$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa File: 3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa (raw, json) Hash identifier: bsYFAPBdUZXwKV1vfj8DPv+b7j/cY6EGxBIWd8VQg6Y= Subject key identifier: B3:B5:B5:91:12:17:BB:B7:6F:12:D7:75:D5:97:89:B7:77:3E:8F:2E Certificate issuer: /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Certificate serial: 010D0C9F4328584902EC04130E89EE5B3CD62200 Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 14618 IP address blocks: 155.63.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:04:13:0e:89:ee:5b:3c:d6:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=b39a2dc9-bed5-49c5-96ab-45185982707e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:db:fa:f5:20:e4:cd:07:a5:d7:e8:8b:a8:8f: 5b:6a:f3:a3:90:6e:87:46:cf:8c:4e:e5:b0:97:c1: 11:a6:3e:9e:6e:2a:e6:9e:79:09:89:70:2b:60:ea: fd:aa:ea:ec:cf:fd:55:03:9b:aa:56:f7:17:5a:65: 80:e7:c2:32:06:d0:93:f6:e2:8d:93:3d:ba:85:28: a0:a7:27:3b:c2:16:22:f4:2c:bc:f2:96:a6:90:41: 5b:47:e6:ca:11:f6:88:9b:42:0e:c5:5f:19:eb:75: 96:7d:12:28:1b:7f:45:86:bb:c4:99:05:ee:dc:a7: 41:2b:a9:7d:9f:32:96:3e:39:f8:57:cd:db:ed:95: d9:b2:d2:7e:62:92:66:41:5a:df:63:63:0e:e4:13: 9d:d8:f9:06:ba:be:f1:b4:46:e5:fc:f9:fb:2a:26: ab:5c:d1:79:a7:22:8c:0a:6c:95:a9:bb:84:84:8a: d7:79:97:98:9f:e0:f1:a3:cc:2b:0b:fd:73:00:b8: f1:24:62:2f:29:2a:a3:6c:fc:d3:48:73:c5:35:b5: af:95:fa:1d:98:23:78:79:02:75:5d:b5:1d:28:af: 5f:24:0b:57:59:23:6d:7c:6a:07:00:1f:47:74:0c: 39:9c:68:7b:06:7c:8e:d9:c4:a6:24:4e:86:6a:9c: 15:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:B5:B5:91:12:17:BB:B7:6F:12:D7:75:D5:97:89:B7:77:3E:8F:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/3732cd29-d59f-37c4-897e-eb3fd1528fe8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl X509v3 Authority Key Identifier: keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer sbgp-ipAddrBlock: critical IPv4: 155.63.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:76:6a:92:b2:c1:ff:c9:10:35:cc:1b:1e:ae:ef:df:c4:01: 74:30:36:4c:c9:21:16:f9:be:24:2d:95:84:51:26:2e:fc:17: ea:ec:a5:64:b6:34:09:53:b8:15:72:8d:2b:f9:e5:ab:cb:33: 0f:8a:9e:13:b8:e8:00:95:4b:40:3f:2b:c7:e2:de:01:aa:77: f3:94:9e:19:d3:0e:46:0c:80:0a:b7:a8:4c:5d:cb:90:27:0c: ba:bb:37:31:27:12:0b:7d:05:ef:d1:4c:58:9e:f6:25:b5:90: df:3b:2b:f7:8d:26:69:68:a9:77:76:18:d7:09:5e:51:3d:b7: 72:51:f9:4a:f8:cd:b3:d6:80:e1:69:87:79:29:a3:d7:01:1c: 2f:48:36:6f:2b:fb:3f:be:df:44:5a:4a:07:30:24:b4:c8:e8: fd:d0:1e:f2:05:fa:dc:3c:8f:e7:b1:08:28:a3:11:6f:c8:43: fb:1d:45:ca:39:c7:d6:3e:f4:de:c8:63:5d:a3:d5:e2:3e:d8: 2a:a7:2f:a5:36:3b:79:a4:2d:62:8e:2d:98:ca:86:83:05:e6: 37:36:ec:dd:ca:0d:f4:7c:c1:80:dc:f0:45:09:a2:51:62:0e: 38:ab:e7:a0:a7:be:da:f5:8e:2b:a1:1e:a9:c0:4a:4f:1b:b7: a2:38:bd:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7AQTDonuWzzWIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1 OGQ2MB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk YjM5YTJkYzktYmVkNS00OWM1LTk2YWItNDUxODU5ODI3MDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdv69SDkzQel1+iLqI9bavOjkG6HRs+MTuWw l8ERpj6ebirmnnkJiXArYOr9qursz/1VA5uqVvcXWmWA58IyBtCT9uKNkz26hSig pyc7whYi9Cy88pamkEFbR+bKEfaIm0IOxV8Z63WWfRIoG39FhrvEmQXu3KdBK6l9 nzKWPjn4V83b7ZXZstJ+YpJmQVrfY2MO5BOd2PkGur7xtEbl/Pn7KiarXNF5pyKM CmyVqbuEhIrXeZeYn+Dxo8wrC/1zALjxJGIvKSqjbPzTSHPFNbWvlfodmCN4eQJ1 XbUdKK9fJAtXWSNtfGoHAB9HdAw5nGh7BnyO2cSmJE6GapwVkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLO1tZESF7u3bxLXddWXibd3Po8uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4 OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMzczMmNkMjktZDU5Zi0z N2M0LTg5N2UtZWIzZmQxNTI4ZmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0 YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz/cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZ2apKywf/JEDXMGx6u79/EAXQwNkzJIRb5viQtlYRRJi78F+rspWS2 NAlTuBVyjSv55avLMw+KnhO46ACVS0A/K8fi3gGqd/OUnhnTDkYMgAq3qExdy5An DLq7NzEnEgt9Be/RTFie9iW1kN87K/eNJmloqXd2GNcJXlE9t3JR+Ur4zbPWgOFp h3kpo9cBHC9INm8r+z++30RaSgcwJLTI6P3QHvIF+tw8j+exCCijEW/IQ/sdRco5 x9Y+9N7IY12j1eI+2CqnL6U2O3mkLWKOLZjKhoMF5jc27N3KDfR8wYDc8EUJolFi Djir56Cnvtr1jiuhHqnASk8bt6I4vQo= -----END CERTIFICATE-----Generated at Sat Apr 26 13:18:31 2025 by rpki-client