$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa File: f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa (raw, json) Hash identifier: bj7jclMQjnUIIUsh6we4FSNhg5gWidmvEAOvvGelhfA= Subject key identifier: 16:99:F3:20:D7:2A:F2:84:CD:76:A5:8D:E9:F0:63:9C:42:56:08:02 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F4328584908817693B6D646CA3E061A70 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 66.178.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:76:93:b6:d6:46:ca:3e:06:1a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=ab570e7e-c50f-43cb-b733-42a3c0d61ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:63:df:21:a3:82:5d:ee:55:fc:ad:e4:ae:6b: d1:ed:69:03:d1:52:b5:eb:e8:73:4e:b5:b2:bf:68: 9b:c5:e9:76:e5:66:73:4f:ea:50:49:bd:4d:05:0d: d6:50:22:1e:04:e9:6b:5f:e8:ba:c2:5a:66:54:ce: 13:c8:03:80:ee:7b:b5:53:46:ee:da:a2:b2:f6:7b: 60:3d:f2:4d:0c:6b:d4:2d:fd:ee:6c:7f:ac:a1:03: 59:24:77:ec:e2:ef:91:2e:57:f7:bc:9d:4d:47:4a: 2f:68:19:bb:c3:a1:c2:ab:f8:8d:9f:4b:39:c2:a3: 37:ad:a6:dc:e6:7e:5c:d2:8c:b1:ff:a7:49:1d:81: 88:e3:a0:04:00:21:60:19:a7:77:4e:80:7d:3a:c8: c2:db:7b:0a:16:67:8d:de:97:bc:14:fe:85:bb:c9: c9:2d:c2:52:d6:e9:17:a4:1a:79:ba:34:3c:2a:4d: 3c:2d:fc:1b:70:25:db:c4:34:a9:2c:c3:c1:5e:f9: f7:e9:a2:6d:d1:1e:1b:e1:6b:67:9d:46:98:d2:77: f4:0b:0f:8e:33:6c:55:84:e0:10:d4:58:5f:11:37: 65:f6:e1:3c:8e:1b:a6:3b:ec:e7:f9:cf:96:02:00: 09:77:ab:c3:55:78:4c:2c:76:f5:df:67:3e:cf:ae: aa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:99:F3:20:D7:2A:F2:84:CD:76:A5:8D:E9:F0:63:9C:42:56:08:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/f9dfbd79-2a17-3ec6-a656-e9d137f0ace3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:f9:1b:7b:53:10:41:c5:df:55:ca:53:ab:7a:53:03:f3:71: e6:4b:f5:6d:c8:ba:17:64:12:e4:60:36:9f:9b:27:18:93:e0: c0:49:de:0f:34:46:a5:a5:39:97:bd:d5:e9:17:38:11:a9:87: 8f:e4:c8:63:53:ff:cd:e7:2a:d9:c6:4e:8f:eb:ac:76:85:d4: e4:26:fe:9c:0d:a2:df:10:bf:fa:96:63:72:a3:3d:a6:48:17: ad:6c:64:49:60:a0:d0:4b:59:b4:31:37:0a:41:db:bd:d5:a9: d9:ae:78:0b:c4:96:d1:a5:2c:ce:ad:5e:01:c8:59:a2:ff:ff: 4f:e8:1a:3e:dc:9c:9c:b4:1f:9e:f7:67:b1:e6:82:53:e3:1d: 62:b9:dc:e4:9a:e4:1b:54:15:41:cd:79:d0:ec:b6:e2:6a:82: e8:5e:af:ae:04:5e:b3:0a:9f:d6:43:46:28:78:a7:97:af:4a: 3e:ff:66:89:a0:d5:88:0d:c5:89:74:93:1d:1d:51:cf:da:55: 34:74:45:0d:84:e1:93:3c:3b:ae:b9:69:df:36:63:fd:a1:31: 37:b8:97:b0:dd:08:7c:be:4c:dc:10:74:45:b6:16:7f:0a:56: b0:eb:8d:08:02:c8:1a:c2:4f:3a:73:17:aa:92:91:ad:5a:7b: 33:3a:1d:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXaTttZGyj4GGnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk YWI1NzBlN2UtYzUwZi00M2NiLWI3MzMtNDJhM2MwZDYxYWQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2PfIaOCXe5V/K3krmvR7WkD0VK16+hzTrWy v2ibxel25WZzT+pQSb1NBQ3WUCIeBOlrX+i6wlpmVM4TyAOA7nu1U0bu2qKy9ntg PfJNDGvULf3ubH+soQNZJHfs4u+RLlf3vJ1NR0ovaBm7w6HCq/iNn0s5wqM3rabc 5n5c0oyx/6dJHYGI46AEACFgGad3ToB9OsjC23sKFmeN3pe8FP6Fu8nJLcJS1ukX pBp5ujQ8Kk08LfwbcCXbxDSpLMPBXvn36aJt0R4b4WtnnUaY0nf0Cw+OM2xVhOAQ 1FhfETdl9uE8jhumO+zn+c+WAgAJd6vDVXhMLHb132c+z66qEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaZ8yDXKvKEzXaljenwY5xCVggCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvZjlkZmJkNzktMmExNy0z ZWM2LWE2NTYtZTlkMTM3ZjBhY2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAr5G3tTEEHF31XKU6t6UwPzceZL9W3IuhdkEuRgNp+bJxiT4MBJ3g80 RqWlOZe91ekXOBGph4/kyGNT/83nKtnGTo/rrHaF1OQm/pwNot8Qv/qWY3KjPaZI F61sZElgoNBLWbQxNwpB273VqdmueAvEltGlLM6tXgHIWaL//0/oGj7cnJy0H573 Z7HmglPjHWK53OSa5BtUFUHNedDstuJqguher64EXrMKn9ZDRih4p5evSj7/Zomg 1YgNxYl0kx0dUc/aVTR0RQ2E4ZM8O665ad82Y/2hMTe4l7DdCHy+TNwQdEW2Fn8K VrDrjQgCyBrCTzpzF6qSka1aezM6Ha0= -----END CERTIFICATE-----Generated at Sat Apr 5 11:12:17 2025 by rpki-client