$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa File: 36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa (raw, json) Hash identifier: 31PNM9aTWnGRxoOAEbSlpNxGCbg368X6parCgqJKrfg= Subject key identifier: 84:8C:21:22:DA:20:0D:C8:81:A9:DC:D6:4A:EF:2A:FD:A2:91:5F:37 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848EF6146878F0120F41C110EC0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 64.255.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:46:87:8f:01:20:f4:1c:11:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=40819207-9574-4417-b7d5-6fc558adbe92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:f8:f5:20:ed:99:bb:dd:e0:08:43:70:4b: cf:c5:8a:95:ce:97:80:64:06:85:8f:b4:34:cf:4e: cb:f6:ce:38:ee:08:58:1a:75:a1:db:73:23:83:b0: 5f:96:f3:d1:33:4c:1d:37:a5:cb:20:09:0a:2c:81: 87:9f:26:44:c9:29:cf:1c:57:31:2d:97:f1:48:f2: 70:70:b7:2d:0e:20:ff:ab:6f:b0:ae:db:c6:e1:08: 53:f1:74:7c:cb:a8:42:b6:40:0a:cf:5e:f7:2e:ff: 6f:33:8e:a0:39:74:0f:fb:28:ba:60:76:e9:ca:67: 0e:56:1b:65:57:bb:4e:e9:37:c6:85:c9:13:9e:54: 7b:53:5b:1b:06:72:85:38:ea:2d:b1:0d:49:5a:82: 24:0b:ad:d4:73:e2:ba:7f:45:21:ca:58:22:69:b7: e9:85:6f:9d:95:a0:75:77:51:e5:85:a6:68:92:e8: d7:e6:88:2c:80:a0:10:05:66:45:06:50:55:9a:47: 03:4c:3f:92:8d:4e:1b:b8:1b:cd:66:9a:6e:13:af: 39:99:b5:d4:34:d4:ad:4e:a2:d4:e3:ba:49:ee:b1: 2e:c5:12:c9:45:fb:da:47:8d:20:3e:c3:37:01:77: fa:d4:a2:0c:ca:5b:c1:91:f7:ab:cf:cd:f7:14:b0: c5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8C:21:22:DA:20:0D:C8:81:A9:DC:D6:4A:EF:2A:FD:A2:91:5F:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/36bdb659-b032-3ab4-a45c-642e8d4de1b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 64.255.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f0:c7:18:2e:48:ac:5f:ec:39:68:41:25:2f:b8:c8:eb:6d: 11:06:b8:61:9d:62:e2:9a:1c:dc:55:13:0b:fc:9c:13:2e:73: 82:08:65:de:05:31:cf:6a:57:61:e8:6b:0d:84:9a:45:1c:ac: 26:98:d9:a7:d2:d9:e9:47:93:c1:95:d7:80:d6:00:f6:7b:d2: 83:d0:85:a5:56:7e:43:44:96:47:d8:5c:40:25:36:27:dd:bc: 23:fa:05:1a:7d:bf:16:f9:d6:da:33:e4:ad:84:8e:ed:27:60: 4a:97:0d:e3:34:1f:43:a5:7b:f9:d2:cb:1c:ed:1e:ba:b9:4e: 37:be:67:54:34:59:6a:63:08:52:6f:06:68:66:a0:ac:85:f6: 19:6f:96:85:6a:c1:e0:c9:9e:31:bd:ea:c8:da:64:2a:ac:f0: 78:f9:9a:15:02:49:84:e0:c9:49:21:b5:35:ed:72:86:fa:0f: f4:e2:c1:13:c2:75:00:5e:ea:30:d7:1d:87:f5:08:fd:ab:38: 5e:b7:d1:54:aa:fe:88:80:bc:27:89:a8:93:8b:c9:d8:a2:90: f7:81:67:e7:ff:7f:6a:03:56:df:da:fa:87:7a:ac:83:3c:ca: 4b:86:eb:4d:07:9f:18:b5:16:5c:44:6c:14:23:69:51:ed:ee: 38:55:9c:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUaHjwEg9BwRDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk NDA4MTkyMDctOTU3NC00NDE3LWI3ZDUtNmZjNTU4YWRiZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtj349SDtmbvd4AhDcEvPxYqVzpeAZAaFj7Q0 z07L9s447ghYGnWh23Mjg7BflvPRM0wdN6XLIAkKLIGHnyZEySnPHFcxLZfxSPJw cLctDiD/q2+wrtvG4QhT8XR8y6hCtkAKz173Lv9vM46gOXQP+yi6YHbpymcOVhtl V7tO6TfGhckTnlR7U1sbBnKFOOotsQ1JWoIkC63Uc+K6f0UhylgiabfphW+dlaB1 d1HlhaZokujX5ogsgKAQBWZFBlBVmkcDTD+SjU4buBvNZppuE685mbXUNNStTqLU 47pJ7rEuxRLJRfvaR40gPsM3AXf61KIMylvBkferz833FLDFBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISMISLaIA3Iganc1krvKv2ikV83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMzZiZGI2NTktYjAzMi0z YWI0LWE0NWMtNjQyZThkNGRlMWI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQP/nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjwxxguSKxf7DloQSUvuMjrbREGuGGdYuKaHNxVEwv8nBMuc4IIZd4F Mc9qV2Hoaw2EmkUcrCaY2afS2elHk8GV14DWAPZ70oPQhaVWfkNElkfYXEAlNifd vCP6BRp9vxb51toz5K2Eju0nYEqXDeM0H0Ole/nSyxztHrq5Tje+Z1Q0WWpjCFJv BmhmoKyF9hlvloVqweDJnjG96sjaZCqs8Hj5mhUCSYTgyUkhtTXtcob6D/TiwRPC dQBe6jDXHYf1CP2rOF630VSq/oiAvCeJqJOLydiikPeBZ+f/f2oDVt/a+od6rIM8 ykuG600Hnxi1FlxEbBQjaVHt7jhVnKk= -----END CERTIFICATE-----Generated at Sat Apr 5 02:27:40 2025 by rpki-client