$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa File: 01b06d28-0ad0-3036-9c71-00879687acbb.roa (raw, json) Hash identifier: A4QWczVds/1jlayIcpBfifP+OLThfMRQ8ldj5KtDglI= Subject key identifier: E9:40:A2:32:D6:5A:E2:47:6F:28:D3:B8:0C:C4:DB:A4:6B:B6:B9:DE Certificate issuer: /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Certificate serial: 010D0C9F43285849E4EFC198AF69439669F8B640 Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa Signing time: Sun 18 May 2025 13:01:00 +0000 ROA not before: Sun 18 May 2025 13:01:00 +0000 ROA not after: Sat 16 Aug 2025 13:01:00 +0000 asID: 16696 IP address blocks: 204.89.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e4:ef:c1:98:af:69:43:96:69:f8:b6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60 Validity Not Before: May 18 13:01:00 2025 GMT Not After : Aug 16 13:01:00 2025 GMT Subject: CN=be13b286-b487-4a24-b6fe-ebf57b5d8bd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f5:6a:0b:80:36:a2:4b:84:a5:fb:03:53:db: fe:25:50:55:b0:f2:58:20:4e:51:41:65:9e:b0:b4: c3:f6:a4:f0:aa:51:5f:5b:10:8a:69:25:9c:46:bb: d4:4a:55:0a:1f:91:58:a2:4b:4e:6e:b2:82:f7:41: f8:f6:e0:6c:b8:c3:a9:99:62:e7:af:8a:98:d1:ba: 1b:6e:de:31:19:09:50:b0:93:1c:be:8e:01:a5:d8: 60:df:43:27:95:14:2c:54:78:93:59:57:61:dc:ac: 80:c0:40:2e:59:65:b4:14:2d:2a:a7:08:74:67:8c: 0b:d9:15:b2:56:16:79:f7:23:84:00:97:ee:04:a4: 2d:e5:df:63:3c:e0:3b:e9:94:41:b0:bf:9b:6e:a3: e1:fd:64:f6:b6:61:d0:84:5c:24:8e:00:18:09:74: 0f:72:d3:29:29:69:60:d6:07:87:3f:ed:79:07:b0: 02:ff:2d:fa:77:eb:c8:5e:91:ce:ae:96:3b:25:6b: 2e:7b:b4:cb:de:bb:b7:a6:0a:26:12:06:59:b2:29: a3:62:f1:c9:80:c6:24:c3:55:9c:71:d9:77:16:b2: d0:75:56:c3:73:26:70:8b:4b:6b:08:66:0b:97:12: 98:30:57:24:4c:73:9d:ba:fb:1b:49:2c:0f:43:70: df:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:40:A2:32:D6:5A:E2:47:6F:28:D3:B8:0C:C4:DB:A4:6B:B6:B9:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/01b06d28-0ad0-3036-9c71-00879687acbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl X509v3 Authority Key Identifier: keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer sbgp-ipAddrBlock: critical IPv4: 204.89.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:26:09:bd:d3:ad:c4:ae:aa:29:6d:c3:9b:ea:2a:81:1c:03: 62:9d:a0:01:a3:20:33:1f:17:19:37:e4:4e:05:1a:ba:80:95: f9:53:66:0c:37:36:4f:ac:f1:b0:07:fd:94:58:99:79:cb:6d: 9b:00:18:8f:bd:44:01:cc:55:23:28:07:45:c9:eb:d7:52:bf: b6:82:5c:4c:85:9b:11:24:66:fc:b7:13:87:6e:81:0d:83:87: 3c:f9:43:d5:24:d9:2f:4e:e0:2d:d5:b8:6e:b1:59:af:84:67: db:b7:f9:89:a7:1f:76:18:f7:1e:c2:c3:25:fc:b7:fb:ae:08: 77:f6:cf:79:6c:f0:c9:24:a7:f8:56:a0:0f:59:13:37:1d:0b: 3b:05:3e:47:42:27:df:64:d7:88:87:8a:6b:40:98:63:11:1e: 7c:b7:4b:45:e7:5d:9c:49:68:b4:58:b2:76:1d:90:b0:98:21: 48:02:3b:6a:39:95:59:8e:82:c7:eb:0c:4b:80:3c:7f:01:84: 76:40:5a:72:f7:10:72:5c:c1:d4:06:43:0a:7f:22:cd:b1:b7: 88:14:d5:29:df:e2:55:80:56:7b:c6:1e:59:34:7c:30:56:3d: 75:4d:75:0c:60:64:b9:ea:1e:35:61:93:92:6f:cf:d4:39:25: 07:bf:fd:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78GYr2lDlmn4tkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm YzYwMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk YmUxM2IyODYtYjQ4Ny00YTI0LWI2ZmUtZWJmNTdiNWQ4YmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/VqC4A2okuEpfsDU9v+JVBVsPJYIE5RQWWe sLTD9qTwqlFfWxCKaSWcRrvUSlUKH5FYoktObrKC90H49uBsuMOpmWLnr4qY0bob bt4xGQlQsJMcvo4Bpdhg30MnlRQsVHiTWVdh3KyAwEAuWWW0FC0qpwh0Z4wL2RWy VhZ59yOEAJfuBKQt5d9jPOA76ZRBsL+bbqPh/WT2tmHQhFwkjgAYCXQPctMpKWlg 1geHP+15B7AC/y36d+vIXpHOrpY7JWsue7TL3ru3pgomEgZZsimjYvHJgMYkw1Wc cdl3FrLQdVbDcyZwi0trCGYLlxKYMFckTHOduvsbSSwPQ3DfkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlAojLWWuJHbyjTuAzE26RrtrneMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvMDFiMDZkMjgtMGFkMC0z MDM2LTljNzEtMDA4Nzk2ODdhY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1 YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzFmfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAmCb3TrcSuqiltw5vqKoEcA2KdoAGjIDMfFxk35E4FGrqAlflTZgw3 Nk+s8bAH/ZRYmXnLbZsAGI+9RAHMVSMoB0XJ69dSv7aCXEyFmxEkZvy3E4dugQ2D hzz5Q9Uk2S9O4C3VuG6xWa+EZ9u3+YmnH3YY9x7CwyX8t/uuCHf2z3ls8Mkkp/hW oA9ZEzcdCzsFPkdCJ99k14iHimtAmGMRHny3S0XnXZxJaLRYsnYdkLCYIUgCO2o5 lVmOgsfrDEuAPH8BhHZAWnL3EHJcwdQGQwp/Is2xt4gU1Snf4lWAVnvGHlk0fDBW PXVNdQxgZLnqHjVhk5Jvz9Q5JQe//YI= -----END CERTIFICATE-----Generated at Mon Jun 30 17:32:58 2025 by rpki-client