$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5f39c47-9f07-3362-840f-55a27df2350d.roa File: e5f39c47-9f07-3362-840f-55a27df2350d.roa (raw, json) Hash identifier: qL/uyk24iOOxVi+o73Vs59iPUh7rn+gnENlGL4Zm5w0= Subject key identifier: 19:07:DB:44:D4:CC:CE:AA:BA:D3:91:BE:F2:F8:F3:74:41:57:D6:03 Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F4328584902EC1B298B58CD3B2A0F56F0 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5f39c47-9f07-3362-840f-55a27df2350d.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 16696 IP address blocks: 170.199.236.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1b:29:8b:58:cd:3b:2a:0f:56:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=5f790278-19c5-457d-9d69-3308790d5e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d5:91:ab:71:f0:93:f4:ca:f4:63:97:1e:6b: f7:ba:8e:e7:56:2e:89:1b:ea:ea:17:6e:09:a2:d3: d1:d9:ec:f8:74:af:30:38:1d:f5:98:f5:c4:6a:19: 91:0a:a5:b9:a7:c7:eb:e4:b6:c5:32:42:5a:71:87: fc:00:10:f6:cf:1e:92:19:fe:1c:9c:03:1b:93:b9: 2c:86:c4:4b:1c:c7:6e:52:8c:e9:a1:36:6c:90:74: 63:f8:81:12:b8:45:70:db:2c:b2:17:d6:aa:97:d3: c3:03:c6:ab:b5:f7:8b:97:c1:3b:16:ba:eb:bd:2f: 19:83:34:71:0d:c5:8a:5c:4a:82:64:72:36:7d:45: 21:00:a5:be:e2:1f:d8:6c:f8:79:ad:2e:23:5c:30: 05:f3:25:35:68:3b:60:09:4e:61:a2:04:f0:e1:41: ec:35:2a:a9:cb:0f:9e:ba:ba:df:45:3e:78:68:18: c1:0e:0a:75:13:75:87:3f:a8:0d:db:33:f7:bd:78: 97:cc:c0:33:01:31:4a:34:19:9d:06:d9:c9:98:36: 71:e0:8a:94:04:8b:6a:73:ec:1e:5a:28:8a:5b:08: 13:ca:f6:61:52:c8:c9:a0:6c:aa:b3:0b:90:f4:24: 3c:b4:e6:da:23:bf:ce:6e:3c:27:9a:98:f5:08:c1: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:07:DB:44:D4:CC:CE:AA:BA:D3:91:BE:F2:F8:F3:74:41:57:D6:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e5f39c47-9f07-3362-840f-55a27df2350d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 170.199.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d5:5d:45:3f:53:1a:aa:e3:18:48:4f:c1:7e:95:94:ee:64: 6d:60:92:31:d3:be:a8:f6:84:f8:ee:9c:40:21:3e:52:7c:21: de:f1:ff:91:e9:85:8c:c9:70:e1:0a:3d:3f:73:ab:6a:f2:31: a9:4b:ca:29:b6:bd:49:9d:9c:fd:16:46:4c:79:cd:61:a3:76: 53:ae:9f:e9:ba:d2:8c:bd:0a:81:11:bb:d9:96:f9:b2:99:9a: d9:2d:2d:9e:82:c2:bf:c8:64:f6:2a:cc:28:cc:46:d6:c0:1b: 4c:aa:1a:5f:71:bf:7c:36:fb:f3:3e:40:c3:33:4f:fb:3c:c8: 93:00:2e:21:aa:d6:e0:83:93:9e:57:7b:69:55:59:1f:02:5a: 98:3b:91:5d:b2:42:13:68:8b:29:f1:f4:64:57:27:0b:c6:9a: b8:fb:6f:9c:0a:32:12:65:1f:97:54:6a:a6:51:22:98:76:6a: 96:4c:8f:7c:a9:94:13:90:69:32:c4:04:13:24:12:da:18:2f: 97:02:3d:ac:a9:b5:ca:61:87:5a:93:45:02:f8:93:f2:43:b0: ca:d3:48:4b:e6:80:a0:98:b5:7a:11:33:b1:d8:ed:00:5d:bc: a9:47:8d:01:d9:49:6d:0c:62:a7:ba:e7:5f:f8:07:b1:79:b7: 97:95:a9:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7Bspi1jNOyoPVvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk NWY3OTAyNzgtMTljNS00NTdkLTlkNjktMzMwODc5MGQ1ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutWRq3Hwk/TK9GOXHmv3uo7nVi6JG+rqF24J otPR2ez4dK8wOB31mPXEahmRCqW5p8fr5LbFMkJacYf8ABD2zx6SGf4cnAMbk7ks hsRLHMduUozpoTZskHRj+IESuEVw2yyyF9aql9PDA8artfeLl8E7FrrrvS8ZgzRx DcWKXEqCZHI2fUUhAKW+4h/YbPh5rS4jXDAF8yU1aDtgCU5hogTw4UHsNSqpyw+e urrfRT54aBjBDgp1E3WHP6gN2zP3vXiXzMAzATFKNBmdBtnJmDZx4IqUBItqc+we WiiKWwgTyvZhUsjJoGyqswuQ9CQ8tObaI7/Objwnmpj1CMHvGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkH20TUzM6qutORvvL483RBV9YDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTVmMzljNDctOWYwNy0z MzYyLTg0MGYtNTVhMjdkZjIzNTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqsfsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3VXUU/Uxqq4xhIT8F+lZTuZG1gkjHTvqj2hPjunEAhPlJ8Id7x/5Hp hYzJcOEKPT9zq2ryMalLyim2vUmdnP0WRkx5zWGjdlOun+m60oy9CoERu9mW+bKZ mtktLZ6Cwr/IZPYqzCjMRtbAG0yqGl9xv3w2+/M+QMMzT/s8yJMALiGq1uCDk55X e2lVWR8CWpg7kV2yQhNoiynx9GRXJwvGmrj7b5wKMhJlH5dUaqZRIph2apZMj3yp lBOQaTLEBBMkEtoYL5cCPayptcphh1qTRQL4k/JDsMrTSEvmgKCYtXoRM7HY7QBd vKlHjQHZSW0MYqe651/4B7F5t5eVqQ8= -----END CERTIFICATE-----Generated at Sat Apr 5 04:34:14 2025 by rpki-client