$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json) Hash identifier: thruEv8EClxEJOUSYvx+bLFrcjSK76aGNHc8HLdCkIg= Subject key identifier: C3:B1:90:C2:FC:A2:CA:C8:AE:99:F1:87:DF:26:25:C3:4D:7B:09:A8 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584A2ABACCDCB7AA84B7FABEBE80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa Signing time: Thu 12 Jun 2025 13:01:03 +0000 ROA not before: Thu 12 Jun 2025 13:01:03 +0000 ROA not after: Wed 10 Sep 2025 13:01:03 +0000 asID: 209242 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2a:ba:cc:dc:b7:aa:84:b7:fa:be:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jun 12 13:01:03 2025 GMT Not After : Sep 10 13:01:03 2025 GMT Subject: CN=da98bd96-4c9e-4649-9361-d99d1e9adea6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:82:45:33:13:9f:21:ec:2b:f0:7d:e7:f1:fc: 59:88:e3:b3:a5:67:98:07:84:74:e3:f0:1f:eb:b1: 76:52:9b:5f:ed:ec:44:43:a1:a2:a3:ec:fe:ee:ae: 5e:e2:82:44:c2:aa:f6:62:0f:1f:c6:15:f8:dd:d1: 10:ea:cf:a7:95:91:d0:72:13:20:78:a1:f3:d0:b5: 08:71:c5:b7:e4:17:0a:b3:ef:ab:f1:ac:f4:d9:f1: e9:7c:dc:32:0a:0a:70:e6:45:6f:27:8e:34:60:29: 5e:b5:ed:c5:3f:91:55:7a:92:25:16:b4:71:96:6a: 52:d0:e3:14:78:88:13:c3:15:e8:1c:5a:91:7d:be: 83:4d:25:33:4d:03:c2:a5:f4:85:af:54:f3:8a:6b: 1b:75:7c:74:16:fa:87:47:ca:6c:c5:8d:08:2f:ef: c6:83:f9:00:4a:0f:dc:92:1e:eb:d3:2d:e5:6f:c3: 1d:88:c7:21:eb:31:96:d6:6c:01:6b:1c:6e:0c:a2: 42:6b:f9:59:a8:7e:23:31:8f:25:dd:a8:16:ac:53: 00:33:55:9c:24:c0:72:4e:17:b2:fb:f2:b3:ea:4a: a2:ef:28:48:5c:83:28:2c:f9:48:ed:53:13:1b:9f: a0:9e:66:dd:39:6c:be:dd:16:6e:ce:67:b9:2b:4f: 5b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:90:C2:FC:A2:CA:C8:AE:99:F1:87:DF:26:25:C3:4D:7B:09:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:37:74:7a:6b:88:58:20:d8:9c:f7:0a:4b:7e:10:3c:8f:8c: 85:3b:a1:1c:a9:44:01:e5:45:c9:24:0b:b8:76:66:b3:bc:0b: b5:c3:26:76:88:c4:32:6d:dd:56:56:0c:c8:80:60:03:8d:9a: 97:32:5f:bd:aa:80:d1:8e:1f:77:af:e4:25:1f:f9:67:be:05: ff:80:84:ff:05:4c:0a:6b:59:41:80:91:14:ea:32:c9:11:75: 20:0c:a0:25:fc:fa:ae:91:c8:be:e6:75:26:cc:0c:6b:df:4c: 53:55:70:13:e7:03:38:fb:8d:1a:4c:51:4a:14:21:7a:ff:6b: 48:2b:00:c8:30:e3:a0:cd:3a:25:2e:b3:93:1c:47:af:f3:f0: 64:ae:3c:8c:9f:18:ec:a2:59:41:99:be:3e:1d:19:15:d4:04: ef:dd:40:b9:e3:ed:dc:23:8c:7a:22:e8:10:3b:a1:d1:1e:89: 13:6f:9e:fe:29:23:17:a5:c2:5d:23:23:c9:9d:48:06:70:64: 13:49:be:a6:1e:f3:7b:2d:31:36:42:f8:ec:b5:af:c2:b2:fb: b2:2b:e9:c0:3e:98:3d:cc:b8:6e:a7:e9:06:1b:b8:b7:36:59: ac:65:88:3e:a0:b4:a9:a9:f7:08:9b:70:d0:ee:32:9e:d1:b7: 5b:51:37:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquszct6qEt/q+voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk ZGE5OGJkOTYtNGM5ZS00NjQ5LTkzNjEtZDk5ZDFlOWFkZWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoJFMxOfIewr8H3n8fxZiOOzpWeYB4R04/Af 67F2Uptf7exEQ6Gio+z+7q5e4oJEwqr2Yg8fxhX43dEQ6s+nlZHQchMgeKHz0LUI ccW35BcKs++r8az02fHpfNwyCgpw5kVvJ440YClete3FP5FVepIlFrRxlmpS0OMU eIgTwxXoHFqRfb6DTSUzTQPCpfSFr1TzimsbdXx0FvqHR8psxY0IL+/Gg/kASg/c kh7r0y3lb8MdiMch6zGW1mwBaxxuDKJCa/lZqH4jMY8l3agWrFMAM1WcJMByThey +/Kz6kqi7yhIXIMoLPlI7VMTG5+gnmbdOWy+3RZuzme5K09biQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOxkML8osrIrpnxh98mJcNNewmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvODk0YTk1ZDUtOGQ3ZS0z MjRmLTg2ZGMtOTk2Nzc5YWJjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADk3dHpriFgg2Jz3Ckt+EDyPjIU7oRypRAHlRckkC7h2ZrO8C7XDJnaI xDJt3VZWDMiAYAONmpcyX72qgNGOH3ev5CUf+We+Bf+AhP8FTAprWUGAkRTqMskR dSAMoCX8+q6RyL7mdSbMDGvfTFNVcBPnAzj7jRpMUUoUIXr/a0grAMgw46DNOiUu s5McR6/z8GSuPIyfGOyiWUGZvj4dGRXUBO/dQLnj7dwjjHoi6BA7odEeiRNvnv4p Ixelwl0jI8mdSAZwZBNJvqYe83stMTZC+Oy1r8Ky+7Ir6cA+mD3MuG6n6QYbuLc2 WaxliD6gtKmp9wibcNDuMp7Rt1tRNwg= -----END CERTIFICATE-----Generated at Sun Jun 15 06:23:32 2025 by rpki-client