$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4c0056a8-1f48-302c-9861-b9caab15f95a.roa File: 4c0056a8-1f48-302c-9861-b9caab15f95a.roa (raw, json) Hash identifier: 54TAOUAErHuH51tRsDERZ60xPMa9zgAATeNUHGd6LD4= Subject key identifier: 49:E9:6C:05:ED:47:1A:68:55:95:EF:78:8B:95:7D:80:AB:0B:62:7F Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848EF6146A4DB226E9A6C2EDE00 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4c0056a8-1f48-302c-9861-b9caab15f95a.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 66.255.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:46:a4:db:22:6e:9a:6c:2e:de:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=c6b0d73b-9da2-4ff6-84a7-d68692907414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:a0:fc:87:94:f3:0e:fb:33:dd:7e:6c:e3:40: 79:3c:e4:2a:d5:57:40:b5:ae:05:cf:52:2a:a3:26: 5a:44:b7:e6:c4:0e:5e:b5:f8:e2:19:98:50:c4:b7: 69:2a:e6:53:fc:55:f0:63:31:fb:2e:29:d4:a2:e5: 38:99:20:2b:20:65:be:7f:68:e3:c7:c2:e5:7e:81: 8d:2d:75:98:5e:cf:d5:db:59:fe:c1:74:f5:d1:ef: 60:29:95:c1:24:b2:fa:79:ea:82:df:bb:a3:38:5e: 71:b3:39:b1:81:3a:c7:6c:d0:94:0c:0b:db:e4:54: bd:28:54:25:1f:e6:9f:ce:d4:b8:89:6e:a9:0e:2f: cd:96:7b:51:6b:1f:4d:31:f4:3e:3b:9a:db:35:1a: f0:0d:9f:6a:30:65:75:5f:16:f1:ab:dc:e9:6e:9d: fa:a5:67:86:a0:9f:18:33:28:1b:1b:06:73:f5:70: c8:2a:e0:07:2b:ba:cf:16:8c:a4:ed:b7:fc:eb:2a: 99:a9:2d:ce:c6:07:26:ce:33:1e:01:4d:77:cf:e6: a4:f6:3f:01:62:e3:4c:34:ce:82:3e:c4:1a:1b:65: 7c:98:91:59:27:6f:8f:3d:0c:f9:44:8a:6e:49:c9: 4f:19:df:c3:b8:0d:15:a2:fb:f8:69:a0:6b:5f:6e: da:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:E9:6C:05:ED:47:1A:68:55:95:EF:78:8B:95:7D:80:AB:0B:62:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/4c0056a8-1f48-302c-9861-b9caab15f95a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 66.255.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:fd:01:fb:79:c0:42:0e:a0:b2:ff:27:13:f0:25:d0:04:c8: 69:49:1d:10:68:a0:cc:ee:82:14:24:0d:64:c3:f9:1e:bd:93: 21:4f:da:e7:82:c4:e9:c6:57:ad:81:ad:c1:4a:83:88:34:99: bc:bb:89:77:32:45:67:c0:da:e5:e9:16:e3:dd:f5:25:2a:c8: db:b4:77:26:c2:91:5e:e8:b5:a8:9d:d2:fc:7d:3b:b8:11:71: 81:b6:38:22:ce:1b:f0:56:cd:59:4f:56:67:f8:ba:01:ae:de: 2b:60:56:29:93:15:f0:ab:30:ec:fd:af:38:82:ba:d3:11:fd: 5c:ae:b3:11:6f:e4:5f:1e:58:74:be:52:3a:db:c3:18:7a:68: 0f:3d:fd:4c:4a:12:cf:f5:8f:59:f2:71:3a:a0:70:df:3d:6d: 83:2a:0b:c7:67:d1:ba:e6:00:07:26:3b:fd:a5:f3:ed:fa:f1: cb:eb:2b:43:11:89:80:d2:aa:3e:13:38:3e:3b:bb:e8:e1:6c: 23:9e:7f:e9:bd:3a:90:5a:51:0b:22:c5:43:36:b6:ab:0a:aa: 57:17:ef:74:b5:d5:b8:68:c2:d9:c1:96:62:18:42:13:3a:ba: ac:10:60:c1:6c:56:ca:da:5c:97:39:f2:8e:4e:65:9d:1c:4d: 4c:1f:72:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUak2yJummwu3gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk YzZiMGQ3M2ItOWRhMi00ZmY2LTg0YTctZDY4NjkyOTA3NDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKD8h5TzDvsz3X5s40B5POQq1VdAta4Fz1Iq oyZaRLfmxA5etfjiGZhQxLdpKuZT/FXwYzH7LinUouU4mSArIGW+f2jjx8LlfoGN LXWYXs/V21n+wXT10e9gKZXBJLL6eeqC37ujOF5xszmxgTrHbNCUDAvb5FS9KFQl H+afztS4iW6pDi/NlntRax9NMfQ+O5rbNRrwDZ9qMGV1Xxbxq9zpbp36pWeGoJ8Y MygbGwZz9XDIKuAHK7rPFoyk7bf86yqZqS3OxgcmzjMeAU13z+ak9j8BYuNMNM6C PsQaG2V8mJFZJ2+PPQz5RIpuSclPGd/DuA0Vovv4aaBrX27a5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnpbAXtRxpoVZXveIuVfYCrC2J/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNGMwMDU2YTgtMWY0OC0z MDJjLTk4NjEtYjljYWFiMTVmOTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv/MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFz9Aft5wEIOoLL/JxPwJdAEyGlJHRBooMzughQkDWTD+R69kyFP2ueC xOnGV62BrcFKg4g0mby7iXcyRWfA2uXpFuPd9SUqyNu0dybCkV7otaid0vx9O7gR cYG2OCLOG/BWzVlPVmf4ugGu3itgVimTFfCrMOz9rziCutMR/VyusxFv5F8eWHS+ Ujrbwxh6aA89/UxKEs/1j1nycTqgcN89bYMqC8dn0brmAAcmO/2l8+368cvrK0MR iYDSqj4TOD47u+jhbCOef+m9OpBaUQsixUM2tqsKqlcX73S11bhowtnBlmIYQhM6 uqwQYMFsVsraXJc58o5OZZ0cTUwfchs= -----END CERTIFICATE-----Generated at Sat Apr 5 00:03:32 2025 by rpki-client