$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json) Hash identifier: B9MjRrIIhB+ImPbYv4d62S7woFZwZnwKToSFvIV5BBc= Subject key identifier: DC:88:23:7F:D3:40:EB:3A:0B:02:10:22:DF:E0:B9:B7:6E:5C:75:C8 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F432858494B640B7B8F89EF6ABAEB7240 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa Signing time: Mon 24 Mar 2025 13:00:53 +0000 ROA not before: Mon 24 Mar 2025 13:00:53 +0000 ROA not after: Sun 22 Jun 2025 13:00:53 +0000 asID: 209242 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4b:64:0b:7b:8f:89:ef:6a:ba:eb:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 24 13:00:53 2025 GMT Not After : Jun 22 13:00:53 2025 GMT Subject: CN=845dea8f-b786-48ae-bb54-c8a732c5fa98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:73:6b:d8:47:d6:82:eb:5e:d1:28:63:d0:3e: 59:6b:b8:bd:6b:22:99:de:64:c0:fd:12:95:21:5d: 95:0b:d5:f3:f0:aa:54:c6:36:2d:7a:b8:80:77:99: a8:a7:79:47:5b:fc:8d:9f:92:86:44:5d:3c:ad:95: e5:dd:d7:7b:e3:92:2e:ee:ac:e9:a6:66:c0:33:b9: 4c:42:da:d1:3f:d8:08:b0:b5:ad:83:78:67:87:91: 9b:dc:57:02:0c:02:d2:07:64:1c:38:8d:2c:7a:b7: ef:2a:d1:88:aa:d8:7f:a1:a4:31:cd:51:e5:44:ac: 0a:8b:93:07:9f:cb:ce:cd:56:6f:1c:76:14:8d:8a: 23:66:19:c6:cc:df:7f:79:ce:6c:b6:1f:c6:17:ab: 74:42:07:45:72:6d:0c:eb:50:00:2d:0b:fd:27:d3: 0b:13:69:09:88:aa:28:71:a0:d0:4d:6a:da:6b:b1: 99:cd:f5:b7:5d:a4:54:26:aa:6b:ae:70:8b:39:73: ec:6e:c7:15:bb:ee:a0:24:e3:1e:d9:bb:e9:c5:a3: fd:e4:10:d4:8c:59:57:a9:e0:74:c2:2d:d4:f8:0c: f4:4f:81:11:02:aa:3a:e4:61:bd:14:c3:7a:fb:b0: 1a:af:53:0f:1c:22:db:78:49:ad:66:fd:ef:ce:1f: e6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:88:23:7F:D3:40:EB:3A:0B:02:10:22:DF:E0:B9:B7:6E:5C:75:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:22:6d:ad:25:aa:66:e6:e7:41:d3:cc:13:2e:f7:09:fb:de: 80:07:6e:eb:79:70:4e:c4:b0:4c:e1:0a:40:3e:b9:54:24:21: e1:c4:4a:34:60:a9:a2:96:ca:56:c1:d5:7f:2e:74:69:57:e1: 70:f1:e1:8d:1a:bf:35:e7:8b:4d:06:5c:10:ac:f8:b8:19:fe: 1c:97:80:f4:ee:47:cb:70:82:b5:f9:83:81:96:95:a5:f4:d7: 9b:1d:7b:91:b5:09:6a:e0:a4:14:f5:5f:27:e5:56:45:d7:54: 99:88:7e:7b:bf:8e:1d:6c:ab:c7:d7:41:c3:a9:82:0d:28:45: a8:c0:4a:bf:88:04:42:db:e4:7e:9f:82:ff:5c:e2:0e:07:7d: 23:df:55:85:fc:c0:ab:31:31:e2:c4:83:4f:45:c4:8d:ae:b7: fa:f4:2c:50:33:47:ad:8a:28:03:b3:11:a6:33:f3:7e:f2:df: ba:2b:18:a0:c1:c5:59:9f:1c:19:bb:31:30:01:23:ed:71:db: c0:ce:d6:be:20:35:61:3e:9c:ff:6f:57:fb:70:be:02:6a:2a: 0f:00:cb:16:eb:06:e9:e5:b9:72:8c:0b:39:af:1b:f1:5d:a1: 30:57:94:e7:01:c2:6f:d0:5a:ac:a4:1b:82:a5:75:db:d1:b7: 81:2c:c0:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZAt7j4nvarrrckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk ODQ1ZGVhOGYtYjc4Ni00OGFlLWJiNTQtYzhhNzMyYzVmYTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHNr2EfWgute0Shj0D5Za7i9ayKZ3mTA/RKV IV2VC9Xz8KpUxjYteriAd5mop3lHW/yNn5KGRF08rZXl3dd745Iu7qzppmbAM7lM QtrRP9gIsLWtg3hnh5Gb3FcCDALSB2QcOI0serfvKtGIqth/oaQxzVHlRKwKi5MH n8vOzVZvHHYUjYojZhnGzN9/ec5sth/GF6t0QgdFcm0M61AALQv9J9MLE2kJiKoo caDQTWraa7GZzfW3XaRUJqprrnCLOXPsbscVu+6gJOMe2bvpxaP95BDUjFlXqeB0 wi3U+Az0T4ERAqo65GG9FMN6+7Aar1MPHCLbeEmtZv3vzh/mQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNyII3/TQOs6CwIQIt/gubduXHXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvODk0YTk1ZDUtOGQ3ZS0z MjRmLTg2ZGMtOTk2Nzc5YWJjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUiba0lqmbm50HTzBMu9wn73oAHbut5cE7EsEzhCkA+uVQkIeHESjRg qaKWylbB1X8udGlX4XDx4Y0avzXni00GXBCs+LgZ/hyXgPTuR8twgrX5g4GWlaX0 15sde5G1CWrgpBT1XyflVkXXVJmIfnu/jh1sq8fXQcOpgg0oRajASr+IBELb5H6f gv9c4g4HfSPfVYX8wKsxMeLEg09FxI2ut/r0LFAzR62KKAOzEaYz837y37orGKDB xVmfHBm7MTABI+1x28DO1r4gNWE+nP9vV/twvgJqKg8AyxbrBunluXKMCzmvG/Fd oTBXlOcBwm/QWqykG4KlddvRt4EswME= -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:18 2025 by rpki-client