$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json) Hash identifier: PQjrB9urVLR+DjbaFqn0JCxSt0kSJbvnGIecAQVkVbs= Subject key identifier: 94:59:F9:94:99:AA:10:12:4D:22:41:82:55:AF:31:D3:EB:35:8A:D0 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285849CE9A55E4630BE8E5925B1980 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 40627 IP address blocks: 66.81.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:55:e4:63:0b:e8:e5:92:5b:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=ff144bf1-7160-4f91-832b-b6c6381d4ba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5d:00:d5:56:8d:20:89:52:4b:c5:01:ca:f1: 6c:b2:27:16:7a:d8:db:b6:59:a6:a9:97:cf:ca:e1: 71:5f:2e:dc:84:89:eb:8c:8d:57:e3:73:78:9c:7f: 86:1f:f0:76:db:00:1a:ad:bb:78:33:eb:6c:97:42: 31:e3:03:0e:64:bc:d8:88:43:ac:b8:ee:ae:c0:65: 5a:3f:fc:8e:11:d9:92:32:c9:0f:42:eb:fc:37:c2: db:b8:00:4f:01:c8:c0:c1:72:c7:ba:6f:49:41:12: ed:4d:3d:5a:eb:48:a3:b7:76:87:2b:8b:2e:d1:f5: e0:fe:c6:66:35:d7:64:39:f6:06:1d:6b:2d:d1:2b: 06:f7:95:00:2a:3c:70:3e:86:17:ab:48:24:d0:4d: 6c:4b:e0:71:b4:88:73:af:4c:4d:b2:1f:ff:94:2d: d5:c8:1e:06:84:45:be:d6:80:98:26:c1:db:e0:d3: 6f:22:77:64:ad:98:e5:f7:16:85:9e:9d:fb:44:4a: 9f:1e:3f:08:92:84:78:b9:8c:e5:85:99:b6:f2:6f: 9d:50:3d:e4:16:0b:3a:34:14:bd:1b:93:ea:82:80: cb:5a:6c:f0:2e:a1:b3:77:58:f7:ce:b4:9c:5f:fd: d9:06:09:ab:33:8d:9a:59:c2:41:bb:e4:94:65:4f: 5c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:59:F9:94:99:AA:10:12:4D:22:41:82:55:AF:31:D3:EB:35:8A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:83:45:95:8c:bd:dd:a4:b1:10:45:c3:64:cc:3e:6a:61:17: d9:fa:e4:75:08:9a:97:a7:af:19:76:1f:93:56:c7:db:6c:20: cb:b2:8d:00:b4:ef:27:a8:b8:49:61:b9:87:4a:fb:fb:ff:55: 09:f8:72:7e:0b:6e:06:ed:e3:ee:b1:b6:47:e9:5c:6a:c2:e5: 54:55:64:79:b0:4c:54:e9:11:94:de:f7:5c:a5:9c:8f:6f:c2: d4:42:2f:38:00:ba:4f:e4:ba:cf:ce:c2:be:2a:04:51:49:af: 17:5b:a5:b1:aa:c4:da:d3:3c:f3:06:f9:c6:5e:6f:d1:56:00: 58:ad:93:2d:22:75:1c:49:f0:f9:64:ee:83:13:26:13:52:e0: 0b:0e:9c:23:88:d3:8c:f5:22:7f:da:b4:29:82:b9:e5:1b:5d: 69:fb:c9:cb:25:c2:d6:28:cd:1e:ae:fa:16:fe:20:1a:b1:bb: 97:09:53:64:b6:36:ff:ad:4f:db:6f:2a:64:a8:06:b7:f8:60: ea:1b:6e:0b:56:90:d3:ea:ca:62:c2:c4:72:52:16:01:2f:c9: 61:82:8f:d1:17:dc:ad:61:6e:e2:e4:77:4c:8a:b5:fa:d0:2d: 1a:77:59:94:0b:b8:be:ea:30:e8:83:f1:90:af:40:ab:8e:25: d3:2c:bf:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlXkYwvo5ZJbGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk ZmYxNDRiZjEtNzE2MC00ZjkxLTgzMmItYjZjNjM4MWQ0YmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5F0A1VaNIIlSS8UByvFssicWetjbtlmmqZfP yuFxXy7chInrjI1X43N4nH+GH/B22wAarbt4M+tsl0Ix4wMOZLzYiEOsuO6uwGVa P/yOEdmSMskPQuv8N8LbuABPAcjAwXLHum9JQRLtTT1a60ijt3aHK4su0fXg/sZm NddkOfYGHWst0SsG95UAKjxwPoYXq0gk0E1sS+BxtIhzr0xNsh//lC3VyB4GhEW+ 1oCYJsHb4NNvIndkrZjl9xaFnp37REqfHj8IkoR4uYzlhZm28m+dUD3kFgs6NBS9 G5PqgoDLWmzwLqGzd1j3zrScX/3ZBgmrM42aWcJBu+SUZU9chwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJRZ+ZSZqhASTSJBglWvMdPrNYrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMjU5MDY1N2EtZDc5OS0z MTY5LWI3YTgtZDQwYjE1NDI5ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC2DRZWMvd2ksRBFw2TMPmphF9n65HUImpenrxl2H5NWx9tsIMuyjQC0 7yeouElhuYdK+/v/VQn4cn4Lbgbt4+6xtkfpXGrC5VRVZHmwTFTpEZTe91ylnI9v wtRCLzgAuk/kus/Owr4qBFFJrxdbpbGqxNrTPPMG+cZeb9FWAFitky0idRxJ8Plk 7oMTJhNS4AsOnCOI04z1In/atCmCueUbXWn7ycslwtYozR6u+hb+IBqxu5cJU2S2 Nv+tT9tvKmSoBrf4YOobbgtWkNPqymLCxHJSFgEvyWGCj9EX3K1hbuLkd0yKtfrQ LRp3WZQLuL7qMOiD8ZCvQKuOJdMsvyw= -----END CERTIFICATE-----Generated at Sun Jun 15 16:23:28 2025 by rpki-client