$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa File: bd1174b0-373e-323a-98b4-6e3acea78c49.roa (raw, json) Hash identifier: r8uk8a0VLqn8EfDswDJcCbgm1Nteqy41BtZlTDQG204= Subject key identifier: 63:CA:91:6B:1D:41:A2:AD:F4:54:1C:0A:3B:2F:2D:8C:1A:28:9B:49 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848EF6146785AB0D4E6CE1301F4 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 64.255.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:46:78:5a:b0:d4:e6:ce:13:01:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=9b94c11d-39cd-4ac4-bd0f-b3578d5d12ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:77:3e:51:72:a8:53:44:ce:8d:43:13:0f:a1: fa:fb:4d:c0:5e:d1:b9:df:dc:3f:61:17:1c:a0:37: 64:d0:d0:95:fd:c6:72:f8:97:ed:08:a3:f0:2f:b7: c9:f8:00:33:ed:69:04:34:93:bd:cc:30:7d:42:06: b5:f4:9e:c1:2b:76:cc:90:62:25:0c:e1:fa:27:8a: db:ef:ac:de:bb:aa:2c:74:61:52:82:fe:a9:70:af: 29:b1:6e:6b:e9:0c:e3:68:31:50:a8:87:e5:23:d4: ef:38:fd:fd:63:af:9f:5d:ff:f2:d7:de:c3:d3:01: e3:67:90:9b:05:c1:28:c8:08:88:24:15:07:98:0c: 17:68:52:c7:b1:ff:42:89:24:a0:c2:4d:00:e1:c9: f4:59:f1:05:a5:24:9a:a2:0f:31:36:60:08:dc:56: 0c:81:e5:34:51:4d:52:f3:85:7e:bc:1c:eb:72:60: d5:20:77:fc:db:51:ee:3c:21:f9:5c:4e:2d:2c:f2: 92:9c:c2:aa:ce:23:92:37:3e:43:cb:25:f6:ee:cc: 7b:2d:5d:e6:f2:89:0f:da:ad:07:2a:38:4c:ee:f4: d9:e1:a5:20:70:a3:53:58:cd:10:4f:ba:35:cb:04: f6:f3:93:b7:10:af:d0:fc:b9:52:f5:30:05:ce:e1: 1a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:CA:91:6B:1D:41:A2:AD:F4:54:1C:0A:3B:2F:2D:8C:1A:28:9B:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/bd1174b0-373e-323a-98b4-6e3acea78c49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 64.255.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:9e:41:c5:11:02:bb:dc:16:2d:45:53:41:61:f7:29:f0:e8: fb:ca:6e:7d:b7:45:36:6b:fe:d9:c9:1f:35:af:32:d6:4c:f0: 89:2d:c5:a6:82:8a:76:a8:9d:bb:55:13:cd:48:43:1c:f1:24: 97:a9:f0:27:5a:93:91:ac:40:be:b5:ba:b7:dd:df:56:07:d4: 23:ee:a7:56:b2:97:10:fc:0f:02:d5:09:66:ec:c0:73:8c:7f: cc:bd:eb:8b:47:39:f3:34:38:cd:33:95:2d:13:3f:c6:38:24: a7:fa:d8:1e:94:e2:56:c1:8d:41:ed:14:91:8c:b4:b5:21:9d: 6e:e7:20:8d:16:79:90:3b:2a:ba:dc:30:c0:a4:88:6c:34:9a: 62:42:e6:68:1b:11:4b:c5:37:5b:6e:7f:3b:63:61:9e:20:03: f6:77:4f:3c:19:e4:8e:94:ba:3c:f2:a9:0b:7b:9c:59:a7:10: 6d:22:f5:d3:fc:70:40:64:b6:c2:94:00:6f:b7:8b:2e:aa:d0: 56:b0:55:2e:c8:fc:e3:4f:89:f9:2a:fc:67:3e:cb:93:4c:8c: 4f:51:52:1b:29:1d:4b:01:67:7d:40:0f:11:06:ee:10:63:64: 20:9d:08:54:6b:84:dd:df:0e:8d:5d:e8:cb:77:de:e1:7a:c5: b3:d1:32:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUZ4WrDU5s4TAfQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk OWI5NGMxMWQtMzljZC00YWM0LWJkMGYtYjM1NzhkNWQxMmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHc+UXKoU0TOjUMTD6H6+03AXtG539w/YRcc oDdk0NCV/cZy+JftCKPwL7fJ+AAz7WkENJO9zDB9Qga19J7BK3bMkGIlDOH6J4rb 76zeu6osdGFSgv6pcK8psW5r6QzjaDFQqIflI9TvOP39Y6+fXf/y197D0wHjZ5Cb BcEoyAiIJBUHmAwXaFLHsf9CiSSgwk0A4cn0WfEFpSSaog8xNmAI3FYMgeU0UU1S 84V+vBzrcmDVIHf821HuPCH5XE4tLPKSnMKqziOSNz5DyyX27sx7LV3m8okP2q0H KjhM7vTZ4aUgcKNTWM0QT7o1ywT285O3EK/Q/LlS9TAFzuEaMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGPKkWsdQaKt9FQcCjsvLYwaKJtJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYmQxMTc0YjAtMzczZS0z MjNhLTk4YjQtNmUzYWNlYTc4YzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP/mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeeQcURArvcFi1FU0Fh9ynw6PvKbn23RTZr/tnJHzWvMtZM8IktxaaC inaonbtVE81IQxzxJJep8Cdak5GsQL61urfd31YH1CPup1aylxD8DwLVCWbswHOM f8y964tHOfM0OM0zlS0TP8Y4JKf62B6U4lbBjUHtFJGMtLUhnW7nII0WeZA7Krrc MMCkiGw0mmJC5mgbEUvFN1tufztjYZ4gA/Z3TzwZ5I6UujzyqQt7nFmnEG0i9dP8 cEBktsKUAG+3iy6q0FawVS7I/ONPifkq/Gc+y5NMjE9RUhspHUsBZ31ADxEG7hBj ZCCdCFRrhN3fDo1d6Mt33uF6xbPRMqY= -----END CERTIFICATE-----Generated at Mon Apr 28 11:32:48 2025 by rpki-client