$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa File: 516d9441-73c0-35d1-af65-73c07b29f9c3.roa (raw, json) Hash identifier: UMt8rcgtMkwFBcxowgBjqTSTmZyVwVIVo0swrPaUItk= Subject key identifier: 33:61:6D:FA:8E:C7:50:0A:E1:44:69:31:73:E3:C3:24:A9:53:94:93 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285849194178A2F13F889A0C3A1D80 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:78:a2:f1:3f:88:9a:0c:3a:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=586c20e3-9bbb-4a6d-8245-2f28a2ef713d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ac:40:e6:5d:f2:8b:de:27:34:14:ab:6e:2b: d5:af:3f:81:4a:19:d7:6d:6b:08:4b:5f:55:3e:37: 1a:51:c6:c2:56:26:55:86:36:bf:a8:0e:43:26:0d: b1:b0:e9:eb:e0:59:34:02:15:75:30:e2:17:89:78: 63:81:f7:a7:ea:2c:a9:a8:5d:b0:e5:07:43:3d:b2: 42:fa:fa:91:6f:1a:71:83:8e:f3:ce:f1:c0:14:3a: 3f:19:dc:c5:82:49:a4:6f:43:79:48:17:17:ae:1d: 9e:19:6d:7d:f3:73:6b:9e:b5:11:e9:9e:49:7e:48: 14:12:fe:ee:81:25:61:5d:13:74:aa:43:e4:f8:51: ef:d2:72:5c:57:18:c5:6e:18:fe:65:9e:45:74:8b: d7:cc:db:87:54:81:ac:c8:b4:a2:5c:a6:67:f9:76: f1:d3:3f:a7:21:40:6e:43:df:1b:0d:e2:25:7a:d6: 32:39:70:ec:93:89:a0:3e:4c:cf:fe:28:25:36:a6: c1:ee:d2:d0:ca:b3:b8:d1:07:bf:0e:3d:13:8a:c5: 65:d0:05:88:c0:7e:42:d4:0c:7f:10:df:98:c3:37: 4a:25:c5:8d:c0:d6:e4:2a:63:f5:05:41:10:45:df: 6b:62:7d:1b:39:3a:39:42:ef:58:3f:ac:fd:b6:c2: 70:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:61:6D:FA:8E:C7:50:0A:E1:44:69:31:73:E3:C3:24:A9:53:94:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/516d9441-73c0-35d1-af65-73c07b29f9c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:28:8a:fd:47:99:62:49:73:6f:07:37:f5:22:11:1f:7a:82: 89:fc:80:2b:6b:7a:54:21:9c:ba:c5:32:1e:02:20:09:23:88: 36:02:46:59:09:53:aa:1d:7d:56:be:d5:6d:22:d6:ce:b9:c8: fb:15:0d:75:9c:5d:03:b9:4a:65:ac:f4:c2:02:78:82:23:34: 58:db:c8:dd:08:80:ed:8d:2f:37:7c:12:e8:bf:f2:df:63:8d: 6a:d4:aa:bb:39:b4:b0:51:d5:62:44:cb:d9:33:46:cd:4e:e6: f8:9d:ca:ed:b3:0a:49:3c:2e:fd:e8:37:e1:10:31:80:be:09: cd:48:d7:a5:d8:b6:13:e2:64:5f:b3:fb:3f:81:34:3b:1e:fc: 60:d7:e0:6f:a8:5c:a8:51:dd:8d:22:0c:a3:e3:5a:18:40:9c: 6f:b9:4e:80:3a:ca:ca:49:74:17:28:31:f5:b0:88:04:4b:e2: fe:14:c5:f1:79:12:59:30:fc:f9:ab:2b:f6:4f:2e:13:94:32: 9d:44:c6:94:a6:d8:68:ec:dd:c9:04:52:04:e8:9a:4a:28:61: 50:af:7b:80:0d:6b:e5:87:c0:0a:2a:83:61:c3:c7:64:7d:8a: be:5e:65:c0:2b:85:f9:dd:9a:e4:38:0b:fb:d0:b4:9b:00:c8: 1d:b1:84:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXii8T+Imgw6HYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk NTg2YzIwZTMtOWJiYi00YTZkLTgyNDUtMmYyOGEyZWY3MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKxA5l3yi94nNBSrbivVrz+BShnXbWsIS19V PjcaUcbCViZVhja/qA5DJg2xsOnr4Fk0AhV1MOIXiXhjgfen6iypqF2w5QdDPbJC +vqRbxpxg47zzvHAFDo/GdzFgkmkb0N5SBcXrh2eGW1983NrnrUR6Z5JfkgUEv7u gSVhXRN0qkPk+FHv0nJcVxjFbhj+ZZ5FdIvXzNuHVIGsyLSiXKZn+Xbx0z+nIUBu Q98bDeIletYyOXDsk4mgPkzP/iglNqbB7tLQyrO40Qe/Dj0TisVl0AWIwH5C1Ax/ EN+YwzdKJcWNwNbkKmP1BUEQRd9rYn0bOTo5Qu9YP6z9tsJwoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNhbfqOx1AK4URpMXPjwySpU5STMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNTE2ZDk0NDEtNzNjMC0z NWQxLWFmNjUtNzNjMDdiMjlmOWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAoiv1HmWJJc28HN/UiER96gon8gCtrelQhnLrFMh4CIAkjiDYCRlkJ U6odfVa+1W0i1s65yPsVDXWcXQO5SmWs9MICeIIjNFjbyN0IgO2NLzd8Eui/8t9j jWrUqrs5tLBR1WJEy9kzRs1O5vidyu2zCkk8Lv3oN+EQMYC+Cc1I16XYthPiZF+z +z+BNDse/GDX4G+oXKhR3Y0iDKPjWhhAnG+5ToA6yspJdBcoMfWwiARL4v4UxfF5 Elkw/PmrK/ZPLhOUMp1ExpSm2Gjs3ckEUgTomkooYVCve4ANa+WHwAoqg2HDx2R9 ir5eZcArhfndmuQ4C/vQtJsAyB2xhIA= -----END CERTIFICATE-----Generated at Sat Apr 5 12:21:15 2025 by rpki-client