$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/66c277d5-8ed0-3638-ae8c-27c9d2ef8a55.roa File: 66c277d5-8ed0-3638-ae8c-27c9d2ef8a55.roa (raw, json) Hash identifier: fc5Nxto0E1Wfmo8B/kuE5SdmlhYUeRiwG5lAw/7IdYk= Subject key identifier: 05:1B:25:B8:E3:A0:E1:69:53:A6:25:BD:A2:F9:17:33:CF:7F:CE:66 Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Certificate serial: 010D0C9F4328584902EC1A95957A4F671A376A80 Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/66c277d5-8ed0-3638-ae8c-27c9d2ef8a55.roa Signing time: Wed 26 Feb 2025 14:00:51 +0000 ROA not before: Wed 26 Feb 2025 14:00:51 +0000 ROA not after: Tue 27 May 2025 13:00:51 +0000 asID: 393417 IP address blocks: 66.128.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:02:ec:1a:95:95:7a:4f:67:1a:37:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef Validity Not Before: Feb 26 14:00:51 2025 GMT Not After : May 27 13:00:51 2025 GMT Subject: CN=8ac9bbe9-89fc-4a3b-8ea2-c053fd21ce6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:08:3e:9b:15:87:c9:68:92:2b:02:db:02:33: fd:12:b6:0f:c5:50:da:72:83:ce:ed:da:d7:5f:e9: 78:db:06:f3:cf:8f:fd:bb:17:06:31:d9:a7:9f:b8: e2:4b:99:21:ec:2d:ca:02:69:9e:68:23:7d:55:4d: e4:dc:7d:12:2b:0c:8f:41:76:7b:48:b9:53:6c:02: 15:b3:d1:35:7a:d4:be:5d:0f:62:d2:9c:72:3a:36: 86:56:f2:33:1f:46:f7:92:5b:ec:ce:e8:69:c9:16: 10:c3:a7:9d:15:91:2e:a9:14:62:ea:f0:c4:16:b1: 3e:92:d4:3b:34:a9:67:bf:7f:56:dc:53:fd:21:88: 78:0c:8a:ac:7e:cf:ee:2f:a4:a2:9b:3e:11:cb:1b: 18:85:b4:54:71:87:ef:34:58:67:13:ac:36:ab:a7: 04:71:ba:ab:fe:4a:fd:36:92:06:29:14:15:8a:23: e9:fc:93:80:e1:e8:93:72:8d:52:5e:f2:db:6f:a9: e1:e8:7d:be:4c:16:29:61:25:28:b0:31:d8:d4:6c: 05:85:c3:4a:e8:b0:47:f9:b0:64:54:45:b3:38:97: 24:7d:af:cd:0b:f4:b9:ed:c4:35:14:1b:70:ae:66: d1:a8:6c:75:42:f8:ed:17:5c:01:61:73:e8:2c:c4: 16:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:1B:25:B8:E3:A0:E1:69:53:A6:25:BD:A2:F9:17:33:CF:7F:CE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/66c277d5-8ed0-3638-ae8c-27c9d2ef8a55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl X509v3 Authority Key Identifier: keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer sbgp-ipAddrBlock: critical IPv4: 66.128.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:c9:c6:46:14:72:bb:99:55:53:16:df:32:74:41:11:9d:7f: 20:ef:5a:cf:d9:a6:98:75:a4:36:8e:11:45:9f:d9:86:83:48: 18:4b:57:f8:f9:10:d5:10:98:04:16:4e:62:30:90:14:de:a0: 2a:cf:c3:13:22:7a:b2:bb:26:41:61:e8:6f:a4:75:04:3a:70: 54:a8:88:94:2c:2c:9c:ad:53:0c:d5:de:e5:28:0e:b9:45:6c: 14:91:8f:c3:79:7b:a7:bb:42:78:61:41:b1:e1:72:c7:c3:7b: 85:54:8d:1c:51:36:5f:58:8c:32:99:7c:9f:41:47:c8:b4:c7: 7e:f5:c5:b1:6b:65:3d:e9:a0:8f:00:60:e7:10:55:c9:1f:aa: 40:f9:3d:68:8f:7d:4a:5e:c0:59:47:db:99:63:93:91:0b:bd: bd:cf:d2:a8:4d:c7:fb:ef:62:9a:fe:5e:29:76:c7:cb:42:84: a6:5a:ae:57:d6:b6:c1:c2:2a:31:98:ac:86:19:5f:63:23:66: 8c:7a:d7:37:5d:7e:77:db:f0:74:0a:89:dd:f3:c7:81:a9:97: fd:5d:db:e0:0e:3d:4a:06:3f:9b:92:89:c6:23:2a:bc:8d:37: b2:d3:3b:d0:61:0f:46:71:c3:d5:a5:ee:ab:bc:11:93:87:17: 9a:84:e4:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC7BqVlXpPZxo3aoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Q3ZmIxYzItZjM4Ny00ODJkLWE2ZmUtZGM1YTg0NGY4 NWVmMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk OGFjOWJiZTktODlmYy00YTNiLThlYTItYzA1M2ZkMjFjZTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgg+mxWHyWiSKwLbAjP9ErYPxVDacoPO7drX X+l42wbzz4/9uxcGMdmnn7jiS5kh7C3KAmmeaCN9VU3k3H0SKwyPQXZ7SLlTbAIV s9E1etS+XQ9i0pxyOjaGVvIzH0b3klvszuhpyRYQw6edFZEuqRRi6vDEFrE+ktQ7 NKlnv39W3FP9IYh4DIqsfs/uL6Simz4RyxsYhbRUcYfvNFhnE6w2q6cEcbqr/kr9 NpIGKRQViiPp/JOA4eiTco1SXvLbb6nh6H2+TBYpYSUosDHY1GwFhcNK6LBH+bBk VEWzOJckfa/NC/S57cQ1FBtwrmbRqGx1QvjtF1wBYXPoLMQWRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAUbJbjjoOFpU6YlvaL5FzPPf85mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdm YjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVhODQ0Zjg1ZWYvNjZjMjc3ZDUtOGVkMC0z NjM4LWFlOGMtMjdjOWQyZWY4YTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2Q3ZmIxYzItZjM4Ny00ODJkLWE2 ZmUtZGM1YTg0NGY4NWVmLzNkN2ZiMWMyLWYzODctNDgyZC1hNmZlLWRjNWE4NDRm ODVlZi5jcmwwHwYDVR0jBBgwFoAU3MkINlXnblulsGeh5mDTI6lhRCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDdmYjFjMi1mMzg3LTQ4MmQtYTZmZS1kYzVh ODQ0Zjg1ZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQoCzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnJxkYUcruZVVMW3zJ0QRGdfyDvWs/Zpph1pDaOEUWf2YaDSBhLV/j5 ENUQmAQWTmIwkBTeoCrPwxMierK7JkFh6G+kdQQ6cFSoiJQsLJytUwzV3uUoDrlF bBSRj8N5e6e7QnhhQbHhcsfDe4VUjRxRNl9YjDKZfJ9BR8i0x371xbFrZT3poI8A YOcQVckfqkD5PWiPfUpewFlH25ljk5ELvb3P0qhNx/vvYpr+Xil2x8tChKZarlfW tsHCKjGYrIYZX2MjZox61zddfnfb8HQKid3zx4Gpl/1d2+AOPUoGP5uSicYjKryN N7LTO9BhD0Zxw9Wl7qu8EZOHF5qE5M0= -----END CERTIFICATE-----Generated at Fri Mar 14 13:57:01 2025 by rpki-client