$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa File: 8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa (raw, json) Hash identifier: 9uS88u8weMpf8sfxgkY3EEjeZ/wGc05cGSu0FD5U9jA= Subject key identifier: C5:8E:34:C6:30:F3:1B:83:38:12:F0:C8:7F:28:18:FD:11:79:AD:51 Certificate issuer: /CN=33beb877-dbaf-4d25-870e-a43af90cc071 Certificate serial: 010D0C9F43285848DCAF3547BC79BF55C5A86640 Authority key identifier: A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa Signing time: Wed 12 Feb 2025 21:17:45 +0000 ROA not before: Wed 12 Feb 2025 21:17:45 +0000 ROA not after: Tue 13 May 2025 20:17:45 +0000 asID: 26860 IP address blocks: 66.17.96.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 16 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:dc:af:35:47:bc:79:bf:55:c5:a8:66:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33beb877-dbaf-4d25-870e-a43af90cc071 Validity Not Before: Feb 12 21:17:45 2025 GMT Not After : May 13 20:17:45 2025 GMT Subject: CN=d177d2b5-8d51-4ff3-8f69-9401e1f0fb69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:70:15:82:ba:60:94:de:c3:60:9c:4a:f9: 70:c4:cc:6f:22:3a:61:aa:e6:81:fe:cb:97:4f:3f: e6:5f:0f:d5:9b:cf:0e:b5:de:e1:e9:dc:50:36:44: 49:bb:9e:b6:64:d6:16:7c:42:7d:3c:e7:1b:a1:5d: d5:86:82:3a:f6:98:b3:22:74:75:9c:5b:a3:41:46: 73:68:dc:0d:15:3c:3c:63:e5:d2:b4:94:3f:25:b3: e5:b2:b5:78:67:b2:42:92:a1:84:9a:5d:63:ad:e1: be:75:f6:c1:84:53:40:d9:bc:d2:04:7b:0b:88:fb: 9c:97:89:94:dc:15:cb:32:ab:59:4b:eb:54:00:18: 02:f1:52:dd:c3:02:cf:e9:54:e8:89:ad:43:22:ea: e4:70:97:ff:1b:3a:c6:c6:6b:04:49:88:5a:eb:a3: a1:de:81:46:0a:de:28:03:ed:5d:be:2d:74:f8:43: 29:c6:ec:89:9a:2e:e6:d5:7d:f0:83:9a:26:6a:af: 08:49:51:9e:5e:28:50:f8:e2:38:63:85:f2:46:39: 8f:6a:c7:15:b8:b5:da:9b:d0:ee:8b:23:4e:cc:72: 84:ed:c2:a4:8a:40:21:bd:90:22:a3:6a:96:38:41: 9f:42:88:67:a9:71:4f:3a:ae:db:fe:22:26:2e:d9: 76:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:8E:34:C6:30:F3:1B:83:38:12:F0:C8:7F:28:18:FD:11:79:AD:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/8e758574-f0d9-30b1-8fe5-a1dc0fd0181b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071/33beb877-dbaf-4d25-870e-a43af90cc071.crl X509v3 Authority Key Identifier: keyid:A0:EE:2D:FC:8D:E6:BB:C3:AC:BA:14:D6:E2:95:20:73:E7:2C:F9:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33beb877-dbaf-4d25-870e-a43af90cc071.cer sbgp-ipAddrBlock: critical IPv4: 66.17.96.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:7d:dd:5c:0b:ad:ed:7b:ba:02:0c:45:b7:9a:bc:44:a6:00: 60:ec:ac:ab:84:4b:e8:38:b8:35:34:e4:35:11:15:05:0e:96: 58:56:76:74:00:a4:4b:49:87:b9:34:70:1c:f4:16:43:bb:03: 6a:f7:6d:c3:3f:be:ff:95:06:5a:84:5f:4e:eb:be:32:ac:0c: 21:8b:64:c2:35:24:f3:4d:56:96:75:1a:37:69:e7:3f:fa:3a: 34:8c:e7:26:af:0b:7a:46:e8:f9:87:aa:1a:13:8c:22:d6:fb: 25:c2:4c:ee:2e:25:70:9e:9d:51:6f:23:74:35:7f:af:c4:4e: a1:4a:d2:3e:16:4e:e5:45:7b:e7:0a:3d:bd:f2:44:81:59:9f: 69:e4:d9:ac:4e:da:d5:06:65:2d:da:74:37:56:ac:4a:de:42: 5e:fe:f4:02:32:c0:dc:41:72:27:79:b2:9a:57:ff:9b:40:75: 06:32:0e:f4:17:f7:3f:2d:ca:97:fc:50:24:0d:b7:b3:f1:01: b0:6d:e5:45:70:4f:b3:6a:bb:59:33:5f:4c:4c:89:78:02:1a: 06:f5:dc:0b:3f:77:02:79:77:5f:eb:02:12:3e:1f:90:85:1f: 78:b4:6e:18:ac:7f:62:88:8e:1f:94:08:fb:e6:c3:40:c5:57: 44:d0:02:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjcrzVHvHm/VcWoZkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNiZWI4NzctZGJhZi00ZDI1LTg3MGUtYTQzYWY5MGNj MDcxMB4XDTI1MDIxMjIxMTc0NVoXDTI1MDUxMzIwMTc0NVowLzEtMCsGA1UEAxMk ZDE3N2QyYjUtOGQ1MS00ZmYzLThmNjktOTQwMWUxZjBmYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKBwFYK6YJTew2CcSvlwxMxvIjphquaB/suX Tz/mXw/Vm88Otd7h6dxQNkRJu562ZNYWfEJ9POcboV3VhoI69pizInR1nFujQUZz aNwNFTw8Y+XStJQ/JbPlsrV4Z7JCkqGEml1jreG+dfbBhFNA2bzSBHsLiPucl4mU 3BXLMqtZS+tUABgC8VLdwwLP6VToia1DIurkcJf/GzrGxmsESYha66Oh3oFGCt4o A+1dvi10+EMpxuyJmi7m1X3wg5omaq8ISVGeXihQ+OI4Y4XyRjmPascVuLXam9Du iyNOzHKE7cKkikAhvZAio2qWOEGfQohnqXFPOq7b/iImLtl2tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMWONMYw8xuDOBLwyH8oGP0Rea1RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Jl Yjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNhZjkwY2MwNzEvOGU3NTg1NzQtZjBkOS0z MGIxLThmZTUtYTFkYzBmZDAxODFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNiZWI4NzctZGJhZi00ZDI1LTg3 MGUtYTQzYWY5MGNjMDcxLzMzYmViODc3LWRiYWYtNGQyNS04NzBlLWE0M2FmOTBj YzA3MS5jcmwwHwYDVR0jBBgwFoAUoO4t/I3mu8OsuhTW4pUgc+cs+Q8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2JlYjg3Ny1kYmFmLTRkMjUtODcwZS1hNDNh ZjkwY2MwNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQhFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADh93VwLre17ugIMRbeavESmAGDsrKuES+g4uDU05DURFQUOllhWdnQA pEtJh7k0cBz0FkO7A2r3bcM/vv+VBlqEX07rvjKsDCGLZMI1JPNNVpZ1Gjdp5z/6 OjSM5yavC3pG6PmHqhoTjCLW+yXCTO4uJXCenVFvI3Q1f6/ETqFK0j4WTuVFe+cK Pb3yRIFZn2nk2axO2tUGZS3adDdWrEreQl7+9AIywNxBcid5sppX/5tAdQYyDvQX 9z8typf8UCQNt7PxAbBt5UVwT7Nqu1kzX0xMiXgCGgb13As/dwJ5d1/rAhI+H5CF H3i0bhisf2KIjh+UCPvmw0DFV0TQAnk= -----END CERTIFICATE-----Generated at Tue Apr 15 15:43:23 2025 by rpki-client