$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0745a04b-e5ca-3196-a860-c723bcdfe5e2.roa File: 0745a04b-e5ca-3196-a860-c723bcdfe5e2.roa (raw, json) Hash identifier: TUl+2S5Nop3FvPd/aE/EfB0g29uMfH9inSgUmAthZ2g= Subject key identifier: 05:C4:5A:26:68:FE:38:D9:C9:23:41:C4:3E:33:F4:CD:AD:8B:48:6F Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F432858493C093E48EE7728F5B2199F80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0745a04b-e5ca-3196-a860-c723bcdfe5e2.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 15204 IP address blocks: 66.128.183.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:3e:48:ee:77:28:f5:b2:19:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=0e7f6af7-8fd2-44c9-ae4f-db5531f372c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:4b:74:77:4a:f1:01:a5:85:92:cd:fc:fc:d9: bd:48:f1:56:cb:1e:48:fc:85:02:b8:29:86:2c:02: e2:e0:be:b3:ad:b8:f9:37:25:d1:7f:da:1b:4c:fb: fa:84:a8:5d:13:2a:e4:c8:85:3b:a0:25:bc:98:9e: 56:7a:fd:4f:df:50:09:62:69:ba:44:fb:85:14:94: c4:4b:d4:83:53:74:b4:e2:28:0e:18:c5:30:0d:74: 21:6f:da:74:67:72:7a:6d:90:ba:a7:10:a2:80:bb: 9c:18:a3:ef:2a:77:d6:d3:f2:52:d9:6f:44:34:1d: 67:6e:78:ac:e7:92:22:8a:6a:cc:99:bf:32:d3:0f: a8:d4:65:06:91:68:88:c9:fe:23:fa:cc:05:66:0e: 3e:ca:07:db:9a:11:27:f4:db:31:4a:59:74:e0:d4: 3a:1e:31:88:65:c0:ae:c8:31:38:8d:13:2c:34:a3: ea:e6:b8:26:ea:af:02:54:e2:cc:b4:34:90:2e:c7: 22:51:33:46:4c:6c:cd:d2:d1:af:ea:ea:1c:71:78: 32:23:5b:24:df:0f:03:81:2c:cb:f7:76:13:8f:2f: be:4d:1d:2a:24:3b:4d:f7:8a:7f:d9:38:d8:bd:3d: ec:81:bf:da:f5:78:8a:9a:fd:e4:6d:b4:fa:ec:51: 63:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C4:5A:26:68:FE:38:D9:C9:23:41:C4:3E:33:F4:CD:AD:8B:48:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/0745a04b-e5ca-3196-a860-c723bcdfe5e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.183.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:eb:f2:44:2e:9d:ae:4b:98:89:6a:cc:7a:92:01:cf:f7:80: bd:f0:85:6e:00:11:f5:fb:af:aa:2b:a8:0b:0e:80:72:ac:b1: 47:7d:fe:e0:d7:7d:c9:e2:0e:1b:27:f2:68:a5:09:37:d1:a5: 8a:68:81:7e:2e:a7:9e:0a:83:4e:0b:7d:a5:d2:e2:45:a8:ad: 0a:db:b7:67:31:3b:13:b4:80:46:3c:44:35:31:05:61:b6:af: af:f7:79:23:b7:81:6f:f4:40:cc:28:b4:35:bd:50:37:88:2e: 84:66:00:74:33:ae:07:81:8c:19:e0:29:0c:72:9a:7a:53:4f: c8:68:b7:c4:9f:1d:20:3c:b1:6f:83:4e:ce:c9:bb:b8:5b:7e: 83:30:78:a4:68:26:26:c0:ea:11:4b:bd:d5:08:49:6f:c0:49: 6f:81:e4:53:de:c9:58:ac:76:18:45:11:ed:36:cc:aa:df:13: 49:c9:60:d3:8c:57:e0:ae:d6:0d:48:8a:39:b1:6f:46:80:2d: 93:6d:ac:8a:ac:d9:9e:c0:07:40:ca:32:e5:02:15:5d:e6:2e: d4:c8:30:3d:87:0b:4a:50:cf:57:41:e9:07:6f:08:d4:24:87: 7b:d4:f2:c9:d3:48:4a:69:59:3d:69:ef:e7:83:71:c7:79:bc: 21:27:8a:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT5I7nco9bIZn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk MGU3ZjZhZjctOGZkMi00NGM5LWFlNGYtZGI1NTMxZjM3MmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUt0d0rxAaWFks38/Nm9SPFWyx5I/IUCuCmG LALi4L6zrbj5NyXRf9obTPv6hKhdEyrkyIU7oCW8mJ5Wev1P31AJYmm6RPuFFJTE S9SDU3S04igOGMUwDXQhb9p0Z3J6bZC6pxCigLucGKPvKnfW0/JS2W9ENB1nbnis 55IiimrMmb8y0w+o1GUGkWiIyf4j+swFZg4+ygfbmhEn9NsxSll04NQ6HjGIZcCu yDE4jRMsNKPq5rgm6q8CVOLMtDSQLsciUTNGTGzN0tGv6uoccXgyI1sk3w8DgSzL 93YTjy++TR0qJDtN94p/2TjYvT3sgb/a9XiKmv3kbbT67FFjQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXEWiZo/jjZySNBxD4z9M2ti0hvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvMDc0NWEwNGItZTVjYS0z MTk2LWE4NjAtYzcyM2JjZGZlNWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoC3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL/r8kQuna5LmIlqzHqSAc/3gL3whW4AEfX7r6orqAsOgHKssUd9/uDX fcniDhsn8milCTfRpYpogX4up54Kg04LfaXS4kWorQrbt2cxOxO0gEY8RDUxBWG2 r6/3eSO3gW/0QMwotDW9UDeILoRmAHQzrgeBjBngKQxymnpTT8hot8SfHSA8sW+D Ts7Ju7hbfoMweKRoJibA6hFLvdUISW/ASW+B5FPeyVisdhhFEe02zKrfE0nJYNOM V+Cu1g1Iijmxb0aALZNtrIqs2Z7AB0DKMuUCFV3mLtTIMD2HC0pQz1dB6QdvCNQk h3vU8snTSEppWT1p7+eDccd5vCEnijw= -----END CERTIFICATE-----Generated at Mon Apr 7 01:05:45 2025 by rpki-client