$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json) Hash identifier: 76JdW9pwrDXXplnMSSpOiHPzhwholAfW9VIYbj+ZwWw= Subject key identifier: D8:37:85:D7:C6:9B:EE:E9:CF:AA:CB:12:20:8F:6B:3A:6D:3E:5A:07 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C5BFB3D8B01CE6896840 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 67.221.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c5:bf:b3:d8:b0:1c:e6:89:68:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=c9e2d9dc-08ae-47e4-a2a4-ad6c0443b475 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ec:43:a7:e6:4e:31:45:ed:60:37:b7:54:e5: b1:22:5a:17:54:f9:25:ad:63:f8:d1:79:7e:9e:0f: db:60:e8:1c:67:bb:a7:b6:c6:5d:a1:b7:3b:22:06: 88:5b:e1:95:32:dc:a5:c1:7b:be:e8:4d:12:63:83: 76:d0:05:9a:37:93:3b:ef:56:ee:c4:6b:8e:a5:e1: a4:b0:8f:d5:65:74:50:02:05:29:0b:f4:50:5a:e5: 65:39:87:31:ef:e6:1a:9a:ff:29:53:a2:c1:2f:4b: 7c:70:d9:d4:d0:42:f5:5a:0b:8f:97:1c:47:3f:90: 7a:19:8c:10:6b:98:89:2e:fe:4f:4e:93:8e:6c:5c: 53:e6:ee:36:38:36:18:32:b7:8f:5c:a6:5f:03:14: d5:98:81:36:a4:1b:ec:30:69:f7:79:2c:cb:72:3c: b0:26:19:55:ee:35:16:76:f7:80:11:10:a6:ae:dc: a2:26:48:d1:c2:8a:96:66:07:21:4f:53:54:67:36: 05:95:ef:99:69:7e:fe:e8:79:76:eb:a9:bf:1e:da: 1b:bf:b0:ee:60:ff:cc:10:40:3c:1d:8c:16:ad:3b: 25:26:cb:2b:1b:f2:fd:f9:d2:3a:16:a1:8b:60:9e: 52:b3:bc:5c:b1:34:d5:30:1f:76:56:09:70:2f:f4: 0f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:37:85:D7:C6:9B:EE:E9:CF:AA:CB:12:20:8F:6B:3A:6D:3E:5A:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3a:35:b6:4b:11:35:a4:06:33:be:4c:39:04:86:38:19:e7: 10:98:96:46:67:46:ef:84:17:31:51:27:d0:d3:b1:36:c6:c3: f0:df:2c:d9:54:cd:87:3e:8a:90:3f:0b:0c:be:cc:f2:0c:24: 46:74:81:e5:05:34:53:ec:21:bb:61:7f:3b:45:d1:9f:d5:ee: 6c:0a:27:1b:e1:56:bf:8c:8c:27:27:fe:d1:6e:29:d8:bc:c5: 7f:e7:e9:1c:1c:91:e4:9c:ca:fd:70:03:88:4c:a5:6e:5c:0e: 9a:4c:7e:b1:d3:c5:03:05:f8:43:2d:46:2c:97:9b:7f:1d:db: 35:8d:ba:6d:b0:6b:fb:28:e3:a3:01:cd:66:f7:c1:67:2b:43: e1:47:f7:b7:2f:57:fb:be:ea:69:fa:c8:bf:27:9e:85:c4:88: c9:1b:ed:6f:76:c2:e8:9f:78:72:be:fb:c8:95:4a:62:a9:65: 25:e3:3d:9f:54:85:7b:7e:ef:1b:22:b0:15:d5:12:7d:16:0e: 00:c6:de:c2:91:a2:36:2a:be:4d:da:05:cb:0d:68:3a:9a:59: a2:17:4d:56:fa:65:24:ae:b2:aa:7d:6c:05:aa:24:50:e7:94: 04:1f:32:0a:08:c9:d3:e4:a8:a7:b3:fd:62:f6:30:3b:13:9e: 69:da:f2:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsW/s9iwHOaJaEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk YzllMmQ5ZGMtMDhhZS00N2U0LWEyYTQtYWQ2YzA0NDNiNDc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+xDp+ZOMUXtYDe3VOWxIloXVPklrWP40Xl+ ng/bYOgcZ7untsZdobc7IgaIW+GVMtylwXu+6E0SY4N20AWaN5M771buxGuOpeGk sI/VZXRQAgUpC/RQWuVlOYcx7+Yamv8pU6LBL0t8cNnU0EL1WguPlxxHP5B6GYwQ a5iJLv5PTpOObFxT5u42ODYYMrePXKZfAxTVmIE2pBvsMGn3eSzLcjywJhlV7jUW dveAERCmrtyiJkjRwoqWZgchT1NUZzYFle+ZaX7+6Hl266m/Htobv7DuYP/MEEA8 HYwWrTslJssrG/L9+dI6FqGLYJ5Ss7xcsTTVMB92VglwL/QPBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNg3hdfGm+7pz6rLEiCPazptPloHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWYyMjVhYWMtZTA3Ny0z NjIwLTgzOGMtMDcwM2JlOGIzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU6NbZLETWkBjO+TDkEhjgZ5xCYlkZnRu+EFzFRJ9DTsTbGw/DfLNlU zYc+ipA/Cwy+zPIMJEZ0geUFNFPsIbthfztF0Z/V7mwKJxvhVr+MjCcn/tFuKdi8 xX/n6RwckeScyv1wA4hMpW5cDppMfrHTxQMF+EMtRiyXm38d2zWNum2wa/so46MB zWb3wWcrQ+FH97cvV/u+6mn6yL8nnoXEiMkb7W92wuifeHK++8iVSmKpZSXjPZ9U hXt+7xsisBXVEn0WDgDG3sKRojYqvk3aBcsNaDqaWaIXTVb6ZSSusqp9bAWqJFDn lAQfMgoIydPkqKez/WL2MDsTnmna8mU= -----END CERTIFICATE-----Generated at Mon Apr 28 09:08:31 2025 by rpki-client