$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json) Hash identifier: 7S8dMuFgs6g5Oh2u7EqjIKWkMNNRSrX68RKF/7dckQ0= Subject key identifier: 6A:B9:05:B0:A0:7B:3A:22:D4:DE:16:F3:A5:C4:FA:AF:97:6A:F5:05 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849DC8FC9B29FD5D3107EA61CC0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa Signing time: Thu 15 May 2025 13:01:00 +0000 ROA not before: Thu 15 May 2025 13:01:00 +0000 ROA not after: Wed 13 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 67.221.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:dc:8f:c9:b2:9f:d5:d3:10:7e:a6:1c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 15 13:01:00 2025 GMT Not After : Aug 13 13:01:00 2025 GMT Subject: CN=9b142aa4-280d-4280-bdc9-4f64299dd6aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:0c:7f:21:35:83:8d:67:89:9f:2c:72:c9: 4b:20:8b:cd:7a:1a:1a:c6:a0:07:58:0c:a7:64:13: 19:4f:12:f4:ec:89:3e:a9:86:7a:86:e9:f1:38:29: de:56:40:d9:a8:58:93:e4:a9:bc:5d:ea:d3:6f:2d: 81:07:34:42:3b:7e:f4:4b:ad:ea:49:9a:49:93:3a: b6:79:c4:9f:9a:0a:f3:e2:82:2e:3c:d7:22:6a:81: 03:b7:27:43:fb:80:f4:af:80:fb:eb:00:f1:73:56: 21:f1:fa:c7:89:29:2f:96:8c:54:ea:6b:c0:32:e9: fa:2d:92:f6:6a:50:59:d0:ad:e6:55:5c:12:24:a6: 52:0b:2f:ad:79:21:c0:ce:aa:4c:90:7f:d8:4c:b2: 58:88:8d:d7:d3:05:0f:b5:c5:11:cc:3a:d6:0a:bf: d9:93:c7:23:7a:d7:51:a2:6c:2a:54:e3:93:a5:08: d0:33:d5:d0:b1:0c:32:e0:29:71:f2:a3:35:a1:ea: d5:65:58:d4:9f:ca:19:ab:c5:7d:ff:32:42:1c:1b: 8a:20:5a:4b:88:88:7b:75:f0:b5:e2:a1:a1:97:d7: a6:f4:f8:53:02:55:61:9d:66:8f:cb:f0:57:54:f5: 17:70:b5:3a:d4:37:8b:a3:37:3d:93:b7:af:8f:2b: d6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:B9:05:B0:A0:7B:3A:22:D4:DE:16:F3:A5:C4:FA:AF:97:6A:F5:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:3d:8c:94:58:27:20:aa:b4:a7:46:37:d2:e4:6f:f1:18:c7: 60:97:5e:8f:f8:74:f3:b1:e3:42:aa:72:ec:9d:b2:1f:df:85: 89:07:1f:aa:29:68:6c:57:09:7f:37:6d:2e:0d:60:75:10:5f: 92:da:04:8e:13:55:b8:b8:4a:62:65:ac:f7:1e:ad:ec:a6:fc: e5:c3:33:6a:93:c4:4c:aa:61:2e:a8:1a:9f:f0:29:4c:a6:97: 4f:df:3f:22:d1:09:1a:84:6a:93:d1:47:1d:1d:c7:e6:8e:fd: 55:31:3f:0c:ae:fe:75:65:ea:62:c3:36:1b:9d:8d:d4:4f:23: 0a:93:d3:a4:db:f0:0c:f0:46:a7:49:0e:dc:1d:31:c6:f3:87: 78:ea:50:f2:1f:58:b8:dc:91:01:3e:36:77:b0:d3:8c:24:cd: b3:98:5e:3f:9b:af:5f:06:20:a5:c8:7f:ca:f9:ee:44:83:c0: 03:45:51:b8:34:f3:34:23:ea:8b:a4:38:be:a2:6b:ee:a8:94: 81:e1:59:c4:77:2f:20:15:83:93:fc:39:9c:f5:8e:84:42:f4: 38:9b:53:59:ba:2f:7c:c5:b4:c0:3f:b6:b5:49:12:f1:29:04: fa:0f:cf:ff:03:2a:63:01:83:c9:b1:05:a5:0e:bb:48:10:56: 88:33:06:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8myn9XTEH6mHMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk OWIxNDJhYTQtMjgwZC00MjgwLWJkYzktNGY2NDI5OWRkNmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBwMfyE1g41niZ8scslLIIvNehoaxqAHWAyn ZBMZTxL07Ik+qYZ6hunxOCneVkDZqFiT5Km8XerTby2BBzRCO370S63qSZpJkzq2 ecSfmgrz4oIuPNciaoEDtydD+4D0r4D76wDxc1Yh8frHiSkvloxU6mvAMun6LZL2 alBZ0K3mVVwSJKZSCy+teSHAzqpMkH/YTLJYiI3X0wUPtcURzDrWCr/Zk8cjetdR omwqVOOTpQjQM9XQsQwy4Clx8qM1oerVZVjUn8oZq8V9/zJCHBuKIFpLiIh7dfC1 4qGhl9em9PhTAlVhnWaPy/BXVPUXcLU61DeLozc9k7evjyvWBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq5BbCgezoi1N4W86XE+q+XavUFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWYyMjVhYWMtZTA3Ny0z NjIwLTgzOGMtMDcwM2JlOGIzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIM9jJRYJyCqtKdGN9Lkb/EYx2CXXo/4dPOx40Kqcuydsh/fhYkHH6op aGxXCX83bS4NYHUQX5LaBI4TVbi4SmJlrPcereym/OXDM2qTxEyqYS6oGp/wKUym l0/fPyLRCRqEapPRRx0dx+aO/VUxPwyu/nVl6mLDNhudjdRPIwqT06Tb8AzwRqdJ DtwdMcbzh3jqUPIfWLjckQE+Nnew04wkzbOYXj+br18GIKXIf8r57kSDwANFUbg0 8zQj6oukOL6ia+6olIHhWcR3LyAVg5P8OZz1joRC9DibU1m6L3zFtMA/trVJEvEp BPoPz/8DKmMBg8mxBaUOu0gQVogzBms= -----END CERTIFICATE-----Generated at Sun Jun 15 15:42:54 2025 by rpki-client