$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/c87759cf-1bc5-3073-9781-94959a15eec3.roa File: c87759cf-1bc5-3073-9781-94959a15eec3.roa (raw, json) Hash identifier: NkFclRCjV6II4dBRLKLAZ6w6yB3xl4ku2/s8meiJKCc= Subject key identifier: 9D:C4:78:F3:72:13:A2:CF:7A:77:6B:00:4C:CF:47:FF:86:5C:08:35 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584902EC10D279B8D574DC171E20 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/c87759cf-1bc5-3073-9781-94959a15eec3.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 192.158.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:10:d2:79:b8:d5:74:dc:17:1e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=d136b325-f88e-4957-9012-667dcc9be229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:39:a0:78:42:8d:35:71:87:80:6f:5a:3c:02: 8e:e9:83:50:c7:7f:e9:1a:89:f0:9a:d4:81:ca:d6: 65:28:eb:16:57:df:d1:08:13:54:55:84:18:09:37: bb:77:96:7d:51:8b:6d:70:e1:5a:c1:92:f5:83:14: 4f:43:a7:ed:96:64:d2:4e:b3:b3:c0:e0:56:f5:c5: 5e:31:89:44:da:65:30:37:72:c9:6f:ce:b8:ab:14: 29:83:27:40:71:7c:fd:e0:f0:a1:35:0a:4a:43:f3: 4a:37:c2:68:1e:1d:a9:0a:2d:d4:e9:4f:5c:8a:5f: d7:33:fe:44:1e:38:78:58:91:5a:7e:aa:bd:68:e8: 4e:3e:ae:d1:a3:69:07:9d:c6:6d:6a:36:70:95:d2: 19:dc:cd:0e:47:44:b3:83:19:2d:8d:a8:e2:7a:07: 3a:41:a6:8e:ff:87:2c:12:f0:c7:81:7c:ed:dd:05: fd:9b:a4:b9:ad:72:7e:96:5e:87:1d:f0:f3:b3:92: e4:33:26:2b:c0:5c:c3:5a:66:ab:bf:af:6f:0d:d0: d7:25:48:11:c7:4c:f9:3d:ad:9f:d6:8d:bc:be:ba: ad:d1:2f:21:9d:80:9b:4b:43:1f:c2:ff:0b:5c:a9: 12:d0:0b:d0:97:dd:2a:d5:50:5a:67:7d:d0:38:2f: fb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C4:78:F3:72:13:A2:CF:7A:77:6B:00:4C:CF:47:FF:86:5C:08:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/c87759cf-1bc5-3073-9781-94959a15eec3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 192.158.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:14:53:db:07:75:98:39:5f:7f:e6:d4:2c:cc:29:38:36:e9: 64:fa:32:48:4f:74:14:9d:b6:1a:f8:92:15:72:a8:3c:3c:4a: 33:6f:59:af:78:8f:56:8b:29:76:87:2d:a0:7c:3b:9d:e7:9b: 8f:30:05:2e:f4:4d:0c:10:8c:89:68:46:c2:bd:ed:16:1c:85: 96:8f:41:ff:12:de:4b:cd:ee:ea:99:8f:c1:b9:c7:f6:d3:53: 87:df:0b:40:1a:39:11:36:f2:5a:8b:20:78:23:2c:10:a1:4e: 3b:0d:68:74:6c:af:8c:98:a7:4e:00:67:64:17:33:5f:fd:de: e7:a2:bc:7b:9e:42:86:8a:2c:27:28:52:51:84:cc:b2:ef:8b: 08:e4:db:d8:2a:6e:f3:33:06:79:a9:02:4c:09:8a:bb:e0:67: 6a:9d:23:eb:61:2c:f8:2c:df:03:f4:d7:df:a4:0a:07:7d:22: ea:de:b0:0c:c2:e5:a7:f1:82:44:cf:84:da:13:5d:7f:67:87: 71:82:1a:0a:dc:6a:a5:e8:a7:71:3d:a7:e8:e2:2d:b4:bc:bf: 86:45:4a:23:81:47:a3:f8:0a:24:59:fc:76:1b:ce:41:df:f1: 7a:be:9a:73:65:e2:b8:7d:a9:fd:97:6d:22:dc:83:86:df:11: 4e:d8:08:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BDSebjVdNwXHiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk ZDEzNmIzMjUtZjg4ZS00OTU3LTkwMTItNjY3ZGNjOWJlMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjmgeEKNNXGHgG9aPAKO6YNQx3/pGonwmtSB ytZlKOsWV9/RCBNUVYQYCTe7d5Z9UYttcOFawZL1gxRPQ6ftlmTSTrOzwOBW9cVe MYlE2mUwN3LJb864qxQpgydAcXz94PChNQpKQ/NKN8JoHh2pCi3U6U9cil/XM/5E Hjh4WJFafqq9aOhOPq7Ro2kHncZtajZwldIZ3M0OR0Szgxktjajiegc6QaaO/4cs EvDHgXzt3QX9m6S5rXJ+ll6HHfDzs5LkMyYrwFzDWmarv69vDdDXJUgRx0z5Pa2f 1o28vrqt0S8hnYCbS0Mfwv8LXKkS0AvQl90q1VBaZ33QOC/7rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ3EePNyE6LPendrAEzPR/+GXAg1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYzg3NzU5Y2YtMWJjNS0z MDczLTk3ODEtOTQ5NTlhMTVlZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJ7WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0UU9sHdZg5X3/m1CzMKTg26WT6MkhPdBSdthr4khVyqDw8SjNvWa94 j1aLKXaHLaB8O53nm48wBS70TQwQjIloRsK97RYchZaPQf8S3kvN7uqZj8G5x/bT U4ffC0AaORE28lqLIHgjLBChTjsNaHRsr4yYp04AZ2QXM1/93ueivHueQoaKLCco UlGEzLLviwjk29gqbvMzBnmpAkwJirvgZ2qdI+thLPgs3wP019+kCgd9IuresAzC 5afxgkTPhNoTXX9nh3GCGgrcaqXop3E9p+jiLbS8v4ZFSiOBR6P4CiRZ/HYbzkHf 8Xq+mnNl4rh9qf2XbSLcg4bfEU7YCPY= -----END CERTIFICATE-----Generated at Sat Apr 5 06:32:17 2025 by rpki-client