$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa File: 13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa (raw, json) Hash identifier: VKn5kTzWd0DANLIEf2JRRS8dBvloQ1TKUZ0sjDww0lg= Subject key identifier: B6:DF:D0:8B:19:0D:16:4D:1E:1A:C5:B2:B8:01:88:76:1E:01:6C:17 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C65CF1DBF6C11B505180 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 137.220.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c6:5c:f1:db:f6:c1:1b:50:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=f53be10d-4326-4829-bb0a-9d9dcd35e92e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:73:08:88:00:4d:20:27:c9:16:45:f8:a0:ae: c4:f5:d2:96:34:cc:a2:a5:17:75:a1:d7:29:d5:a5: 51:31:f0:10:fa:48:45:f5:51:0d:6a:40:c1:9b:bd: e9:b4:bb:15:be:9d:65:ba:63:66:90:dc:82:12:f2: 4b:9a:7c:76:1f:6a:98:7c:29:3e:f9:83:1a:06:62: 3b:c8:9a:49:f4:ce:0b:c3:1e:13:ea:94:8e:c4:f7: c8:22:72:55:03:37:5d:68:d4:39:8a:20:e1:f6:1d: 36:f8:32:66:1e:c3:d5:c8:b3:fa:e7:fd:95:24:e6: 6a:c8:9c:5e:dc:8b:b8:97:a7:19:99:14:e5:17:3e: be:0a:b0:34:0b:02:c3:d0:1d:af:9a:ce:f9:91:b0: ef:68:2a:7f:6d:8c:7a:fa:cb:a1:e6:f9:54:0a:20: 69:9f:18:5d:d5:ca:7d:53:3b:57:3e:b0:fd:3b:a1: c4:f3:02:b4:3c:22:7c:f2:d2:3b:a9:7a:1f:63:9b: b2:b3:37:9a:3d:c9:cb:e2:14:61:7a:c6:54:e6:01: 8a:25:d7:10:78:d4:d4:f5:45:be:15:2c:27:62:42: 4b:ea:4b:91:79:4b:98:c5:42:45:b6:d7:4e:cf:fd: 04:68:47:5d:34:79:15:ac:76:91:cb:b8:fc:8f:2b: 45:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DF:D0:8B:19:0D:16:4D:1E:1A:C5:B2:B8:01:88:76:1E:01:6C:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/13b9dc64-fcd6-3168-bb8f-5aa2826d1526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 137.220.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:44:be:f2:d2:76:28:6e:f7:f6:8b:9f:78:1b:e5:06:0d:01: 51:39:34:28:75:dd:1a:fe:0f:80:5b:58:48:e9:f0:ad:5b:93: fe:a8:ff:f8:bf:c5:3e:41:9f:53:7b:93:0c:b7:e3:a2:07:51: ab:2b:55:ef:3d:d6:b0:a5:32:e1:f7:65:76:ce:2b:d0:6d:59: d2:5f:20:c2:2f:f5:42:50:50:ba:d7:bd:ed:5c:70:37:23:2c: 8c:68:3f:35:1a:a6:20:d0:41:3a:4f:df:ca:6c:71:98:ab:36: f4:09:e3:76:f3:90:78:83:af:6b:cc:e7:55:23:3a:a5:a3:3f: 39:26:19:2c:ce:5f:4c:e2:3b:f1:c2:f5:68:c9:89:f2:a1:91: 40:9b:38:fe:5c:5a:f7:fa:e3:7e:12:bf:5e:0b:4d:fd:8f:86: 3e:5a:be:d2:cc:89:1b:9e:ca:64:64:52:f8:7b:e5:39:3b:ba: d5:e2:20:c4:90:67:ca:46:c5:db:5b:fe:a1:8b:f2:e0:2f:f7: 6e:4b:46:83:1a:1e:9f:2c:69:98:c4:70:fa:2b:fe:89:a3:3e: 86:22:4c:7a:3a:64:55:72:4a:e8:cf:bf:0f:c1:dd:c9:97:2a: 2f:16:e6:0c:9c:66:db:3f:20:db:4e:fd:65:c3:ad:55:89:e3: 68:19:9e:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsZc8dv2wRtQUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjUzYmUxMGQtNDMyNi00ODI5LWJiMGEtOWQ5ZGNkMzVlOTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3MIiABNICfJFkX4oK7E9dKWNMyipRd1odcp 1aVRMfAQ+khF9VENakDBm73ptLsVvp1lumNmkNyCEvJLmnx2H2qYfCk++YMaBmI7 yJpJ9M4Lwx4T6pSOxPfIInJVAzddaNQ5iiDh9h02+DJmHsPVyLP65/2VJOZqyJxe 3Iu4l6cZmRTlFz6+CrA0CwLD0B2vms75kbDvaCp/bYx6+suh5vlUCiBpnxhd1cp9 UztXPrD9O6HE8wK0PCJ88tI7qXofY5uyszeaPcnL4hRhesZU5gGKJdcQeNTU9UW+ FSwnYkJL6kuReUuYxUJFttdOz/0EaEddNHkVrHaRy7j8jytF0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbf0IsZDRZNHhrFsrgBiHYeAWwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMTNiOWRjNjQtZmNkNi0z MTY4LWJiOGYtNWFhMjgyNmQxNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAidwEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVEvvLSdihu9/aLn3gb5QYNAVE5NCh13Rr+D4BbWEjp8K1bk/6o//i/ xT5Bn1N7kwy346IHUasrVe891rClMuH3ZXbOK9BtWdJfIMIv9UJQULrXve1ccDcj LIxoPzUapiDQQTpP38pscZirNvQJ43bzkHiDr2vM51UjOqWjPzkmGSzOX0ziO/HC 9WjJifKhkUCbOP5cWvf6434Sv14LTf2Phj5avtLMiRueymRkUvh75Tk7utXiIMSQ Z8pGxdtb/qGL8uAv925LRoMaHp8saZjEcPor/omjPoYiTHo6ZFVySujPvw/B3cmX Ki8W5gycZts/INtO/WXDrVWJ42gZnlI= -----END CERTIFICATE-----Generated at Wed Apr 9 07:48:54 2025 by rpki-client