$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6b9a82a7-168c-3e11-99a9-9035f4356902.roa File: 6b9a82a7-168c-3e11-99a9-9035f4356902.roa (raw, json) Hash identifier: zhmlLcR3UZJ960K36Uzx3FYGzCaxvAVYr5iQjW7UYo4= Subject key identifier: 31:A6:AE:49:DC:23:3E:16:93:D3:73:F7:E3:D8:FB:54:3B:84:A1:93 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285848EF6146E077F50A76C7E05100 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6b9a82a7-168c-3e11-99a9-9035f4356902.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 16696 IP address blocks: 67.221.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:46:e0:77:f5:0a:76:c7:e0:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=22ceb1cd-e949-4733-867b-6e7c48060ced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:7e:4a:bb:4c:81:b8:4a:43:38:b9:10:31: d0:19:b2:03:b1:e3:d4:3a:63:87:6a:ca:74:74:f2: 91:07:32:3b:8e:73:1e:23:12:36:2f:11:71:29:f6: 0e:a7:ab:d1:25:34:51:0b:54:ad:30:7d:05:9d:51: 73:0d:8c:19:28:ca:54:d2:3e:d4:88:ea:32:c7:87: 32:66:29:55:2c:93:f0:a7:59:5c:12:52:8f:87:e4: 00:4b:81:0d:07:76:e0:16:2e:bf:77:a1:33:68:9a: 31:e4:e6:41:70:f8:c1:63:5c:ef:93:01:29:ec:36: d3:06:60:b7:a0:78:a3:19:54:a8:72:89:8e:2c:b8: 4b:9e:38:be:55:e2:06:11:44:28:6c:03:0b:85:7b: eb:62:d2:c5:c6:84:1b:6b:45:93:c3:31:8c:6c:fe: 22:1a:6a:07:28:1e:74:6f:43:ec:c5:07:6e:2d:ae: 8f:95:cf:88:51:21:ae:f3:54:91:a7:7e:75:d1:3b: f1:64:72:e7:40:98:69:a7:9b:b2:38:6d:bb:74:3c: d3:12:65:ae:9a:f6:0a:8c:c7:f2:ab:f5:4a:38:0a: db:a0:2f:3c:6f:21:13:9d:78:43:fe:05:a7:35:1c: ff:a3:9b:86:43:1c:4d:7b:ea:44:0b:e5:42:56:22: 27:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A6:AE:49:DC:23:3E:16:93:D3:73:F7:E3:D8:FB:54:3B:84:A1:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/6b9a82a7-168c-3e11-99a9-9035f4356902.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 67.221.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ef:4f:38:c5:fb:b0:be:5d:ab:1f:19:0e:ad:d7:0d:c1:c1: dd:ea:84:fe:00:37:74:ed:65:aa:0f:c8:bb:8c:ab:87:9e:59: 48:11:3b:ac:00:b5:71:ed:aa:29:89:40:95:6d:9d:68:ca:49: 97:a1:dc:d5:8c:23:8b:d3:17:ee:a9:27:2b:0f:0f:40:a3:8c: 6c:2d:9c:16:75:7d:2f:79:13:08:94:77:77:12:28:0f:6e:b0: 68:99:d4:59:3e:80:62:95:37:1a:b2:da:89:66:dd:b4:ee:af: b0:d7:b1:2c:bb:32:73:a1:4c:21:7a:75:ed:0d:ff:b3:5f:6f: b1:8b:e1:57:99:5e:7a:88:35:18:93:c4:98:1f:6b:02:79:7b: 10:f3:26:90:4f:03:ac:11:b9:4b:18:f5:01:a0:6e:c8:e2:3d: 49:71:f7:17:99:3b:04:d0:5b:15:22:83:53:a9:2e:c9:9f:a5: 34:dc:d5:e5:51:94:1f:84:88:25:1f:b9:2b:ae:5f:0b:ca:8d: 8d:0d:26:8a:7b:35:d1:18:4d:3b:9f:5f:98:e5:99:bd:b2:21: e9:b0:f6:48:02:cb:8d:ce:f5:5c:cf:c1:57:e0:b0:0c:70:14: 16:30:c9:54:2e:c6:fe:4b:e7:29:2e:f5:26:c1:bc:fc:0f:d1: a1:d0:36:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYUbgd/UKdsfgUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MjJjZWIxY2QtZTk0OS00NzMzLTg2N2ItNmU3YzQ4MDYwY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAx+SrtMgbhKQzi5EDHQGbIDsePUOmOHasp0 dPKRBzI7jnMeIxI2LxFxKfYOp6vRJTRRC1StMH0FnVFzDYwZKMpU0j7UiOoyx4cy ZilVLJPwp1lcElKPh+QAS4ENB3bgFi6/d6EzaJox5OZBcPjBY1zvkwEp7DbTBmC3 oHijGVSocomOLLhLnji+VeIGEUQobAMLhXvrYtLFxoQba0WTwzGMbP4iGmoHKB50 b0PsxQduLa6Plc+IUSGu81SRp3510TvxZHLnQJhpp5uyOG27dDzTEmWumvYKjMfy q/VKOArboC88byETnXhD/gWnNRz/o5uGQxxNe+pEC+VCViIn+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGmrkncIz4Wk9Nz9+PY+1Q7hKGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvNmI5YTgyYTctMTY4Yy0z ZTExLTk5YTktOTAzNWY0MzU2OTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ92YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7vTzjF+7C+XasfGQ6t1w3Bwd3qhP4AN3TtZaoPyLuMq4eeWUgRO6wA tXHtqimJQJVtnWjKSZeh3NWMI4vTF+6pJysPD0CjjGwtnBZ1fS95EwiUd3cSKA9u sGiZ1Fk+gGKVNxqy2olm3bTur7DXsSy7MnOhTCF6de0N/7Nfb7GL4VeZXnqINRiT xJgfawJ5exDzJpBPA6wRuUsY9QGgbsjiPUlx9xeZOwTQWxUig1OpLsmfpTTc1eVR lB+EiCUfuSuuXwvKjY0NJop7NdEYTTufX5jlmb2yIemw9kgCy43O9VzPwVfgsAxw FBYwyVQuxv5L5yku9SbBvPwP0aHQNk8= -----END CERTIFICATE-----Generated at Fri Apr 4 19:42:10 2025 by rpki-client