$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/f4081099-41b3-3422-9b1a-9d68dc4c25dd.roa File: f4081099-41b3-3422-9b1a-9d68dc4c25dd.roa (raw, json) Hash identifier: vZywYVbgzWvpn6TGDYSiPQVcP+a/QR7aNo+9aXkEBPw= Subject key identifier: 20:56:EE:B9:6C:D6:F1:B0:3C:85:89:E4:F0:77:A8:C9:D1:52:F5:5D Certificate issuer: /CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Certificate serial: 010D0C9F43285848B2364991F7CC2C840326EB20 Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/f4081099-41b3-3422-9b1a-9d68dc4c25dd.roa Signing time: Tue 28 Jan 2025 16:10:09 +0000 ROA not before: Tue 28 Jan 2025 16:10:09 +0000 ROA not after: Mon 28 Apr 2025 15:10:09 +0000 asID: 199527 IP address blocks: 66.17.144.0/21 maxlen: 24 66.17.160.0/21 maxlen: 24 66.17.168.0/22 maxlen: 24 66.17.176.0/22 maxlen: 24 66.17.180.0/22 maxlen: 24 66.17.192.0/21 maxlen: 24 66.17.200.0/21 maxlen: 24 66.17.208.0/22 maxlen: 24 66.17.216.0/22 maxlen: 24 66.17.224.0/20 maxlen: 24 66.17.240.0/21 maxlen: 24 66.17.248.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 14 Mar 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b2:36:49:91:f7:cc:2c:84:03:26:eb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95 Validity Not Before: Jan 28 16:10:09 2025 GMT Not After : Apr 28 15:10:09 2025 GMT Subject: CN=56bbdd94-d9bd-429e-908f-f332788fa0e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:4d:cb:c4:f3:51:fe:e6:ef:ad:9a:5f:f5:af: dd:c8:fd:32:e5:a7:13:b1:35:d1:57:55:ac:3d:c8: 5d:cf:01:c4:92:81:65:26:0e:02:57:79:72:dd:2f: 88:77:6e:e0:14:d4:a7:58:53:ad:85:eb:45:74:37: 5d:5f:3f:41:58:ea:82:4b:8c:1a:de:6c:7a:e0:dc: f8:a6:50:23:af:7d:31:1a:48:7e:fb:3c:64:0d:e8: ec:12:3d:7c:a4:54:bc:d0:20:0e:cf:60:cd:53:20: d6:43:6d:b1:42:8b:7f:f1:c0:d5:57:0e:bb:ab:d1: 54:d4:85:f2:0b:24:66:0f:22:ac:9b:11:8a:0c:41: b0:1c:b2:56:b7:83:5c:9a:b2:a3:a0:e4:62:a3:b5: d5:ea:27:00:bb:f8:44:18:af:44:8a:6f:b1:3b:85: b2:66:aa:27:00:c5:5f:44:db:cc:3e:79:2d:50:a5: d2:70:19:e7:88:de:1d:40:c6:d9:6b:28:c0:41:cb: 49:e7:36:19:a9:03:59:7d:c1:16:06:de:74:6c:f8: 51:6b:a4:b2:95:0c:11:4d:d0:4b:5d:53:ac:6b:2a: 59:c2:6a:d6:37:a1:a6:eb:29:6d:70:3c:df:18:28: 1f:ee:6c:d5:8e:57:72:d2:71:d7:9a:dd:8c:49:9a: 43:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:56:EE:B9:6C:D6:F1:B0:3C:85:89:E4:F0:77:A8:C9:D1:52:F5:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/f4081099-41b3-3422-9b1a-9d68dc4c25dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl X509v3 Authority Key Identifier: keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer sbgp-ipAddrBlock: critical IPv4: 66.17.144.0/21 66.17.160.0-66.17.171.255 66.17.176.0/21 66.17.192.0-66.17.211.255 66.17.216.0/22 66.17.224.0-66.17.251.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6a:e7:de:4e:bb:fb:fc:28:8c:a2:4d:17:ce:e1:28:57:ca: d7:41:40:fe:35:d0:c2:3e:4b:f5:31:ad:f8:cd:18:c9:48:92: f5:4d:2d:e2:ed:16:04:c9:b9:e7:ca:c8:10:6b:2f:78:f0:59: 74:a9:8a:de:10:92:c3:79:95:6b:a0:dd:c2:78:29:74:66:54: e1:21:9e:1a:cb:9c:f9:80:b5:28:ab:46:51:24:1b:4c:13:1a: b8:fa:54:ab:04:e6:10:85:5d:96:6d:c3:32:8e:9b:d1:66:99: ac:72:91:2f:97:8c:f6:e6:fa:bd:a9:84:d7:eb:19:89:03:5e: dc:f9:82:e9:94:75:3b:ac:2e:08:87:c7:ce:4a:90:e6:72:ed: 79:5d:bf:a0:af:25:ae:31:14:48:76:98:dd:45:8f:bb:5f:b4: 11:50:aa:df:92:8b:a4:5c:93:f7:74:c9:f9:22:f5:af:11:be: 5f:73:ce:7d:a3:c6:ca:26:0f:d2:c8:3c:32:e7:f0:f0:e0:7c: 70:7b:96:55:87:b1:8d:d9:4e:d2:ce:5c:73:a5:cb:53:d1:d1: bd:3d:66:a2:f2:fb:46:7d:c4:fc:b3:f6:54:9d:8c:69:50:7a: ee:73:a1:b7:f5:b0:7d:06:5d:77:ed:6f:02:2f:eb:1a:8c:f9: fb:70:01:4f -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWEiyNkmR98wshAMm6yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1 Zjk1MB4XDTI1MDEyODE2MTAwOVoXDTI1MDQyODE1MTAwOVowLzEtMCsGA1UEAxMk NTZiYmRkOTQtZDliZC00MjllLTkwOGYtZjMzMjc4OGZhMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjE3LxPNR/ubvrZpf9a/dyP0y5acTsTXRV1Ws PchdzwHEkoFlJg4CV3ly3S+Id27gFNSnWFOthetFdDddXz9BWOqCS4wa3mx64Nz4 plAjr30xGkh++zxkDejsEj18pFS80CAOz2DNUyDWQ22xQot/8cDVVw67q9FU1IXy CyRmDyKsmxGKDEGwHLJWt4NcmrKjoORio7XV6icAu/hEGK9Eim+xO4WyZqonAMVf RNvMPnktUKXScBnniN4dQMbZayjAQctJ5zYZqQNZfcEWBt50bPhRa6SylQwRTdBL XVOsaypZwmrWN6Gm6yltcDzfGCgf7mzVjldy0nHXmt2MSZpDtQIDAQABo4IDizCC A4cwHQYDVR0OBBYEFCBW7rls1vGwPIWJ5PB3qMnRUvVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvZjQwODEwOTktNDFiMy0z NDIyLTliMWEtOWQ2OGRjNGMyNWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk YzRiMjVmOTUuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQDQhGQMAwD BAVCEaADBAJCEagDBANCEbAwDAMEBkIRwAMEAkIR0AMEAkIR2DAMAwQFQhHgAwQC QhH4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAE9q595Ou/v8KIyiTRfO4ShXytdBQP410MI+S/UxrfjNGMlI kvVNLeLtFgTJuefKyBBrL3jwWXSpit4QksN5lWug3cJ4KXRmVOEhnhrLnPmAtSir RlEkG0wTGrj6VKsE5hCFXZZtwzKOm9FmmaxykS+XjPbm+r2phNfrGYkDXtz5gumU dTusLgiHx85KkOZy7Xldv6CvJa4xFEh2mN1Fj7tftBFQqt+Si6Rck/d0yfki9a8R vl9zzn2jxsomD9LIPDLn8PDgfHB7llWHsY3ZTtLOXHOly1PR0b09ZqLy+0Z9xPyz 9lSdjGlQeu5zobf1sH0GXXftbwIv6xqM+ftwAU8= -----END CERTIFICATE-----Generated at Thu Mar 13 07:19:16 2025 by rpki-client