$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa File: 9f225aac-e077-3620-838c-0703be8b3123.roa (raw, json) Hash identifier: PPUx4oXYBDmzmI8pp4pK9ihr+HYetk/Pqd5OgDDar5A= Subject key identifier: 3B:5B:5A:C8:83:75:C8:E4:7B:37:93:8E:EC:C0:47:F2:1E:A3:B8:D7 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F432858457D25D4511CB6084C65430CC0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa Signing time: Tue 09 Apr 2024 13:38:20 +0000 ROA not before: Tue 09 Apr 2024 13:38:20 +0000 ROA not after: Mon 08 Jul 2024 13:38:20 +0000 asID: 16696 IP address blocks: 67.221.156.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Jun 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:7d:25:d4:51:1c:b6:08:4c:65:43:0c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Apr 9 13:38:20 2024 GMT Not After : Jul 8 13:38:20 2024 GMT Subject: CN=a5b958e6-9870-4720-a2bd-b5be32f7ac82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:9d:16:4f:41:7d:21:c2:68:d4:7a:89:97: 90:5f:fe:0f:f3:38:f9:f2:74:c0:79:c8:fc:80:b1: 10:33:c9:4e:50:ae:80:8d:24:34:a5:a9:90:1e:0c: 54:04:5b:73:fd:83:cf:27:ad:17:27:c7:31:c2:bc: 6f:db:91:d9:b5:9d:e7:e4:ee:14:a3:16:56:a5:c9: 75:e0:ca:28:bf:0f:b7:25:4e:fc:b5:7a:af:b0:b3: c6:1b:50:81:ea:fc:5d:80:48:e2:a7:da:b7:bd:31: b1:1c:ba:7b:d2:35:cb:17:b0:c1:d1:24:03:c1:37: 85:b0:e0:13:c8:67:1d:76:1a:a9:8a:01:53:3b:01: 5d:57:62:41:85:32:80:58:28:ca:d5:a7:52:df:6c: c0:bb:20:e7:75:b4:34:31:0c:e3:79:9d:99:76:e0: 19:cd:de:23:e9:b2:cc:83:25:22:a3:a4:1c:b9:78: 88:07:8b:a4:32:39:72:7f:af:8e:ee:07:e2:73:93: f5:d7:a6:58:a6:59:27:04:70:a0:b3:80:61:3a:c9: 11:e0:99:0a:be:3a:81:e9:eb:ba:54:9f:b4:06:4b: 34:50:1f:0b:09:36:a6:42:d6:b5:3c:53:be:39:b0: a7:81:e2:84:17:c9:a7:ed:05:f0:34:b2:ee:8b:be: 2f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:5B:5A:C8:83:75:C8:E4:7B:37:93:8E:EC:C0:47:F2:1E:A3:B8:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/9f225aac-e077-3620-838c-0703be8b3123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ae:05:b5:59:61:16:4c:9f:6a:b2:39:f1:e8:d5:41:97:f7: f6:97:43:9a:d9:26:b5:da:52:13:7a:c8:1d:33:a0:01:47:f7: b7:be:85:3b:db:01:f0:24:e2:0e:e1:dc:b3:09:11:a9:35:e3: 57:07:8f:dc:1c:f0:3d:3d:19:27:f1:4c:ca:76:d6:c6:0f:76: df:0c:cf:53:e4:fd:99:6e:e6:9e:38:84:c0:96:6c:46:74:3d: 14:70:bd:ee:46:80:41:22:91:fb:d5:c7:39:07:c1:20:2e:7b: 39:c9:fb:ef:1d:86:19:51:da:73:28:4d:f7:e8:c1:2b:b0:8a: 11:41:b2:30:7d:9a:e6:b4:e8:66:3d:1a:c6:5b:65:ee:57:ef: b0:42:83:f6:0e:b5:c7:bd:47:bc:8b:63:c3:25:59:c4:b2:1a: 41:7b:cc:1e:34:92:6f:7a:cc:ad:79:0d:7f:06:42:d9:a4:fe: b5:92:db:3d:72:6e:e4:12:5e:27:73:9b:2c:35:c5:d8:32:6b: 6e:72:6e:aa:e6:ec:73:32:6b:6f:f7:9a:3e:90:f9:46:5a:8f: 5e:c5:a2:f4:98:5a:9d:9e:9b:90:7a:77:88:de:bd:9b:54:42: 82:ac:74:03:b5:66:36:4b:9d:95:bd:5d:b3:ff:e6:61:a9:53: 34:44:f8:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEV9JdRRHLYITGVDDMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI0MDQwOTEzMzgyMFoXDTI0MDcwODEzMzgyMFowLzEtMCsGA1UEAxMk YTViOTU4ZTYtOTg3MC00NzIwLWEyYmQtYjViZTMyZjdhYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh6dFk9BfSHCaNR6iZeQX/4P8zj58nTAecj8 gLEQM8lOUK6AjSQ0pamQHgxUBFtz/YPPJ60XJ8cxwrxv25HZtZ3n5O4UoxZWpcl1 4Moovw+3JU78tXqvsLPGG1CB6vxdgEjip9q3vTGxHLp70jXLF7DB0SQDwTeFsOAT yGcddhqpigFTOwFdV2JBhTKAWCjK1adS32zAuyDndbQ0MQzjeZ2ZduAZzd4j6bLM gyUio6QcuXiIB4ukMjlyf6+O7gfic5P116ZYplknBHCgs4BhOskR4JkKvjqB6eu6 VJ+0Bks0UB8LCTamQta1PFO+ObCngeKEF8mn7QXwNLLui74v4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtbWsiDdcjkezeTjuzAR/Ieo7jXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvOWYyMjVhYWMtZTA3Ny0z NjIwLTgzOGMtMDcwM2JlOGIzMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6uBbVZYRZMn2qyOfHo1UGX9/aXQ5rZJrXaUhN6yB0zoAFH97e+hTvb AfAk4g7h3LMJEak141cHj9wc8D09GSfxTMp21sYPdt8Mz1Pk/Zlu5p44hMCWbEZ0 PRRwve5GgEEikfvVxzkHwSAueznJ++8dhhlR2nMoTffowSuwihFBsjB9mua06GY9 GsZbZe5X77BCg/YOtce9R7yLY8MlWcSyGkF7zB40km96zK15DX8GQtmk/rWS2z1y buQSXidzmyw1xdgya25ybqrm7HMya2/3mj6Q+UZaj17FovSYWp2em5B6d4jevZtU QoKsdAO1ZjZLnZW9XbP/5mGpUzRE+Dk= -----END CERTIFICATE-----Generated at Sun Jun 2 17:02:08 2024 by rpki-client on console-fra.rpki-client.org