$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/ea249163-4763-355b-bc29-66594b81396f.roa File: ea249163-4763-355b-bc29-66594b81396f.roa (raw, json) Hash identifier: 0khZkHhlXmXWiYGTPowAEljP9mNKjCqsqBDwXjn7EDc= Subject key identifier: 22:9E:C7:C0:53:F8:56:6C:CA:FC:3B:71:B2:0F:44:77:52:2C:6B:89 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285848EC968996DE6104E414F53BC0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/ea249163-4763-355b-bc29-66594b81396f.roa Signing time: Tue 18 Feb 2025 14:00:52 +0000 ROA not before: Tue 18 Feb 2025 14:00:52 +0000 ROA not after: Mon 19 May 2025 13:00:52 +0000 asID: 40627 IP address blocks: 208.87.40.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ec:96:89:96:de:61:04:e4:14:f5:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Feb 18 14:00:52 2025 GMT Not After : May 19 13:00:52 2025 GMT Subject: CN=f1547816-ed53-4b81-95e2-2d0f0d859f3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:83:1b:3b:e6:e5:69:07:6b:d5:ce:e6:8e:8c: f7:18:d4:44:31:8f:29:f5:1b:65:bc:da:3c:71:3e: 44:65:1e:0a:25:7e:4a:43:2a:05:fd:89:38:96:bb: 55:ee:f3:0d:12:75:19:2c:bb:a1:5b:47:2d:41:7b: 1a:75:3b:54:70:30:26:99:a4:44:b5:10:77:b5:db: f0:46:ef:b3:02:eb:65:04:9d:b7:76:0d:6a:07:13: 57:37:75:44:f8:0b:a7:e5:22:dd:56:d8:35:51:45: a4:1b:d1:10:93:3a:06:9b:37:c9:e5:9f:b8:be:fd: c1:0b:c8:05:d3:36:13:b4:fb:03:9f:3f:37:ca:df: b0:30:56:6f:17:24:c1:f6:3e:43:12:04:4e:bf:aa: 37:a2:b0:14:3f:03:b6:52:df:f8:b3:ff:71:38:68: e6:0b:bc:d7:a1:23:dc:05:3f:e4:37:52:68:5f:52: dc:5d:17:6b:a4:42:8e:35:63:18:27:69:f6:14:0f: 0b:a3:f1:c4:b3:41:80:b5:40:08:2b:d8:b7:26:e5: 49:d1:a2:f5:9b:eb:e6:23:1b:98:b9:69:da:7e:bd: c4:e4:c0:1f:80:2f:96:ac:65:96:9f:92:26:86:d6: b8:d7:73:e9:68:d6:8f:53:24:6f:a1:cd:5a:4e:2a: 82:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:9E:C7:C0:53:F8:56:6C:CA:FC:3B:71:B2:0F:44:77:52:2C:6B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/ea249163-4763-355b-bc29-66594b81396f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 208.87.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:1a:b2:57:f2:01:39:4f:ea:a4:75:0d:c1:b8:b0:92:15:46: d8:33:13:f9:99:28:7c:f9:c4:fc:ad:28:70:0c:e7:cd:db:29: 62:8f:f9:11:a5:06:0b:b3:a3:53:87:76:3d:7c:e1:3c:a0:3d: 5c:f8:67:8a:76:4b:c5:0b:77:5f:8a:9c:85:5f:af:ee:8c:6a: 3c:15:52:65:dc:45:c8:94:20:e5:dc:84:c5:41:20:51:e7:b1: 78:a4:c4:7f:ac:bb:b2:dc:bc:a2:be:fc:55:72:bd:bd:f8:ac: 7c:70:58:e7:07:95:a9:fa:5e:e1:ad:dc:07:b7:c0:00:f1:69: 5f:8d:e2:e6:8d:29:d2:e6:16:48:26:37:63:d9:39:03:80:0e: a9:b5:4c:90:0b:f3:10:3a:90:e5:47:ce:bd:b5:7a:5d:0f:50: bb:47:2c:f1:44:cb:a8:15:56:b7:9d:4c:d9:66:d0:3c:f0:53: 18:a1:fa:8e:b5:e7:ba:2d:d9:1f:8f:be:ec:81:8d:cd:b6:93: 77:c1:ce:78:39:6a:a1:cb:2e:2e:16:54:f1:b2:03:5e:40:f2: 29:be:3a:5d:c7:33:08:21:79:e0:8b:77:df:2f:39:a6:6e:0a: 0f:2e:52:0d:e4:14:57:f3:3d:60:81:ec:d4:92:d6:09:14:63: 38:2d:5c:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslomW3mEE5BT1O8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjE1NDc4MTYtZWQ1My00YjgxLTk1ZTItMmQwZjBkODU5ZjNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIMbO+blaQdr1c7mjoz3GNREMY8p9RtlvNo8 cT5EZR4KJX5KQyoF/Yk4lrtV7vMNEnUZLLuhW0ctQXsadTtUcDAmmaREtRB3tdvw Ru+zAutlBJ23dg1qBxNXN3VE+Aun5SLdVtg1UUWkG9EQkzoGmzfJ5Z+4vv3BC8gF 0zYTtPsDnz83yt+wMFZvFyTB9j5DEgROv6o3orAUPwO2Ut/4s/9xOGjmC7zXoSPc BT/kN1JoX1LcXRdrpEKONWMYJ2n2FA8Lo/HEs0GAtUAIK9i3JuVJ0aL1m+vmIxuY uWnafr3E5MAfgC+WrGWWn5Imhta413PpaNaPUyRvoc1aTiqCqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKex8BT+FZsyvw7cbIPRHdSLGuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZWEyNDkxNjMtNDc2My0z NTViLWJjMjktNjY1OTRiODEzOTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FcoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEaslfyATlP6qR1DcG4sJIVRtgzE/mZKHz5xPytKHAM583bKWKP+RGl Bguzo1OHdj184TygPVz4Z4p2S8ULd1+KnIVfr+6MajwVUmXcRciUIOXchMVBIFHn sXikxH+su7LcvKK+/FVyvb34rHxwWOcHlan6XuGt3Ae3wADxaV+N4uaNKdLmFkgm N2PZOQOADqm1TJAL8xA6kOVHzr21el0PULtHLPFEy6gVVredTNlm0DzwUxih+o61 57ot2R+PvuyBjc22k3fBzng5aqHLLi4WVPGyA15A8im+Ol3HMwgheeCLd98vOaZu Cg8uUg3kFFfzPWCB7NSS1gkUYzgtXFU= -----END CERTIFICATE-----Generated at Sat Apr 5 06:55:07 2025 by rpki-client