$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa File: c534c6ce-25a2-3890-9411-9deda0cc8b45.roa (raw, json) Hash identifier: ho1lVAky+sGEh+rp/LKS2r6nZ9EDPxm0D6eImKsoLBI= Subject key identifier: 2D:A9:35:2D:41:CB:CF:3C:07:0A:BB:E2:6D:44:8A:2C:12:43:AE:F4 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584909E6A31163529BAF5D1AACD0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa Signing time: Sat 01 Mar 2025 02:00:39 +0000 ROA not before: Sat 01 Mar 2025 02:00:39 +0000 ROA not after: Fri 30 May 2025 01:00:39 +0000 asID: 40627 IP address blocks: 66.81.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:09:e6:a3:11:63:52:9b:af:5d:1a:ac:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 1 02:00:39 2025 GMT Not After : May 30 01:00:39 2025 GMT Subject: CN=2b6838f2-2a72-402d-8c62-1fc5482ad8cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bf:ad:83:3e:64:d9:98:ae:63:62:05:b6:94: 77:77:53:dc:1e:ac:4c:8f:c9:aa:b5:0f:4a:93:f9: c2:e7:51:c4:da:47:5f:49:a6:e0:09:6d:47:a7:49: 83:88:2e:c0:cb:fd:26:ff:13:55:a3:45:7a:d1:3b: 09:87:df:1a:0b:8b:c3:f4:b0:75:3d:05:fb:96:0b: 3c:20:20:b7:b0:9d:c0:5a:18:ef:ac:12:fc:b7:c1: b9:d0:76:4a:82:a5:e1:25:7d:fd:0b:85:18:ff:ed: fe:a3:5d:31:35:48:69:7d:ba:1e:a3:0b:8d:ec:ea: 1b:9e:41:52:d1:19:25:a4:aa:f4:4d:79:20:a0:dc: 44:fa:e0:fd:11:87:b1:04:50:32:a8:5d:3d:a9:74: 7c:13:aa:94:08:fa:21:28:88:ad:b9:e4:c1:b4:a9: 21:7b:b7:57:71:fa:0b:a9:8f:d0:0d:6d:b2:9d:fa: 33:dd:d3:0a:6f:db:52:a1:00:92:75:a7:ad:b2:15: 50:74:ba:c0:6a:4e:63:7c:45:65:c5:82:ef:9d:08: 65:f4:a5:e5:e1:e0:83:0d:b9:f9:27:01:33:fc:01: 57:ac:3b:dd:3c:d2:86:7c:62:bb:f7:bd:f4:62:99: 9f:cf:2d:9a:34:43:ee:3f:2b:2c:07:df:3a:ec:5c: 96:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:A9:35:2D:41:CB:CF:3C:07:0A:BB:E2:6D:44:8A:2C:12:43:AE:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c534c6ce-25a2-3890-9411-9deda0cc8b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3e:c5:2f:95:4a:f0:42:41:db:7d:1e:57:82:7a:f0:b3:2d: 73:5b:08:ce:db:95:b1:ab:5a:23:83:40:cd:26:c3:e7:e0:25: a1:0b:52:8d:9a:c8:09:06:ef:79:97:80:54:1e:78:ac:b1:4f: a2:70:5a:d4:c0:5c:1b:65:ae:a8:a0:7f:ae:a3:d0:64:49:ba: 7e:1a:e1:7f:1c:c1:20:89:87:db:7a:60:c6:a3:29:67:13:49: 77:0d:10:fa:45:59:30:18:99:d2:dc:37:52:91:0d:2a:fc:83: ea:23:b4:06:5f:48:6c:cd:40:93:34:23:fa:b3:b0:9e:8c:bc: 5d:f4:23:d0:31:90:a2:31:4f:8d:49:ad:de:7e:6a:34:dc:76: 1f:90:f5:3a:5e:43:e7:ca:06:0b:94:86:bd:04:5c:a0:ed:df: a4:ae:b6:3c:33:2e:64:19:38:63:81:6f:74:c0:ca:0a:c3:27: c9:b4:45:6a:3e:96:34:de:6f:6d:f9:13:9f:16:90:02:cf:59: 77:53:24:b9:98:e2:8e:c5:32:77:6d:d0:8c:24:86:9b:8e:c9: fa:0d:6d:7c:d9:e9:b0:f4:36:48:c9:cd:98:da:31:d1:b3:82: c5:c9:f8:06:06:75:10:c6:bc:f4:ef:df:33:4c:de:eb:35:8f: da:2a:79:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkJ5qMRY1Kbr10arNAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDMwMTAyMDAzOVoXDTI1MDUzMDAxMDAzOVowLzEtMCsGA1UEAxMk MmI2ODM4ZjItMmE3Mi00MDJkLThjNjItMWZjNTQ4MmFkOGNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7+tgz5k2ZiuY2IFtpR3d1PcHqxMj8mqtQ9K k/nC51HE2kdfSabgCW1Hp0mDiC7Ay/0m/xNVo0V60TsJh98aC4vD9LB1PQX7lgs8 ICC3sJ3AWhjvrBL8t8G50HZKgqXhJX39C4UY/+3+o10xNUhpfboeowuN7OobnkFS 0RklpKr0TXkgoNxE+uD9EYexBFAyqF09qXR8E6qUCPohKIitueTBtKkhe7dXcfoL qY/QDW2ynfoz3dMKb9tSoQCSdaetshVQdLrAak5jfEVlxYLvnQhl9KXl4eCDDbn5 JwEz/AFXrDvdPNKGfGK79730Ypmfzy2aNEPuPyssB9867FyWAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC2pNS1By888Bwq74m1EiiwSQ670MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYzUzNGM2Y2UtMjVhMi0z ODkwLTk0MTEtOWRlZGEwY2M4YjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc+xS+VSvBCQdt9HleCevCzLXNbCM7blbGrWiODQM0mw+fgJaELUo2a yAkG73mXgFQeeKyxT6JwWtTAXBtlrqigf66j0GRJun4a4X8cwSCJh9t6YMajKWcT SXcNEPpFWTAYmdLcN1KRDSr8g+ojtAZfSGzNQJM0I/qzsJ6MvF30I9AxkKIxT41J rd5+ajTcdh+Q9TpeQ+fKBguUhr0EXKDt36SutjwzLmQZOGOBb3TAygrDJ8m0RWo+ ljTeb235E58WkALPWXdTJLmY4o7FMndt0IwkhpuOyfoNbXzZ6bD0NkjJzZjaMdGz gsXJ+AYGdRDGvPTv3zNM3us1j9oqebE= -----END CERTIFICATE-----Generated at Sat Apr 5 06:31:18 2025 by rpki-client