$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa File: 2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa (raw, json) Hash identifier: GTvcaFWuw/1FFp875SLGNTs8TvNXqdtislC2ZSVTfi4= Subject key identifier: 58:FD:7F:A6:30:95:EE:75:04:AC:D9:21:27:76:03:6F:50:F8:8B:82 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56BC4DEE83E764D0FF0DE0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 148.59.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:bc:4d:ee:83:e7:64:d0:ff:0d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=ca61a906-611e-4d0f-8fe2-694feb44f833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:cd:ed:c3:a9:d3:5a:76:10:03:2d:e9:cb:cd: 48:7b:ce:71:f6:3a:c0:69:a5:c4:3e:6a:c9:17:85: f5:30:1b:9a:cc:19:69:5a:ad:84:c2:11:82:16:4a: fc:e1:a3:49:1f:72:8e:5b:73:c4:83:c7:2c:7d:89: a0:c1:40:7a:ce:8e:73:33:37:2a:8d:28:42:1c:cb: 67:81:f3:0d:db:9f:cd:6e:da:6e:97:b0:8b:fc:0c: 11:bc:cd:59:c9:45:58:db:a6:14:ea:3c:db:05:b4: 85:e6:72:fd:36:29:23:60:55:3c:26:d9:07:11:37: 2f:a5:97:da:49:e5:f9:b8:b3:6f:b6:1b:07:d5:01: 08:f5:62:5c:92:27:b0:01:4f:fc:2e:ce:27:fa:9c: ec:87:bb:d5:6c:1c:63:8a:4a:77:01:00:29:22:64: ed:db:5c:18:28:25:d4:89:c2:80:8a:05:cf:82:33: 25:35:7d:4c:ef:5c:37:8c:1b:17:9f:03:c3:8b:e4: 2f:d0:2d:8c:b2:d6:4a:cd:be:9b:7c:fe:d9:d0:80: 79:9a:60:5f:91:ab:f7:3a:bc:bb:22:63:c1:ef:68: 99:c8:a8:27:39:84:be:9c:f7:86:9e:f5:bb:e8:aa: 63:f2:69:ce:aa:49:23:21:1e:ad:d5:7e:6c:d8:1e: 37:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:7F:A6:30:95:EE:75:04:AC:D9:21:27:76:03:6F:50:F8:8B:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/2229e800-e3ef-3957-8380-86d3c1d9f0c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 148.59.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:3d:6a:23:4b:4c:db:50:d8:a4:e3:ff:7a:f9:8d:ff:cc:38: ca:c3:0a:da:fa:4f:95:b8:7a:5f:db:61:f8:67:ca:95:b7:4f: a2:b2:2d:41:c0:71:df:a4:20:51:68:af:67:6a:e4:39:85:3e: 20:9f:fd:09:1e:2a:40:ca:e7:89:81:61:cc:86:68:53:91:8f: f4:b0:2a:6d:c2:51:73:30:dd:c0:c5:5f:2d:a4:bb:8a:28:d2: ba:93:33:6c:ba:ba:8c:58:f0:9d:dc:e1:ce:2e:7d:ea:f8:40: eb:dd:af:a7:9e:a4:44:7f:42:24:2d:ff:ec:d6:41:b1:dd:0e: f0:9a:5b:5c:a4:40:66:dc:50:ca:ec:f5:a2:ea:9b:29:bc:fb: cc:55:ca:6c:aa:08:77:e9:1a:e3:ab:a2:76:0f:66:a3:e2:31: 31:5a:d1:61:8d:b0:21:d4:9d:00:99:4f:eb:91:8e:e3:65:65: 8c:bf:16:27:a6:08:a0:7a:30:75:53:c1:91:7a:f9:fb:a2:2e: c5:2a:66:9d:b5:b7:85:82:3f:a6:3c:38:7f:96:1e:6d:62:16: fb:6b:65:cf:93:5c:b2:6e:a4:de:e4:3c:09:f1:41:a6:e3:a9: 2e:dd:25:95:70:50:a9:35:ac:84:14:50:07:98:ed:35:d3:32: ca:ce:ef:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VrxN7oPnZND/DeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2E2MWE5MDYtNjExZS00ZDBmLThmZTItNjk0ZmViNDRmODMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkc3tw6nTWnYQAy3py81Ie85x9jrAaaXEPmrJ F4X1MBuazBlpWq2EwhGCFkr84aNJH3KOW3PEg8csfYmgwUB6zo5zMzcqjShCHMtn gfMN25/Nbtpul7CL/AwRvM1ZyUVY26YU6jzbBbSF5nL9NikjYFU8JtkHETcvpZfa SeX5uLNvthsH1QEI9WJckiewAU/8Ls4n+pzsh7vVbBxjikp3AQApImTt21wYKCXU icKAigXPgjMlNX1M71w3jBsXnwPDi+Qv0C2MstZKzb6bfP7Z0IB5mmBfkav3Ory7 ImPB72iZyKgnOYS+nPeGnvW76Kpj8mnOqkkjIR6t1X5s2B43FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj9f6Ywle51BKzZISd2A29Q+IuCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMjIyOWU4MDAtZTNlZi0z OTU3LTgzODAtODZkM2MxZDlmMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDu1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFU9aiNLTNtQ2KTj/3r5jf/MOMrDCtr6T5W4el/bYfhnypW3T6KyLUHA cd+kIFFor2dq5DmFPiCf/QkeKkDK54mBYcyGaFORj/SwKm3CUXMw3cDFXy2ku4oo 0rqTM2y6uoxY8J3c4c4ufer4QOvdr6eepER/QiQt/+zWQbHdDvCaW1ykQGbcUMrs 9aLqmym8+8xVymyqCHfpGuOronYPZqPiMTFa0WGNsCHUnQCZT+uRjuNlZYy/Fiem CKB6MHVTwZF6+fuiLsUqZp21t4WCP6Y8OH+WHm1iFvtrZc+TXLJupN7kPAnxQabj qS7dJZVwUKk1rIQUUAeY7TXTMsrO75A= -----END CERTIFICATE-----Generated at Sat Apr 5 04:40:48 2025 by rpki-client