$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa File: 0cce90f8-17de-3f75-a158-a043c6cd85e1.roa (raw, json) Hash identifier: sKUWmEoNKjnaFgCn8GJDMGJZmk45EynxVRN+RuNeqks= Subject key identifier: 4E:B0:2C:C8:23:1A:FD:F3:C6:55:61:90:4C:03:6E:3F:26:49:CA:86 Certificate issuer: /CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Certificate serial: 010D0C9F43285849071BE189FE927EC062D23880 Authority key identifier: FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa Signing time: Fri 28 Feb 2025 02:00:39 +0000 ROA not before: Fri 28 Feb 2025 02:00:39 +0000 ROA not after: Thu 29 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 66.178.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:07:1b:e1:89:fe:92:7e:c0:62:d2:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d170fca2-5f74-4408-8dc9-597ba031cfe2 Validity Not Before: Feb 28 02:00:39 2025 GMT Not After : May 29 01:00:39 2025 GMT Subject: CN=ac51abeb-e5c0-438e-8966-13c9e83320a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:68:c9:6f:23:c2:dc:88:4c:a7:6b:be:ac:ba: 7b:43:f9:c5:b8:dc:64:f9:3d:e7:6b:d9:7c:48:54: 98:74:f3:21:b8:d9:5e:b2:ac:03:b0:5f:b2:75:7a: 11:d5:8d:04:e0:e1:c3:4e:b1:82:40:95:a2:30:a7: 48:42:f0:67:e9:60:21:e1:cd:82:3c:d4:aa:e5:35: 33:36:d2:04:df:bd:8b:57:5d:cd:80:23:91:8c:41: 34:ef:b1:10:57:87:bc:b1:74:41:4d:88:2a:b2:41: fc:ae:74:44:d6:56:89:02:c3:d6:33:91:06:0d:58: 94:0d:cd:9d:96:10:9b:20:95:13:9e:4c:e6:0d:84: 39:57:a1:bb:e8:b5:4c:59:f9:5b:e5:9c:16:dd:b0: 06:3e:90:57:4c:51:77:90:7d:7e:5e:0e:95:86:ee: f2:5a:55:4d:36:5f:9e:77:b8:8d:5d:30:59:46:c7: 3e:59:f5:39:6d:fe:d7:a0:07:3e:26:ba:2b:3a:69: 52:ce:de:cc:9a:f3:02:96:37:3d:70:04:d1:d9:03: ba:d1:d9:71:b1:48:e1:57:fc:5a:e7:3d:c1:b1:4f: f9:da:b8:df:d2:a2:c8:2d:8f:c2:0e:ec:51:db:b6: f7:a2:f0:64:52:c7:cc:07:fd:96:e5:05:a0:aa:96: c7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B0:2C:C8:23:1A:FD:F3:C6:55:61:90:4C:03:6E:3F:26:49:CA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/0cce90f8-17de-3f75-a158-a043c6cd85e1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2/d170fca2-5f74-4408-8dc9-597ba031cfe2.crl X509v3 Authority Key Identifier: keyid:FF:28:BA:9B:42:6B:7A:24:D9:A4:AB:B7:91:4D:BD:B3:6F:3F:62:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d170fca2-5f74-4408-8dc9-597ba031cfe2.cer sbgp-ipAddrBlock: critical IPv4: 66.178.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c7:2b:fd:a9:c2:0a:a3:40:e3:33:88:83:89:e4:4c:5b:f1: 3d:d3:8c:af:7c:bf:76:0b:00:66:1e:ef:b1:29:73:32:0c:42: f2:f7:32:07:99:88:e4:74:ba:1b:87:60:78:c3:19:72:09:72: f3:25:81:45:a6:40:15:ea:71:59:3f:5a:17:8f:5d:17:1e:87: a8:c6:de:57:21:8c:f3:ef:4c:08:6e:28:d6:70:0c:06:60:c0: dc:0c:6e:4c:14:e2:30:cf:40:5d:99:ae:3c:1f:a8:f9:27:57: bd:ff:4f:dc:24:5e:98:31:48:5e:73:4e:7a:d9:c4:d7:60:24: d9:4d:2e:ec:c1:c8:63:5c:69:4e:0f:6e:22:6a:48:80:8c:2a: d5:d9:5b:cf:99:d6:9e:46:80:a5:5d:76:b5:e0:0c:f0:2d:d3: 14:15:57:33:1e:ae:3f:06:fd:3e:43:c9:15:43:5d:51:d1:ae: 3b:e7:e0:f0:b7:66:fc:33:f8:23:00:5a:5a:04:f6:2e:82:67: 72:fe:ba:ea:01:9d:32:07:55:c2:cf:8a:73:eb:2e:79:ce:2e: 99:03:7e:a6:2f:c9:2f:f9:70:2d:56:61:24:b9:06:65:b0:e1: 32:a7:c2:4a:97:97:34:84:47:4c:e7:5b:44:08:2e:1b:6c:ff: 24:a6:5e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+GJ/pJ+wGLSOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE3MGZjYTItNWY3NC00NDA4LThkYzktNTk3YmEwMzFj ZmUyMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk YWM1MWFiZWItZTVjMC00MzhlLTg5NjYtMTNjOWU4MzMyMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82jJbyPC3IhMp2u+rLp7Q/nFuNxk+T3na9l8 SFSYdPMhuNlesqwDsF+ydXoR1Y0E4OHDTrGCQJWiMKdIQvBn6WAh4c2CPNSq5TUz NtIE372LV13NgCORjEE077EQV4e8sXRBTYgqskH8rnRE1laJAsPWM5EGDViUDc2d lhCbIJUTnkzmDYQ5V6G76LVMWflb5ZwW3bAGPpBXTFF3kH1+Xg6Vhu7yWlVNNl+e d7iNXTBZRsc+WfU5bf7XoAc+JrorOmlSzt7MmvMCljc9cATR2QO60dlxsUjhV/xa 5z3BsU/52rjf0qLILY/CDuxR27b3ovBkUsfMB/2W5QWgqpbHpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6wLMgjGv3zxlVhkEwDbj8mScqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcw ZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdiYTAzMWNmZTIvMGNjZTkwZjgtMTdkZS0z Zjc1LWExNTgtYTA0M2M2Y2Q4NWUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDE3MGZjYTItNWY3NC00NDA4LThk YzktNTk3YmEwMzFjZmUyL2QxNzBmY2EyLTVmNzQtNDQwOC04ZGM5LTU5N2JhMDMx Y2ZlMi5jcmwwHwYDVR0jBBgwFoAU/yi6m0JreiTZpKu3kU29s28/Yp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kMTcwZmNhMi01Zjc0LTQ0MDgtOGRjOS01OTdi YTAzMWNmZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQrKCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrHK/2pwgqjQOMziIOJ5Exb8T3TjK98v3YLAGYe77EpczIMQvL3MgeZ iOR0uhuHYHjDGXIJcvMlgUWmQBXqcVk/WhePXRceh6jG3lchjPPvTAhuKNZwDAZg wNwMbkwU4jDPQF2ZrjwfqPknV73/T9wkXpgxSF5zTnrZxNdgJNlNLuzByGNcaU4P biJqSICMKtXZW8+Z1p5GgKVddrXgDPAt0xQVVzMerj8G/T5DyRVDXVHRrjvn4PC3 Zvwz+CMAWloE9i6CZ3L+uuoBnTIHVcLPinPrLnnOLpkDfqYvyS/5cC1WYSS5BmWw 4TKnwkqXlzSER0znW0QILhts/ySmXmM= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:09 2025 by rpki-client