$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa File: d8781f8b-bea3-3cce-88ff-84fa5117d863.roa (raw, json) Hash identifier: ngW3t7lAbR6MnAsfoHWHUzzQigfG2RqD3MXsyBBq3Hw= Subject key identifier: F7:F5:C3:B1:36:68:39:20:AB:0C:F8:99:39:F8:20:D3:B3:59:9F:D9 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F43285849088176AED70060A61BC85D40 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 66.178.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:76:ae:d7:00:60:a6:1b:c8:5d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=b8346f3b-0184-4d67-ba6f-d676e64e68d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:83:4c:fd:17:90:3e:19:cd:b5:65:2c:28: e1:9c:98:7a:3b:cb:bf:0c:20:66:e9:17:49:3c:0f: 32:5e:f5:e1:b1:31:31:3e:ec:68:88:0d:b5:91:c0: 73:84:78:33:9a:7e:03:f6:33:29:ab:17:04:45:2c: d5:bb:df:61:cb:e9:b1:a4:29:86:6b:b8:1d:4e:92: 39:ec:01:3b:89:f6:82:ba:c5:97:ad:9b:14:14:f8: ae:e6:90:58:f3:7e:3a:d3:c1:56:83:65:e9:54:3c: c5:d2:ff:30:5f:3e:ca:f6:41:5d:6b:55:48:2d:23: fa:57:49:c4:8b:4c:14:4d:e0:e3:76:8b:9b:00:00: fa:65:7e:4e:a1:e9:34:84:23:e6:7d:11:44:53:92: 32:30:b2:a7:bb:37:0b:dc:7d:2c:be:71:5d:ef:c2: 8d:16:45:aa:ba:09:fa:b6:ae:30:7a:f1:bc:61:bf: 13:90:e3:be:93:f3:24:9d:31:f3:c4:f0:1d:43:08: 75:45:3d:a5:9f:3f:d7:4f:0c:01:b3:fa:48:a0:3a: 16:11:cf:40:b7:19:b9:dc:0f:d1:0b:0a:14:25:7c: e2:74:2f:8f:d2:2b:fb:ff:e7:d9:8d:ad:ea:f9:57: b7:75:bc:3d:9f:b6:f1:9d:e5:1b:43:9d:8b:b0:e1: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F5:C3:B1:36:68:39:20:AB:0C:F8:99:39:F8:20:D3:B3:59:9F:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d8781f8b-bea3-3cce-88ff-84fa5117d863.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:13:6d:0c:a2:1b:c5:9b:c1:64:23:cd:ba:d7:13:a7:64:00: da:59:68:a8:51:be:b3:92:ea:34:17:bf:fe:c5:b0:a9:6b:19: 52:74:a8:2f:82:89:2d:ac:fc:58:a8:90:03:75:7f:06:1c:0a: 24:54:16:2e:5e:75:03:21:de:b7:45:9a:21:5c:9b:f9:72:15: 9a:0b:02:e7:c7:b6:cd:1c:38:bd:df:62:76:01:7f:c1:e9:f6: 8f:07:3d:7f:fc:6a:06:82:4f:b2:29:81:21:94:f1:80:9d:dc: 46:1e:87:76:d5:14:c8:bd:9f:1d:3c:51:8b:31:f2:53:79:53: 42:3a:9e:7d:c6:5c:d8:ed:31:d2:51:3c:52:b7:0b:73:01:db: ce:d0:ed:6a:ed:c0:8c:22:d2:f1:8e:0d:10:b6:82:1a:79:71: c7:98:cc:f5:0d:f2:a3:21:a9:0b:49:5e:2e:8a:ba:45:00:84: 45:5c:b9:87:a7:53:a1:72:0f:08:ea:9a:22:c3:fc:36:d5:d3: 82:27:d0:41:59:72:64:25:60:7d:50:0d:5f:15:83:d4:5b:b8: cf:13:51:22:d1:94:b2:d1:9c:ae:d4:0a:62:7a:32:c3:9c:15: e0:eb:c7:49:e7:8d:5b:b3:d3:47:8f:7c:65:b2:87:76:46:07: af:35:ac:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXau1wBgphvIXUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YjgzNDZmM2ItMDE4NC00ZDY3LWJhNmYtZDY3NmU2NGU2OGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsGDTP0XkD4ZzbVlLCjhnJh6O8u/DCBm6RdJ PA8yXvXhsTExPuxoiA21kcBzhHgzmn4D9jMpqxcERSzVu99hy+mxpCmGa7gdTpI5 7AE7ifaCusWXrZsUFPiu5pBY834608FWg2XpVDzF0v8wXz7K9kFda1VILSP6V0nE i0wUTeDjdoubAAD6ZX5Ooek0hCPmfRFEU5IyMLKnuzcL3H0svnFd78KNFkWqugn6 tq4wevG8Yb8TkOO+k/MknTHzxPAdQwh1RT2lnz/XTwwBs/pIoDoWEc9Atxm53A/R CwoUJXzidC+P0iv7/+fZja3q+Ve3dbw9n7bxneUbQ52LsOGxCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf1w7E2aDkgqwz4mTn4INOzWZ/ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvZDg3ODFmOGItYmVhMy0z Y2NlLTg4ZmYtODRmYTUxMTdkODYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIATbQyiG8WbwWQjzbrXE6dkANpZaKhRvrOS6jQXv/7FsKlrGVJ0qC+C iS2s/FiokAN1fwYcCiRUFi5edQMh3rdFmiFcm/lyFZoLAufHts0cOL3fYnYBf8Hp 9o8HPX/8agaCT7IpgSGU8YCd3EYeh3bVFMi9nx08UYsx8lN5U0I6nn3GXNjtMdJR PFK3C3MB287Q7WrtwIwi0vGODRC2ghp5cceYzPUN8qMhqQtJXi6KukUAhEVcuYen U6FyDwjqmiLD/DbV04In0EFZcmQlYH1QDV8Vg9RbuM8TUSLRlLLRnK7UCmJ6MsOc FeDrx0nnjVuz00ePfGWyh3ZGB681rBE= -----END CERTIFICATE-----Generated at Sat Apr 5 11:17:41 2025 by rpki-client