$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa File: 516d9441-73c0-35d1-af65-73c07b29f9c3.roa (raw, json) Hash identifier: gQsQfAjDoYY2Z930U0T27g0WW1S5qYDhHGEBY/Z8XLk= Subject key identifier: 60:41:13:AA:C8:B8:34:EF:4A:C7:A3:F6:B3:4D:64:D7:32:3F:5D:E7 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285849F87A7CD17FBCDC4281008340 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 16509 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7c:d1:7f:bc:dc:42:81:00:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=32a3cb03-e9f2-47a6-9b59-ec1f6387a894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:59:44:53:e6:5f:01:c0:42:97:2a:cb:54: bb:12:ae:6f:ad:61:a3:83:f7:09:ac:b6:20:e6:27: e3:1e:98:d8:34:22:9b:24:9c:07:3f:4e:51:e7:b7: e7:4a:27:c1:c2:a6:6b:c8:fe:b3:0a:06:10:94:b9: b2:f0:68:50:f8:da:4b:26:b2:cd:65:61:15:4f:c0: 2b:5c:df:24:64:ce:fa:71:3a:70:b2:3f:0c:4a:ff: a6:4a:f9:31:58:2d:90:a2:6f:56:86:8f:64:4f:2d: e1:4a:01:1b:33:ac:a1:20:39:b0:3e:2f:c3:70:75: 8c:23:7b:54:c8:b0:30:f9:f8:ea:cc:2c:fb:72:05: 5e:bd:4b:da:77:68:6d:5d:51:17:90:0a:a5:85:04: 22:fb:88:a0:be:66:64:4b:24:d0:4b:bb:4d:8c:36: 9a:1a:a3:53:64:b0:19:0b:2d:bf:ae:11:16:33:07: 3f:10:05:8d:2f:cf:f2:c2:93:68:c4:43:46:fb:ae: 27:be:e1:35:4a:18:be:c6:a5:65:12:63:00:9e:3c: 28:6d:eb:f7:26:61:c1:27:63:b2:22:e3:74:72:0e: d6:21:8b:da:0c:1e:ef:3b:a9:bd:bd:e5:18:ac:4e: 02:1e:93:49:0e:6e:34:7f:93:dd:ef:fc:c6:e6:62: 4f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:41:13:AA:C8:B8:34:EF:4A:C7:A3:F6:B3:4D:64:D7:32:3F:5D:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:de:47:13:8a:d9:05:b4:14:71:0b:2a:c4:0f:87:9a:24:5a: 00:18:a5:75:03:8a:8b:03:ed:bd:19:45:b5:cc:81:8e:31:6f: c7:b3:81:ab:56:e8:c0:49:4d:08:a8:61:24:28:65:4f:8d:89: e7:24:36:50:ac:78:71:0f:c8:dd:3b:7c:6a:b7:c4:88:f2:16: 0c:fa:cf:fe:fd:d9:38:f8:9a:aa:b4:74:65:67:da:3c:f0:c3: 90:a1:f3:5b:bc:99:00:26:cc:d3:a1:9f:23:6c:14:f6:a3:20: 36:cf:1a:96:eb:9f:92:a0:56:4a:6d:dc:3d:0b:85:f2:2d:31: 18:f6:28:d1:af:59:e5:f9:03:1c:8c:3f:06:48:dd:73:23:32: 01:60:25:12:d2:ee:ab:dd:9c:80:b8:27:26:fc:11:0e:32:f6: de:f5:13:12:11:2b:37:08:26:bd:1e:39:b2:85:70:2f:19:60: bb:95:08:a4:ba:3b:5f:24:80:a1:2f:e4:1c:0e:db:e5:4e:5b: 21:85:54:80:84:56:15:48:73:f2:8a:e8:5f:1e:65:63:95:51: 92:70:6a:aa:27:52:a3:25:eb:c3:4b:22:60:a7:42:58:60:05: 11:63:94:a8:95:2c:56:0f:39:ae:32:b3:c6:01:d0:a9:02:1f: e7:a3:f7:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4enzRf7zcQoEAg0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk MzJhM2NiMDMtZTlmMi00N2E2LTliNTktZWMxZjYzODdhODk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCNZRFPmXwHAQpcqy1S7Eq5vrWGjg/cJrLYg 5ifjHpjYNCKbJJwHP05R57fnSifBwqZryP6zCgYQlLmy8GhQ+NpLJrLNZWEVT8Ar XN8kZM76cTpwsj8MSv+mSvkxWC2Qom9Who9kTy3hSgEbM6yhIDmwPi/DcHWMI3tU yLAw+fjqzCz7cgVevUvad2htXVEXkAqlhQQi+4igvmZkSyTQS7tNjDaaGqNTZLAZ Cy2/rhEWMwc/EAWNL8/ywpNoxENG+64nvuE1Shi+xqVlEmMAnjwobev3JmHBJ2Oy IuN0cg7WIYvaDB7vO6m9veUYrE4CHpNJDm40f5Pd7/zG5mJPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBBE6rIuDTvSsej9rNNZNcyP13nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNTE2ZDk0NDEtNzNjMC0z NWQxLWFmNjUtNzNjMDdiMjlmOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJneRxOK2QW0FHELKsQPh5okWgAYpXUDiosD7b0ZRbXMgY4xb8ezgatW 6MBJTQioYSQoZU+NieckNlCseHEPyN07fGq3xIjyFgz6z/792Tj4mqq0dGVn2jzw w5Ch81u8mQAmzNOhnyNsFPajIDbPGpbrn5KgVkpt3D0LhfItMRj2KNGvWeX5AxyM PwZI3XMjMgFgJRLS7qvdnIC4Jyb8EQ4y9t71ExIRKzcIJr0eObKFcC8ZYLuVCKS6 O18kgKEv5BwO2+VOWyGFVICEVhVIc/KK6F8eZWOVUZJwaqonUqMl68NLImCnQlhg BRFjlKiVLFYPOa4ys8YB0KkCH+ej9x4= -----END CERTIFICATE-----Generated at Sat Jun 14 06:15:09 2025 by rpki-client