$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa File: 8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa (raw, json) Hash identifier: Y8IiTjypZ1AZtjtl4Xfg4MD56S+E6tfmJWCBb4TFPaM= Subject key identifier: 3A:D1:25:9F:0D:8B:77:C5:7B:F6:CE:E1:CE:4A:76:FC:A2:10:B4:21 Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169 Certificate serial: 010D0C9F43285849A3547D78CB87D222C538A980 Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa Signing time: Fri 25 Apr 2025 01:00:47 +0000 ROA not before: Fri 25 Apr 2025 01:00:47 +0000 ROA not after: Thu 24 Jul 2025 01:00:47 +0000 asID: 16532 IP address blocks: 66.158.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a3:54:7d:78:cb:87:d2:22:c5:38:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169 Validity Not Before: Apr 25 01:00:47 2025 GMT Not After : Jul 24 01:00:47 2025 GMT Subject: CN=a980d7d9-b332-4eac-b15f-66d4ef83926d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:52:51:34:26:74:8e:be:65:f9:b1:c7:33:6b: 9c:8a:15:88:76:4b:55:f1:5f:6c:e3:6c:41:b7:57: d0:ea:37:ce:11:04:f1:a4:34:b2:92:78:67:d4:81: b4:2f:0e:df:64:97:dd:80:54:0f:4b:0a:67:04:3c: b5:b6:57:55:d2:06:d8:7b:51:b9:5f:ff:7c:a6:b3: 16:f2:4c:7a:92:cb:a6:e4:77:f2:04:dd:40:3d:2a: 6c:a3:da:11:1d:00:72:65:f8:28:5e:a5:e6:46:dc: bb:25:a3:af:72:53:cc:34:cd:5e:1d:81:c5:aa:3b: aa:1a:7f:7e:3b:88:77:62:b7:19:15:a9:67:b5:40: 12:e3:d8:06:06:14:1c:13:4a:ab:8a:44:07:35:5a: da:4c:74:ca:a3:5d:75:6b:af:11:41:59:25:6c:38: 9a:14:bd:65:57:11:a6:8d:c5:a2:38:9b:0e:35:40: 43:e8:ab:18:7a:80:e8:df:7e:97:46:35:5f:7d:14: e2:96:fa:f5:50:df:1a:fd:fe:a1:61:84:ee:ed:53: a3:df:fa:76:c4:62:77:a4:0b:b7:71:4f:07:59:ef: 4c:4c:4f:eb:12:de:aa:16:ff:34:60:aa:44:3f:ab: 75:fa:48:0b:48:71:c7:8a:e2:62:d3:29:8b:72:02: 4b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D1:25:9F:0D:8B:77:C5:7B:F6:CE:E1:CE:4A:76:FC:A2:10:B4:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/8358cf51-e428-3f31-87d9-bf7b1f56bdb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl X509v3 Authority Key Identifier: keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer sbgp-ipAddrBlock: critical IPv4: 66.158.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:6b:fa:0c:35:0b:a0:78:a0:51:91:65:f8:06:b7:6a:30:75: 02:c9:f3:58:96:1c:e0:7f:3b:05:8d:50:cc:3c:d7:46:d4:0d: 60:2b:8a:9d:6c:5e:b7:1a:59:a8:dc:4f:a0:13:80:05:12:6f: c9:3f:93:1b:a2:aa:d3:a4:74:2b:31:ab:5b:b5:ee:d5:ba:a8: 6f:8a:63:41:5b:70:01:07:2b:c4:5e:9e:96:5d:fd:4b:03:80: 35:72:13:c9:2c:b2:bd:5e:19:28:e1:4e:9b:7f:26:c1:fe:0b: d3:9b:ee:81:9f:f1:f7:46:a1:8b:98:16:c6:ac:0f:39:2a:eb: 4d:d6:87:1a:a1:2f:46:07:98:b4:74:c5:5e:8e:74:76:4e:a2: af:45:60:76:5d:86:17:e8:8a:35:61:5e:5e:5f:64:81:4b:40: be:3b:98:51:4f:96:6b:be:68:0c:e1:78:44:6c:a4:ce:3a:19: 28:6e:3f:45:51:ca:8d:ac:b7:b3:5f:a2:0b:2a:dc:dd:25:85: 64:a4:b6:d2:6b:14:bb:10:e2:ea:4d:51:ff:ba:ec:0b:88:ba: 92:bd:4e:cc:75:3f:45:26:f4:39:f7:22:24:c8:d1:3c:69:b2: ab:b8:18:40:30:1e:08:c9:6c:4c:90:03:80:42:7c:76:d2:d3: 2b:57:b9:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmjVH14y4fSIsU4qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZmMjhkMTAtNTczOS00ZTQwLWE0NDYtOTM1YzYwZDc5 MTY5MB4XDTI1MDQyNTAxMDA0N1oXDTI1MDcyNDAxMDA0N1owLzEtMCsGA1UEAxMk YTk4MGQ3ZDktYjMzMi00ZWFjLWIxNWYtNjZkNGVmODM5MjZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VJRNCZ0jr5l+bHHM2ucihWIdktV8V9s42xB t1fQ6jfOEQTxpDSyknhn1IG0Lw7fZJfdgFQPSwpnBDy1tldV0gbYe1G5X/98prMW 8kx6ksum5HfyBN1APSpso9oRHQByZfgoXqXmRty7JaOvclPMNM1eHYHFqjuqGn9+ O4h3YrcZFalntUAS49gGBhQcE0qrikQHNVraTHTKo111a68RQVklbDiaFL1lVxGm jcWiOJsONUBD6KsYeoDo336XRjVffRTilvr1UN8a/f6hYYTu7VOj3/p2xGJ3pAu3 cU8HWe9MTE/rEt6qFv80YKpEP6t1+kgLSHHHiuJi0ymLcgJLmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDrRJZ8Ni3fFe/bO4c5KdvyiELQhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYy OGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVjNjBkNzkxNjkvODM1OGNmNTEtZTQyOC0z ZjMxLTg3ZDktYmY3YjFmNTZiZGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjZmMjhkMTAtNTczOS00ZTQwLWE0 NDYtOTM1YzYwZDc5MTY5L2I2ZjI4ZDEwLTU3MzktNGU0MC1hNDQ2LTkzNWM2MGQ3 OTE2OS5jcmwwHwYDVR0jBBgwFoAU6OrPFNH9dKsxwrGm8H6vpkSECBQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNmYyOGQxMC01NzM5LTRlNDAtYTQ0Ni05MzVj NjBkNzkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQp6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVr+gw1C6B4oFGRZfgGt2owdQLJ81iWHOB/OwWNUMw810bUDWArip1s XrcaWajcT6ATgAUSb8k/kxuiqtOkdCsxq1u17tW6qG+KY0FbcAEHK8RenpZd/UsD gDVyE8kssr1eGSjhTpt/JsH+C9Ob7oGf8fdGoYuYFsasDzkq603WhxqhL0YHmLR0 xV6OdHZOoq9FYHZdhhfoijVhXl5fZIFLQL47mFFPlmu+aAzheERspM46GShuP0VR yo2st7Nfogsq3N0lhWSkttJrFLsQ4upNUf+67AuIupK9Tsx1P0Um9Dn3IiTI0Txp squ4GEAwHgjJbEyQA4BCfHbS0ytXuWo= -----END CERTIFICATE-----Generated at Tue Apr 29 16:22:06 2025 by rpki-client