$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa File: ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa (raw, json) Hash identifier: nE5UQ0taAAzw+3sSn3wS/5EsrqSTiMRjpYIoyWxjASU= Subject key identifier: C0:FE:19:DA:7E:D5:CE:F0:24:E1:03:EE:B4:6E:C9:A2:0E:F7:74:9A Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285849A354806230E66B0D2DA6F400 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 394002 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:80:62:30:e6:6b:0d:2d:a6:f4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=5564db5f-2a12-4ca3-b23c-7da7af24e80e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:8c:28:f0:d7:ab:e1:38:ae:bc:28:40:10:4c: 2b:29:ad:54:67:77:d6:89:78:b0:2e:75:1f:47:63: 81:d0:ed:2c:92:15:69:f7:d8:00:00:c9:33:76:ec: a1:93:82:53:87:fe:91:d5:18:6e:9c:42:70:36:5c: 54:87:16:e8:f3:4b:be:81:23:0e:a5:3d:05:94:b7: d7:20:f3:e8:5b:b3:36:0d:bc:e6:9e:ae:af:bc:ff: 40:b5:b9:6a:8c:28:90:17:37:0b:74:5d:f9:9e:d8: 48:02:74:7c:74:e5:fc:b8:7a:28:a1:cc:21:dc:1f: d6:e9:5b:df:8a:81:fa:83:9e:0d:48:e5:f8:fc:e1: a3:31:27:28:d5:7f:62:61:88:25:c9:22:04:c3:b4: 13:1b:b0:f5:7a:8f:e3:2e:a8:58:61:42:4d:5d:f1: be:4c:2a:5e:08:a5:f8:a2:5e:d0:3c:7a:90:6d:f9: c5:ca:63:09:fc:43:76:e1:cb:d7:aa:d9:fd:0b:7c: ec:02:9c:b0:6a:67:b3:7a:ba:11:83:29:ac:f5:a1: fb:91:a8:a1:9b:66:44:29:0d:53:b7:c5:6b:1c:20: 78:7c:09:dc:2c:40:9d:09:ba:b3:bc:28:39:6b:d3: 61:15:bc:09:ff:be:b0:ca:06:6f:e3:36:5e:25:69: 12:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FE:19:DA:7E:D5:CE:F0:24:E1:03:EE:B4:6E:C9:A2:0E:F7:74:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:8b:b9:c7:c6:1d:69:ea:27:7d:47:9e:32:dd:5a:4e:4e:87: 18:82:c0:e9:a8:ab:31:78:f2:9f:1d:62:ce:2a:7c:86:15:d4: 54:c2:7b:7b:89:a7:84:9a:a7:46:f2:c3:92:85:43:3b:4e:3f: 2f:df:e9:ec:5b:16:82:98:97:b0:3c:2c:11:1e:1e:ad:d5:c1: 09:1a:49:c8:b0:ce:d2:e7:82:d4:c1:3b:6f:45:24:5c:61:a2: cf:97:a7:d0:0c:ef:b5:e4:c6:84:a9:8b:8e:27:1d:a8:4f:08: aa:91:79:d3:07:eb:98:5e:86:5a:a4:43:9f:96:b5:e1:af:05: 7a:03:9d:ff:83:db:82:12:68:74:78:52:9c:9f:60:b7:45:f0: d4:2e:c0:34:5d:55:01:c1:eb:19:0b:0d:02:7a:45:f7:5a:5a: 91:d4:8d:22:5c:75:1c:a8:f7:39:f6:ff:a1:07:93:e3:e3:02: 68:15:55:90:f2:ac:7d:ab:67:02:d1:3c:a3:71:28:aa:6e:af: 34:56:b3:10:57:1d:73:c6:fd:f1:55:5b:39:c3:77:26:1e:33: 49:5d:42:bf:07:9f:6e:15:59:37:ab:ef:31:50:6e:3c:f8:93: 61:7e:40:31:75:af:98:7b:e1:a3:bb:d1:6f:bd:bd:93:9b:73: 08:bb:36:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVIBiMOZrDS2m9AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk NTU2NGRiNWYtMmExMi00Y2EzLWIyM2MtN2RhN2FmMjRlODBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIwo8Ner4TiuvChAEEwrKa1UZ3fWiXiwLnUf R2OB0O0skhVp99gAAMkzduyhk4JTh/6R1RhunEJwNlxUhxbo80u+gSMOpT0FlLfX IPPoW7M2Dbzmnq6vvP9AtblqjCiQFzcLdF35nthIAnR8dOX8uHooocwh3B/W6Vvf ioH6g54NSOX4/OGjMSco1X9iYYglySIEw7QTG7D1eo/jLqhYYUJNXfG+TCpeCKX4 ol7QPHqQbfnFymMJ/EN24cvXqtn9C3zsApywamezeroRgyms9aH7kaihm2ZEKQ1T t8VrHCB4fAncLECdCbqzvCg5a9NhFbwJ/76wygZv4zZeJWkSLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMD+Gdp+1c7wJOED7rRuyaIO93SaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2EyNzViNTAtMzM2YS0z YWIwLWEwZmEtMzQxMWVkNDhlZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAuLucfGHWnqJ31HnjLdWk5OhxiCwOmoqzF48p8dYs4qfIYV1FTCe3uJ p4Sap0byw5KFQztOPy/f6exbFoKYl7A8LBEeHq3VwQkaSciwztLngtTBO29FJFxh os+Xp9AM77XkxoSpi44nHahPCKqRedMH65hehlqkQ5+WteGvBXoDnf+D24ISaHR4 UpyfYLdF8NQuwDRdVQHB6xkLDQJ6RfdaWpHUjSJcdRyo9zn2/6EHk+PjAmgVVZDy rH2rZwLRPKNxKKpurzRWsxBXHXPG/fFVWznDdyYeM0ldQr8Hn24VWTer7zFQbjz4 k2F+QDF1r5h74aO70W+9vZObcwi7NkU= -----END CERTIFICATE-----Generated at Thu May 1 02:53:15 2025 by rpki-client