$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa File: 3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa (raw, json) Hash identifier: jGdQtJvZbX+fFTh8+TZWAUDz0C4NJZIexXT5th7hHfg= Subject key identifier: 7C:59:DA:5F:7E:59:AD:56:F8:89:B1:74:4E:30:D1:B0:25:07:91:34 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285848DA70FD19D49CF6B542DA1640 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 33724 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:fd:19:d4:9c:f6:b5:42:da:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=424a1e91-d6cf-44dc-bc4c-a4531e04e68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:63:de:65:d7:60:65:fc:64:df:90:3b:ad:70: 8d:d0:dc:9f:92:0d:a0:26:dd:4c:00:ad:c1:ce:09: 2b:18:a0:8f:32:6f:da:34:e4:d2:a6:4b:22:d4:4d: dc:66:d1:2c:d1:77:8a:cc:82:06:c9:80:d3:2f:ce: 9c:e6:ed:e1:ba:3a:9e:12:21:48:ff:f9:b7:94:58: 71:25:b9:db:63:02:eb:b1:e9:30:bb:bd:28:33:c8: 4f:a2:59:08:40:63:5d:93:32:8d:5a:d2:73:04:3a: 51:8d:5e:4e:49:2b:b0:05:8a:93:4a:5a:8c:18:0e: f6:14:83:29:b9:64:90:98:80:da:5c:c3:88:66:af: 6f:6e:76:68:97:b3:5f:41:c3:34:f1:ce:26:9b:6f: c8:40:7e:0e:d0:92:62:05:08:4c:6b:51:b8:6d:25: 96:d5:91:8c:06:15:33:34:23:cb:2c:78:b2:4b:d6: 06:f5:d9:45:86:ca:ef:90:50:2c:27:ab:c6:1b:02: 90:ec:37:46:b5:6f:b0:4a:46:06:9c:fb:ea:37:d3: 67:e5:64:53:53:ae:02:07:32:f4:d6:8c:59:41:12: 27:d7:57:cc:88:b2:eb:d6:18:03:02:01:ea:96:dc: 2f:b7:5a:92:74:d5:ac:fe:9a:0f:9a:b6:9a:29:49: fb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:59:DA:5F:7E:59:AD:56:F8:89:B1:74:4E:30:D1:B0:25:07:91:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:0e:a0:ee:80:c6:14:96:31:27:6e:fa:f4:5c:75:5a:b7:43: 49:21:3b:c3:64:c6:be:e6:e7:e8:d8:af:85:7d:7c:3d:ab:30: 7e:26:94:0b:b3:d7:e1:ea:1f:ef:29:25:51:59:29:3e:64:39: 70:57:10:6d:d3:82:c0:3b:5a:15:4b:0d:79:77:bf:4b:b6:d5: 37:e2:3a:53:95:62:66:4e:3a:8e:4a:7a:fe:d5:f1:d2:df:ed: 6a:68:eb:26:83:42:95:83:b5:43:7d:17:1c:e3:4d:2f:9f:e5: 43:91:0f:73:e1:f0:0f:25:02:00:d1:55:f2:9c:f4:f8:94:e2: 26:18:21:bd:d0:5b:8c:86:34:14:35:40:32:53:67:3f:13:e4: c7:11:29:4b:84:23:b3:31:1d:9d:89:be:54:da:1b:af:cc:11: 5a:10:54:46:5b:85:87:d5:47:86:2b:a3:b9:08:81:12:8f:49: 36:46:d7:68:6f:be:4e:f9:91:4c:d5:97:34:ce:af:8f:f1:0c: d1:00:45:1c:2d:77:6f:6f:43:b2:68:b7:f9:aa:bc:28:b2:bd: 1f:b9:c3:c6:27:06:10:5c:6f:f2:57:ea:1c:d4:6a:12:ca:29: 5d:fd:eb:d8:dc:0e:f8:af:a9:0c:e5:ff:75:07:cb:b6:96:4f: 5c:f5:4d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacP0Z1Jz2tULaFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk NDI0YTFlOTEtZDZjZi00NGRjLWJjNGMtYTQ1MzFlMDRlNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2PeZddgZfxk35A7rXCN0Nyfkg2gJt1MAK3B zgkrGKCPMm/aNOTSpksi1E3cZtEs0XeKzIIGyYDTL86c5u3hujqeEiFI//m3lFhx JbnbYwLrsekwu70oM8hPolkIQGNdkzKNWtJzBDpRjV5OSSuwBYqTSlqMGA72FIMp uWSQmIDaXMOIZq9vbnZol7NfQcM08c4mm2/IQH4O0JJiBQhMa1G4bSWW1ZGMBhUz NCPLLHiyS9YG9dlFhsrvkFAsJ6vGGwKQ7DdGtW+wSkYGnPvqN9Nn5WRTU64CBzL0 1oxZQRIn11fMiLLr1hgDAgHqltwvt1qSdNWs/poPmraaKUn7nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHxZ2l9+Wa1W+ImxdE4w0bAlB5E0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvM2I3YTBlMTctZjZmOS0z ZmI5LTk4NzktZmU4OTA2YzRmMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAOoO6AxhSWMSdu+vRcdVq3Q0khO8Nkxr7m5+jYr4V9fD2rMH4mlAuz 1+HqH+8pJVFZKT5kOXBXEG3TgsA7WhVLDXl3v0u21TfiOlOVYmZOOo5Kev7V8dLf 7Wpo6yaDQpWDtUN9FxzjTS+f5UORD3Ph8A8lAgDRVfKc9PiU4iYYIb3QW4yGNBQ1 QDJTZz8T5McRKUuEI7MxHZ2JvlTaG6/MEVoQVEZbhYfVR4Yro7kIgRKPSTZG12hv vk75kUzVlzTOr4/xDNEARRwtd29vQ7Jot/mqvCiyvR+5w8YnBhBcb/JX6hzUahLK KV3969jcDvivqQzl/3UHy7aWT1z1TUs= -----END CERTIFICATE-----Generated at Mon Apr 7 13:11:47 2025 by rpki-client