$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa File: 3a89c06e-a521-389e-bffb-da5a48fb6376.roa (raw, json) Hash identifier: d3bIvap2OQE/rhjr/WcphS41WV4MBnnWEdAb1QOokZI= Subject key identifier: B7:7C:D7:71:AC:53:F7:55:2D:CB:91:1E:15:0D:61:39:B0:DE:B2:A2 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848FD56C6991A7B32B157C70BC0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa Signing time: Mon 24 Feb 2025 14:00:52 +0000 ROA not before: Mon 24 Feb 2025 14:00:52 +0000 ROA not after: Sun 25 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 147.129.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:fd:56:c6:99:1a:7b:32:b1:57:c7:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 24 14:00:52 2025 GMT Not After : May 25 13:00:52 2025 GMT Subject: CN=7c359286-e987-491b-8b19-0e1a2e67c845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:a6:85:21:f0:d0:2f:35:c0:0b:63:32:25:64: 3e:5a:32:e3:a5:db:94:ed:17:d7:54:ed:00:dc:79: da:dc:27:08:16:d7:2e:39:20:ed:d1:fa:ac:60:b6: e8:27:bc:3b:f8:a3:74:ab:11:74:f9:44:4f:00:dc: a6:1b:eb:a9:43:db:f5:2c:5e:82:96:1d:ff:d1:67: 27:00:6f:a7:80:b7:22:58:e7:bc:b3:f7:3b:a3:3f: 98:e8:7d:ae:19:01:f4:2c:d4:f0:1b:e7:08:97:76: bd:80:de:d4:c2:b1:b3:4e:61:9f:28:f5:4e:f1:b9: c1:42:6e:90:0a:f1:8a:02:c2:79:42:f3:0d:08:65: 74:da:3f:91:43:8c:32:c9:fb:2b:3d:48:f9:3b:e6: c6:f4:28:42:68:26:fc:99:7b:10:73:4f:74:5d:20: 41:4c:69:ae:70:4f:fa:5c:04:a8:cd:c0:57:65:d0: 89:12:b7:a6:2c:e5:7a:2e:a9:6f:46:d6:61:1c:40: ff:0f:07:81:05:a8:bf:18:49:a7:7c:9e:29:07:05: d5:79:36:db:88:05:ee:2a:89:07:46:5a:24:95:32: 98:2f:99:a7:c0:d6:89:56:81:fe:bd:a4:d4:a8:c6: 0d:8a:53:67:ef:fc:d3:ca:28:34:ee:0f:10:a4:2b: 9e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7C:D7:71:AC:53:F7:55:2D:CB:91:1E:15:0D:61:39:B0:DE:B2:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/3a89c06e-a521-389e-bffb-da5a48fb6376.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 147.129.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:ad:f1:99:75:9d:0b:71:4b:66:7c:e9:6c:f1:2d:0d:2d:de: 82:95:95:61:ed:18:28:ee:22:50:9f:70:54:62:d2:2d:a6:65: c5:91:17:4d:4c:73:6a:6e:b1:23:52:40:f7:e6:a6:a8:f4:14: fc:02:42:76:f6:4e:cc:39:9f:32:94:e7:5f:96:c5:ca:68:83: 5b:1f:73:e3:ed:76:8c:c9:0e:43:d5:89:c6:a6:c8:c0:03:90: 2b:05:4d:ac:a0:30:76:2e:7a:16:14:58:3b:3e:74:4c:b7:38: 36:13:45:3e:01:ba:bf:38:63:96:28:73:f8:7b:d6:c6:b6:ac: e5:58:dd:ef:d8:f5:67:43:7c:fd:b7:6b:27:6b:d5:02:c7:d9: 5d:6a:ba:d6:00:f6:e5:04:dd:f2:06:18:74:a6:50:24:41:6b: 1e:74:63:a7:82:9d:b2:66:4d:e6:44:c2:ee:9b:2a:54:f2:93: 43:bd:bf:18:46:51:5a:6f:3f:a1:dd:41:4b:4a:62:29:67:27: 99:72:41:80:f4:dd:f3:6e:ea:89:76:22:31:f7:1d:94:cc:94: de:22:b6:bb:7d:eb:55:e8:4a:18:55:d6:3d:52:60:e6:b9:a6: 60:c1:05:59:03:9e:b3:4e:f7:d1:97:24:90:30:d0:fe:b6:98: d0:b1:fd:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsaZGnsysVfHC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk N2MzNTkyODYtZTk4Ny00OTFiLThiMTktMGUxYTJlNjdjODQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qaFIfDQLzXAC2MyJWQ+WjLjpduU7RfXVO0A 3Hna3CcIFtcuOSDt0fqsYLboJ7w7+KN0qxF0+URPANymG+upQ9v1LF6Clh3/0Wcn AG+ngLciWOe8s/c7oz+Y6H2uGQH0LNTwG+cIl3a9gN7UwrGzTmGfKPVO8bnBQm6Q CvGKAsJ5QvMNCGV02j+RQ4wyyfsrPUj5O+bG9ChCaCb8mXsQc090XSBBTGmucE/6 XASozcBXZdCJEremLOV6LqlvRtZhHED/DweBBai/GEmnfJ4pBwXVeTbbiAXuKokH RloklTKYL5mnwNaJVoH+vaTUqMYNilNn7/zTyig07g8QpCuetQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLd813GsU/dVLcuRHhUNYTmw3rKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvM2E4OWMwNmUtYTUyMS0z ODllLWJmZmItZGE1YTQ4ZmI2Mzc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCk4GwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSt8Zl1nQtxS2Z86WzxLQ0t3oKVlWHtGCjuIlCfcFRi0i2mZcWRF01M c2pusSNSQPfmpqj0FPwCQnb2Tsw5nzKU51+Wxcpog1sfc+PtdozJDkPVicamyMAD kCsFTaygMHYuehYUWDs+dEy3ODYTRT4Bur84Y5Yoc/h71sa2rOVY3e/Y9WdDfP23 aydr1QLH2V1qutYA9uUE3fIGGHSmUCRBax50Y6eCnbJmTeZEwu6bKlTyk0O9vxhG UVpvP6HdQUtKYilnJ5lyQYD03fNu6ol2IjH3HZTMlN4itrt961XoShhV1j1SYOa5 pmDBBVkDnrNO99GXJJAw0P62mNCx/Qg= -----END CERTIFICATE-----Generated at Fri Apr 4 19:40:43 2025 by rpki-client