1:46:43:7a:84:72:ab:9e:c8: 0a:07:40:54:50:67:b6:80:69:77:b0:dd:cf:24:9b:b4:c9:7d: 14:8c:a2:d9:c0:32:d9:ae:91:9d:17:ae:ac:cf:87:6b:b4:b2: 61:e9:97:b8:ba:e5:74:6f:83:d4:ce:bd:51:b8:d0:98:d7:7b: 31:19:e1:c9:d9:c6:73:1f:d7:0b:a8:67:ce:5b:b1:8f:b3:1d: cf:e9:09:67:e5:52:e2:9d:62:26:4e:a8:4a:81:fa:f9:ff:c0: 65:97:94:b3:7b:41:67:5b:9a:65:b7:50:1e:8c:ad:a4:1f:ac: eb:41:c7:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmmr7K4rXL9zPssAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk OTA0NmZlNjQtNGU4Ny00ZWMzLWJhOTAtNGMyNThiMWFjMDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLVeokfxECDSP2MapfahqGnV8dlhHbQDbU5/ 7MtaS7P7WAkdcHAgZFhaDCuKdpSS5GrxS5LZUddvHcubOMX31hb9spvTVo32Sx4u gwCuWARq3vQyGj/yQ3Ul3kvgEnYq+Uq4Xb8jTEHrLtG44PAL257B/13ZM/4lEATD EL/sRfRcn6ZGzvP4cze5SZpTaHNx7XgRn2JZmrFKJEh5d2e8JafoQCbRPBWCtIDe gYt6thubYgbVLTm+3Olm1Fzdl09pwygKAZDINFoyjSCOlSQlCBuBTujIu7UABIm3 w4jnmfX2E+t85ScRgi57guQivTIu+gpXUqwGB1nGCEX8njf9yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMIa/tCN917pXKcYPwh6NgdKxajMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNmI5YTgyYTctMTY4Yy0z ZTExLTk5YTktOTAzNWY0MzU2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWr8aAg0lh5td/ZnnEV0uUSfpMMlKVrVU/xFZQlmVGcFdejfAA3Izvz 76h0M3uRlzLlQ2VoTtbiE3JF1IJVAHWopxKYqM2dMIvBZIfJfk0clDrakt0iLpv4 Nn75kEYXRlA1ETamDMrmhxe4YThbO0VxYCr1yF7PmDQuBcJ5HzwiH7g9D/4qWMFG Q3qEcqueyAoHQFRQZ7aAaXew3c8km7TJfRSMotnAMtmukZ0XrqzPh2u0smHpl7i6 5XRvg9TOvVG40JjXezEZ4cnZxnMf1wuoZ85bsY+zHc/pCWflUuKdYiZOqEqB+vn/ wGWXlLN7QWdbmmW3UB6MraQfrOtBx04= -----END CERTIFICATE-----Generated at Sun Jun 15 15:27:07 2025 by rpki-client