$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa File: ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa (raw, json) Hash identifier: RbnM4IBWdacXnWCczfDXZZRWWesGu9akFvfwY2YGxmQ= Subject key identifier: 01:6E:58:F8:18:F0:A8:D7:73:76:01:66:4C:11:37:6F:02:4F:1D:5D Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285848C41B7F2BA63F6559708C1A80 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa Signing time: Tue 04 Feb 2025 02:00:40 +0000 ROA not before: Tue 04 Feb 2025 02:00:40 +0000 ROA not after: Mon 05 May 2025 01:00:40 +0000 asID: 394002 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 09 Apr 2025 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c4:1b:7f:2b:a6:3f:65:59:70:8c:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Feb 4 02:00:40 2025 GMT Not After : May 5 01:00:40 2025 GMT Subject: CN=f5ffba43-9b27-4621-a212-9df02d87e302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:af:70:6d:62:e5:0f:c7:0d:e1:7a:73:b9:ea: 68:69:54:a3:fa:c3:f3:8a:23:86:a0:e5:c5:00:13: 83:36:d0:6d:95:a1:38:91:53:e7:57:8d:1f:5e:ea: f4:fd:f2:2c:67:21:c8:2a:72:5b:48:46:47:d4:66: 75:1b:26:0f:e3:f5:cf:a0:ed:63:04:b4:54:fe:9e: f9:3c:9a:41:6d:11:1c:0a:21:91:20:ff:21:a3:ee: 94:30:97:29:2f:61:4c:85:c9:56:de:bf:97:b7:1c: 8d:4f:43:b3:f4:65:85:37:69:4b:d6:a0:33:4b:76: 78:2c:7d:e9:3f:8f:71:8f:6c:c6:87:6c:85:8f:32: 25:72:0e:68:73:ea:d1:39:2e:a5:14:92:8e:29:83: 50:a1:d5:48:36:dd:10:06:bc:0d:c9:df:99:5a:a6: ae:e5:30:7d:6f:74:9d:0d:ad:41:e7:cc:9f:23:42: 2e:06:3f:69:bb:d7:b2:66:84:09:33:61:50:43:57: 9c:43:e7:38:57:04:90:2c:51:c1:79:81:9b:3b:43: 3e:29:42:2d:c8:f7:f3:2a:9f:0c:3b:f1:0c:03:e8: 0a:68:c9:83:09:97:7c:dd:83:f0:0f:76:ef:0b:ee: 42:0f:07:90:27:fe:92:f5:85:b7:54:0b:a4:db:e1: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:6E:58:F8:18:F0:A8:D7:73:76:01:66:4C:11:37:6F:02:4F:1D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ca275b50-336a-3ab0-a0fa-3411ed48ee7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:1d:f7:9b:33:e8:dc:65:4b:c3:54:29:22:c1:0d:69:19:af: 37:b0:cf:af:34:2f:d6:65:f9:58:37:ce:b9:01:4e:be:df:d9: d3:df:fd:8b:a9:78:5d:86:44:d2:c2:f8:a1:64:a5:eb:53:bf: e9:75:49:68:e3:b0:c0:7b:19:33:2f:d4:42:f5:e2:dc:9f:9e: ba:df:49:37:4c:77:60:8e:40:28:72:09:b6:6a:fa:f4:cd:d7: 52:6a:92:2f:a6:31:dc:36:d3:23:bc:18:17:54:48:2e:20:d1: 8b:9c:ad:c9:37:bb:4a:e3:f5:2a:34:6d:4a:44:31:ee:af:ad: 73:1d:e5:68:81:fb:39:50:22:6e:7e:9c:95:ef:b8:08:2d:03: e6:a6:7c:87:dd:7b:ed:d9:ae:0b:18:47:d3:a8:7f:68:65:cf: 18:d5:ca:f3:a6:93:20:e2:15:0f:5a:f6:7c:40:c5:af:42:d1: da:c3:a2:c8:fe:bc:81:0a:c6:ea:11:5b:69:67:01:d1:07:03: c2:64:ef:98:e5:d2:35:d1:8e:bc:b8:18:9b:83:13:5d:77:cf: 50:1c:ab:2c:c6:80:f2:86:1b:b0:0a:e8:a9:33:ba:ba:61:46: e4:fc:21:91:a1:4c:7f:45:3c:89:8f:ee:8e:5f:2d:4c:29:b2: 54:aa:e8:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjEG38rpj9lWXCMGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDIwNDAyMDA0MFoXDTI1MDUwNTAxMDA0MFowLzEtMCsGA1UEAxMk ZjVmZmJhNDMtOWIyNy00NjIxLWEyMTItOWRmMDJkODdlMzAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl69wbWLlD8cN4XpzuepoaVSj+sPziiOGoOXF ABODNtBtlaE4kVPnV40fXur0/fIsZyHIKnJbSEZH1GZ1GyYP4/XPoO1jBLRU/p75 PJpBbREcCiGRIP8ho+6UMJcpL2FMhclW3r+XtxyNT0Oz9GWFN2lL1qAzS3Z4LH3p P49xj2zGh2yFjzIlcg5oc+rROS6lFJKOKYNQodVINt0QBrwNyd+ZWqau5TB9b3Sd Da1B58yfI0IuBj9pu9eyZoQJM2FQQ1ecQ+c4VwSQLFHBeYGbO0M+KUItyPfzKp8M O/EMA+gKaMmDCZd83YPwD3bvC+5CDweQJ/6S9YW3VAuk2+G+nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFuWPgY8KjXc3YBZkwRN28CTx1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2EyNzViNTAtMzM2YS0z YWIwLWEwZmEtMzQxMWVkNDhlZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQd95sz6NxlS8NUKSLBDWkZrzewz680L9Zl+Vg3zrkBTr7f2dPf/Yup eF2GRNLC+KFkpetTv+l1SWjjsMB7GTMv1EL14tyfnrrfSTdMd2COQChyCbZq+vTN 11Jqki+mMdw20yO8GBdUSC4g0Yucrck3u0rj9So0bUpEMe6vrXMd5WiB+zlQIm5+ nJXvuAgtA+amfIfde+3ZrgsYR9Oof2hlzxjVyvOmkyDiFQ9a9nxAxa9C0drDosj+ vIEKxuoRW2lnAdEHA8Jk75jl0jXRjry4GJuDE113z1AcqyzGgPKGG7AK6Kkzurph RuT8IZGhTH9FPImP7o5fLUwpslSq6Bk= -----END CERTIFICATE-----Generated at Tue Apr 8 11:08:44 2025 by rpki-client