$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json) Hash identifier: Rzr76kqNNOuuWCJDCHigq8C2x8pwoZzkR0essXyWeb4= Subject key identifier: A4:36:C0:5D:5E:2E:A7:CC:55:C1:ED:F5:29:3A:FC:9E:94:61:41:7C Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285848EF61623218F82B5F8E367620 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 40627 IP address blocks: 66.81.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:62:32:18:f8:2b:5f:8e:36:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=1254d16e-07d2-4e56-a3b1-592f48dbfcdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:c6:82:09:84:82:d8:38:8c:25:ce:63:d2: 36:58:2a:64:d6:6b:74:56:cc:fd:9d:3f:f6:33:a3: 8d:1c:06:b3:74:ea:0a:cf:0b:11:9d:06:4d:44:10: 9c:9e:09:d2:7e:6e:e8:64:a0:5b:7e:6e:f2:d8:d6: 2b:df:67:4c:d2:e7:4a:1b:cd:05:3b:1f:f6:84:e6: e1:a3:00:10:25:31:c9:36:ad:4d:c9:f0:74:92:c7: 9f:fe:00:e2:54:35:c1:cc:75:59:c4:76:c6:c2:06: d0:f0:42:82:b3:b6:f6:cf:16:bf:58:1e:80:d8:ac: f1:79:e5:b0:cd:41:d5:15:ac:ff:79:12:39:c4:eb: 4f:75:e8:09:dc:f2:eb:a3:f4:47:33:97:c6:aa:1a: 35:98:c5:f8:a0:65:17:15:58:84:16:cd:89:b4:e1: bb:c6:09:29:85:ee:60:bb:39:d4:9b:dc:bc:10:67: fd:07:26:53:f0:a7:45:aa:b7:a9:fd:dc:4f:1a:a0: f2:ad:da:25:68:96:a2:49:9f:f0:51:35:e3:60:c3: dd:6d:bd:bf:3f:3b:10:38:2f:ef:92:c6:86:e9:69: d8:b6:a5:7e:9f:f3:35:92:d4:30:4e:cb:f1:43:e8: 6e:38:32:d6:29:39:03:a9:59:f6:b1:05:cd:52:f9: 82:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:36:C0:5D:5E:2E:A7:CC:55:C1:ED:F5:29:3A:FC:9E:94:61:41:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1a:d2:d8:11:9a:24:be:ab:56:0f:95:5f:fe:9e:52:5d:99: a9:12:42:99:99:b3:31:a7:3e:e5:7c:d7:b0:d5:30:f7:99:7c: ca:d8:a1:34:bf:94:0a:0c:0d:b0:ab:3e:9f:5d:de:33:77:c6: ae:40:d5:c9:97:9f:4d:46:12:69:de:c3:94:a5:e8:f6:79:f2: 50:84:74:83:c7:51:15:3f:23:4a:06:9a:a0:96:08:06:25:f5: 22:c8:25:d0:9d:77:65:e1:ba:d9:9a:b9:9b:d4:dd:29:55:62: e1:60:b8:dc:80:ae:35:44:85:bd:2b:da:f3:77:1e:52:a1:b3: 95:4d:b3:4c:91:ae:82:29:6f:61:c4:b1:a8:9a:7e:e0:0b:6f: 5b:c1:b1:40:0c:9f:2a:c8:02:ff:62:51:58:27:1d:47:36:23: a5:c8:e1:a4:57:4d:47:1a:a6:eb:4b:bd:52:4e:d7:23:e5:87: 24:26:1c:c8:28:3d:80:25:75:e3:ae:cc:58:6d:91:1b:2b:b9: 86:59:e2:7d:ec:e4:51:ad:02:8e:34:4e:4d:c1:9e:8c:4e:ca: 75:f1:e7:60:df:cc:af:b7:47:69:1f:44:46:bd:a2:86:29:8b: d8:56:89:c4:5e:c4:94:ae:14:cd:4f:d6:06:e0:19:d3:19:b7: c4:95:18:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWIyGPgrX442diAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk MTI1NGQxNmUtMDdkMi00ZTU2LWEzYjEtNTkyZjQ4ZGJmY2RmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDDGggmEgtg4jCXOY9I2WCpk1mt0Vsz9nT/2 M6ONHAazdOoKzwsRnQZNRBCcngnSfm7oZKBbfm7y2NYr32dM0udKG80FOx/2hObh owAQJTHJNq1NyfB0ksef/gDiVDXBzHVZxHbGwgbQ8EKCs7b2zxa/WB6A2KzxeeWw zUHVFaz/eRI5xOtPdegJ3PLro/RHM5fGqho1mMX4oGUXFViEFs2JtOG7xgkphe5g uznUm9y8EGf9ByZT8KdFqrep/dxPGqDyrdolaJaiSZ/wUTXjYMPdbb2/PzsQOC/v ksaG6WnYtqV+n/M1ktQwTsvxQ+huODLWKTkDqVn2sQXNUvmCOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ2wF1eLqfMVcHt9Sk6/J6UYUF8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMjU5MDY1N2EtZDc5OS0z MTY5LWI3YTgtZDQwYjE1NDI5ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEa0tgRmiS+q1YPlV/+nlJdmakSQpmZszGnPuV817DVMPeZfMrYoTS/ lAoMDbCrPp9d3jN3xq5A1cmXn01GEmnew5Sl6PZ58lCEdIPHURU/I0oGmqCWCAYl 9SLIJdCdd2XhutmauZvU3SlVYuFguNyArjVEhb0r2vN3HlKhs5VNs0yRroIpb2HE saiafuALb1vBsUAMnyrIAv9iUVgnHUc2I6XI4aRXTUcaputLvVJO1yPlhyQmHMgo PYAldeOuzFhtkRsruYZZ4n3s5FGtAo40Tk3BnoxOynXx52DfzK+3R2kfREa9ooYp i9hWicRexJSuFM1P1gbgGdMZt8SVGAg= -----END CERTIFICATE-----Generated at Sat Apr 5 06:33:50 2025 by rpki-client