$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa File: de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa (raw, json) Hash identifier: nuJuqHUpBDYG9C3EZPICnXl3QppC+EfA7YUNcpsi9Yw= Subject key identifier: 3D:7E:7C:0A:A9:57:9A:36:85:3A:53:D5:90:D7:D4:7A:C1:4C:7D:BB Certificate issuer: /CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Certificate serial: 010D0C9F43285848EC969064A192C3DC72E6CF80 Authority key identifier: 9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 66.206.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:90:64:a1:92:c3:dc:72:e6:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d131ffaa-85f2-4bd5-8961-9dc8adf15b8b Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=976e7002-850d-4f6e-8328-a83e8e26c6a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:c0:a0:d6:9a:d8:ca:d3:f3:5a:38:0b:66: b1:15:32:fa:2e:a3:13:0c:c2:a7:56:3d:28:bd:8a: 65:cb:94:83:8b:9b:08:6e:db:54:83:25:18:12:78: a4:3e:13:82:90:0e:28:54:49:c3:41:30:23:5c:cc: 01:a0:b9:69:ab:72:ef:4e:f9:16:2b:38:39:50:79: 29:d7:a5:c6:82:47:3d:42:ef:a2:a8:da:6d:56:78: fc:b5:0b:7a:6e:db:1c:6f:f5:7d:b2:73:58:99:b7: 20:07:db:dc:93:cc:d7:d8:09:b4:81:f1:a4:de:9e: d1:15:15:85:57:99:43:7c:91:67:7c:38:de:ad:88: 8d:7e:e9:86:f0:fa:ce:b2:e6:3b:61:df:d3:1e:f2: fc:a7:ec:b9:20:28:93:d3:36:cd:c1:56:cd:d6:91: 8a:0d:32:56:ba:bf:f6:33:de:cf:ab:55:8b:4e:e1: 18:bb:43:d7:25:29:8a:6c:8e:a0:21:02:cf:33:e1: a0:ee:5c:30:c3:54:d6:96:98:c6:e8:0f:c1:95:6d: d4:c5:81:13:56:0a:0e:a1:09:8c:c7:dc:a8:d1:e3: ef:64:c0:64:ae:31:02:71:e3:56:6f:85:91:b6:be: f9:00:7a:a4:16:76:3e:56:c3:3a:fd:24:38:72:07: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:7E:7C:0A:A9:57:9A:36:85:3A:53:D5:90:D7:D4:7A:C1:4C:7D:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/de8e7996-bfa8-34b8-b2b8-a025b6adc8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.crl X509v3 Authority Key Identifier: keyid:9F:17:3E:C4:F4:5B:C5:67:20:A6:CD:81:15:0D:C2:4B:63:29:4E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d131ffaa-85f2-4bd5-8961-9dc8adf15b8b.cer sbgp-ipAddrBlock: critical IPv4: 66.206.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:a9:bd:a9:5f:63:7f:3a:f4:e0:1e:6f:64:06:a3:00:cf:08: cb:4e:f5:94:86:71:50:98:c5:01:7e:75:47:05:32:50:53:7f: 26:37:01:45:ba:5b:b0:45:4f:ca:8d:7c:84:dd:02:e2:9a:97: 7c:93:98:0c:55:bc:6c:aa:ab:3a:db:bf:9d:47:cc:6b:25:83: 8a:80:fb:8b:da:32:4f:57:6b:a2:f7:31:43:c3:5a:35:71:8c: 21:06:e1:65:5c:98:64:47:33:7e:cd:4c:7a:06:39:d9:52:5a: 91:1e:ed:ef:6b:15:f7:5a:71:6c:e9:b8:60:01:29:51:a8:68: 7e:82:c4:66:8e:0a:78:f5:66:63:a9:e4:f4:ce:98:89:ec:01: 4a:a1:4b:31:37:0d:33:f6:d4:ee:63:be:77:7d:72:fd:9d:e4: db:5f:5d:fc:b6:e9:28:0c:32:8e:06:6f:06:37:a2:f4:11:66: cb:06:86:b2:cd:3b:39:fe:0a:64:66:b4:11:ee:3c:69:84:1d: 00:02:f4:f4:04:37:48:a1:ae:fb:ff:44:80:22:51:19:3c:1a: 8e:1a:06:e1:b8:66:1a:29:e5:12:79:e0:48:5c:ab:60:c8:c8: 80:5b:49:fc:22:8a:4e:25:73:d1:18:9a:9b:13:de:0c:1e:14: 6b:39:fc:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpBkoZLD3HLmz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDEzMWZmYWEtODVmMi00YmQ1LTg5NjEtOWRjOGFkZjE1 YjhiMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk OTc2ZTcwMDItODUwZC00ZjZlLTgzMjgtYTgzZThlMjZjNmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA3AoNaa2MrT81o4C2axFTL6LqMTDMKnVj0o vYply5SDi5sIbttUgyUYEnikPhOCkA4oVEnDQTAjXMwBoLlpq3LvTvkWKzg5UHkp 16XGgkc9Qu+iqNptVnj8tQt6btscb/V9snNYmbcgB9vck8zX2Am0gfGk3p7RFRWF V5lDfJFnfDjerYiNfumG8PrOsuY7Yd/THvL8p+y5ICiT0zbNwVbN1pGKDTJWur/2 M97Pq1WLTuEYu0PXJSmKbI6gIQLPM+Gg7lwww1TWlpjG6A/BlW3UxYETVgoOoQmM x9yo0ePvZMBkrjECceNWb4WRtr75AHqkFnY+VsM6/SQ4cgc/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1+fAqpV5o2hTpT1ZDX1HrBTH27MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMx ZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4YWRmMTViOGIvZGU4ZTc5OTYtYmZhOC0z NGI4LWIyYjgtYTAyNWI2YWRjOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDEzMWZmYWEtODVmMi00YmQ1LTg5 NjEtOWRjOGFkZjE1YjhiL2QxMzFmZmFhLTg1ZjItNGJkNS04OTYxLTlkYzhhZGYx NWI4Yi5jcmwwHwYDVR0jBBgwFoAUnxc+xPRbxWcgps2BFQ3CS2MpTvUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMTMxZmZhYS04NWYyLTRiZDUtODk2MS05ZGM4 YWRmMTViOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQs6tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2pvalfY3869OAeb2QGowDPCMtO9ZSGcVCYxQF+dUcFMlBTfyY3AUW6 W7BFT8qNfITdAuKal3yTmAxVvGyqqzrbv51HzGslg4qA+4vaMk9Xa6L3MUPDWjVx jCEG4WVcmGRHM37NTHoGOdlSWpEe7e9rFfdacWzpuGABKVGoaH6CxGaOCnj1ZmOp 5PTOmInsAUqhSzE3DTP21O5jvnd9cv2d5NtfXfy26SgMMo4GbwY3ovQRZssGhrLN Ozn+CmRmtBHuPGmEHQAC9PQEN0ihrvv/RIAiURk8Go4aBuG4Zhop5RJ54Ehcq2DI yIBbSfwiik4lc9EYmpsT3gweFGs5/Jg= -----END CERTIFICATE-----Generated at Fri Mar 14 08:17:11 2025 by rpki-client