$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa File: 02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa (raw, json) Hash identifier: Alg46T+Xtkgh/pnS3kTRoSLtgdcvD8JhgCUilfJ0z9o= Subject key identifier: 2D:E1:85:6B:43:15:6D:B7:03:1F:9F:06:62:4D:6F:26:3C:DB:94:A6 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C5D3CCDBF2EC40B9C800 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 67.221.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c5:d3:cc:db:f2:ec:40:b9:c8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=9f3928ab-30b8-4101-8bf2-c04eeb8377a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:87:22:be:02:be:cc:95:02:65:1b:e0:26: 60:ed:ef:f1:88:db:b7:ab:de:bc:d2:41:4f:6a:ce: 52:a2:9a:87:30:68:c3:2f:b9:21:ce:84:ca:7e:8f: df:95:94:aa:b7:d2:46:6e:1c:60:6c:2c:20:18:97: ea:6b:16:e3:7a:de:89:ca:f6:35:69:02:9f:08:c6: b6:62:da:eb:22:9e:0d:62:6e:e3:cb:e4:33:c2:77: 65:5b:44:f7:5d:24:f5:25:27:78:74:ce:97:04:c0: 68:96:38:02:79:d7:49:f5:0a:7f:06:cb:d2:a1:2c: 0b:71:3a:f4:5d:9b:77:5b:b1:d0:37:7f:ae:d8:fb: 18:18:8f:ed:b7:cd:50:68:df:4e:55:ce:b2:c6:9d: 0a:96:66:e9:fc:0e:e8:7e:58:30:a7:a4:f5:58:63: a2:04:3d:82:84:3b:08:ea:fa:91:d6:74:0d:1e:5a: ea:0e:cf:c1:38:62:32:57:ce:25:dc:27:75:80:6c: af:e3:1e:8f:9f:5f:d8:52:39:ce:c5:11:42:f0:96: 1e:4f:2a:e1:7c:6f:a8:d2:45:92:90:d0:06:36:c9: d9:27:ea:52:6b:8d:e9:b6:1e:30:29:b8:2a:f7:49: ed:66:90:40:cd:0c:3d:bc:a8:fa:d8:72:f6:79:aa: 16:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E1:85:6B:43:15:6D:B7:03:1F:9F:06:62:4D:6F:26:3C:DB:94:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/02238ff8-b7ad-3f31-bb16-ff4c0a6a120c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:57:e2:8c:04:75:cf:da:38:f9:8c:fd:f0:5f:16:59:81:29: b5:24:17:1f:f6:4d:7f:f9:a0:6d:cf:9f:eb:6a:03:0f:3c:d7: 7c:b7:32:52:ce:86:b4:91:d8:44:38:5e:9d:47:87:f3:5b:39: d4:c7:ae:1e:a3:73:48:2a:40:4a:af:bc:63:a3:59:7d:c8:a9: 87:90:c4:99:de:a3:99:d9:f2:8b:3d:6d:b2:3a:d4:f9:e8:bd: da:14:40:39:f8:e7:73:72:47:cc:a6:42:62:8e:a7:94:f5:d9: 48:26:89:bb:85:89:e5:91:59:f2:78:af:76:3e:ee:82:28:66: f8:5e:cf:5f:bf:f7:64:74:20:d7:dd:3d:a4:78:b0:1b:44:6e: 46:05:99:9c:9b:ac:e0:4c:a1:e7:fd:68:84:40:c9:53:d1:df: 88:56:89:7d:fe:89:f3:82:45:75:f5:44:f5:c1:23:36:b6:7c: 0a:3b:a2:31:e7:32:e0:da:bb:ce:de:41:27:3c:f7:a8:e7:c5: 33:86:5f:ca:fc:aa:22:8a:77:5d:d8:a1:c3:ca:8c:59:68:22: a2:3b:29:12:5b:a6:4a:33:0e:fd:f2:47:c4:d9:ce:b2:06:72: bb:22:6d:59:98:f9:41:9a:bd:03:72:93:5a:1e:67:24:79:26: f5:b6:1c:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsXTzNvy7EC5yAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk OWYzOTI4YWItMzBiOC00MTAxLThiZjItYzA0ZWViODM3N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLaHIr4CvsyVAmUb4CZg7e/xiNu3q9680kFP as5SopqHMGjDL7khzoTKfo/flZSqt9JGbhxgbCwgGJfqaxbjet6JyvY1aQKfCMa2 YtrrIp4NYm7jy+QzwndlW0T3XST1JSd4dM6XBMBoljgCeddJ9Qp/BsvSoSwLcTr0 XZt3W7HQN3+u2PsYGI/tt81QaN9OVc6yxp0Klmbp/A7oflgwp6T1WGOiBD2ChDsI 6vqR1nQNHlrqDs/BOGIyV84l3Cd1gGyv4x6Pn1/YUjnOxRFC8JYeTyrhfG+o0kWS kNAGNsnZJ+pSa43pth4wKbgq90ntZpBAzQw9vKj62HL2eaoW7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC3hhWtDFW23Ax+fBmJNbyY825SmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDIyMzhmZjgtYjdhZC0z ZjMxLWJiMTYtZmY0YzBhNmExMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92cMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJX4owEdc/aOPmM/fBfFlmBKbUkFx/2TX/5oG3Pn+tqAw8813y3MlLO hrSR2EQ4Xp1Hh/NbOdTHrh6jc0gqQEqvvGOjWX3IqYeQxJneo5nZ8os9bbI61Pno vdoUQDn453NyR8ymQmKOp5T12UgmibuFieWRWfJ4r3Y+7oIoZvhez1+/92R0INfd PaR4sBtEbkYFmZybrOBMoef9aIRAyVPR34hWiX3+ifOCRXX1RPXBIza2fAo7ojHn MuDau87eQSc896jnxTOGX8r8qiKKd13YocPKjFloIqI7KRJbpkozDv3yR8TZzrIG crsibVmY+UGavQNyk1oeZyR5JvW2HO4= -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:08 2025 by rpki-client