$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a59820ee-058c-3b89-802e-fa9e3f0427fe.roa File: a59820ee-058c-3b89-802e-fa9e3f0427fe.roa (raw, json) Hash identifier: U/H6c93v/Gw/nT2ck1pke9WJX5hPioilT6Bwjfpbp6s= Subject key identifier: 37:30:9F:EB:3A:01:5A:B7:8E:C9:F7:C0:91:D4:12:1C:01:A6:40:83 Certificate issuer: /CN=820e56e8-763b-4037-929e-b01c8d786e75 Certificate serial: 010D0C9F4328584940394D7530158604DC3A6800 Authority key identifier: 3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a59820ee-058c-3b89-802e-fa9e3f0427fe.roa Signing time: Thu 20 Mar 2025 13:00:53 +0000 ROA not before: Thu 20 Mar 2025 13:00:53 +0000 ROA not after: Wed 18 Jun 2025 13:00:53 +0000 asID: 399275 IP address blocks: 172.81.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:40:39:4d:75:30:15:86:04:dc:3a:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=820e56e8-763b-4037-929e-b01c8d786e75 Validity Not Before: Mar 20 13:00:53 2025 GMT Not After : Jun 18 13:00:53 2025 GMT Subject: CN=8ad11ae8-627a-499f-947b-dfd94868c62a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7d:78:c1:4b:7f:2c:98:5d:04:7f:19:6f:63: ca:32:3f:40:05:e1:cb:82:b2:7c:65:98:b4:97:8f: 9e:e2:e7:5a:d7:bb:16:f4:35:6e:56:36:a0:8f:c8: be:e7:5a:9b:a8:12:48:ca:2c:2a:d4:ff:3c:8c:c7: b5:8b:0e:21:69:b6:18:49:fb:c9:8f:13:6e:fd:80: ab:3d:73:b1:cd:68:cd:25:9c:09:86:1b:2e:51:bc: 0c:6f:20:0a:43:4f:53:58:41:bd:3e:3e:3a:d9:4f: f4:c3:b6:44:ad:78:1d:43:43:41:3c:6c:48:63:53: 03:3a:77:ca:c9:e3:93:e3:bd:eb:64:26:1c:3c:c8: cc:54:1e:61:64:96:79:f3:8a:e9:f7:8d:72:78:8b: a0:b0:62:61:d8:03:78:39:f2:61:aa:dd:d8:f7:eb: a8:4d:a6:9f:24:5f:7c:f9:bc:0e:1a:02:2d:1a:93: 92:2e:dc:88:55:64:58:d6:90:8e:6e:a6:3d:0a:8a: 68:fe:a9:66:32:51:d9:78:38:c6:bb:b6:f7:fc:43: 55:0f:a3:71:f6:27:68:e5:12:99:28:e1:e9:4f:d9: 56:9f:42:fb:c6:b0:2d:45:ce:88:4f:c5:f0:b8:4a: b0:64:12:99:a5:85:9d:3a:9f:3f:5f:7e:11:d2:a2: 90:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:30:9F:EB:3A:01:5A:B7:8E:C9:F7:C0:91:D4:12:1C:01:A6:40:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/a59820ee-058c-3b89-802e-fa9e3f0427fe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75/820e56e8-763b-4037-929e-b01c8d786e75.crl X509v3 Authority Key Identifier: keyid:3F:7D:35:DE:A5:6C:DA:0E:EC:6F:18:6E:11:03:BC:6C:87:D6:D3:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/820e56e8-763b-4037-929e-b01c8d786e75.cer sbgp-ipAddrBlock: critical IPv4: 172.81.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:f8:5d:2c:33:86:3d:ab:c8:63:b1:e0:68:55:c0:d4:ce:c7: f8:43:ab:36:b8:a0:a4:fc:67:4e:a5:c5:ba:38:f1:3a:b1:ea: 49:c4:51:da:9a:11:8c:99:8d:aa:4f:61:b0:d3:c4:9f:47:ef: b4:ef:ff:dc:82:90:b2:4b:bd:b2:d3:dd:4f:a9:48:19:ec:36: 43:41:a4:f0:51:55:b8:fc:11:62:21:17:71:98:b1:cd:4b:20: 06:f5:2a:68:4f:65:02:6a:cf:f8:d0:50:ca:18:af:db:74:4e: 77:d8:c3:b6:bd:0f:26:92:04:3e:da:6b:b6:39:55:77:27:1d: 4d:3b:3c:28:db:62:fc:fb:be:43:79:5c:14:e2:52:d2:dd:0a: 6e:b8:56:51:20:9d:c8:b4:c9:53:be:6b:81:25:88:88:c2:9c: ef:d0:6e:0a:f5:7e:76:66:fc:af:40:8c:d3:d0:9e:95:af:ae: 45:25:f2:21:2e:b1:1b:e9:ed:77:9a:6b:ef:fe:ef:75:c2:47: c3:a6:be:5e:18:d6:e7:1c:a7:02:c4:b3:fb:c8:78:df:06:14: 5a:08:49:0c:fa:ae:19:15:88:41:de:ab:32:61:60:08:a3:1c: a5:d1:58:07:57:da:4a:85:be:27:eb:76:45:5c:f5:cc:ca:d3: 20:01:65:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElAOU11MBWGBNw6aAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIwZTU2ZTgtNzYzYi00MDM3LTkyOWUtYjAxYzhkNzg2 ZTc1MB4XDTI1MDMyMDEzMDA1M1oXDTI1MDYxODEzMDA1M1owLzEtMCsGA1UEAxMk OGFkMTFhZTgtNjI3YS00OTlmLTk0N2ItZGZkOTQ4NjhjNjJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm314wUt/LJhdBH8Zb2PKMj9ABeHLgrJ8ZZi0 l4+e4uda17sW9DVuVjagj8i+51qbqBJIyiwq1P88jMe1iw4habYYSfvJjxNu/YCr PXOxzWjNJZwJhhsuUbwMbyAKQ09TWEG9Pj462U/0w7ZErXgdQ0NBPGxIY1MDOnfK yeOT473rZCYcPMjMVB5hZJZ584rp941yeIugsGJh2AN4OfJhqt3Y9+uoTaafJF98 +bwOGgItGpOSLtyIVWRY1pCObqY9Copo/qlmMlHZeDjGu7b3/ENVD6Nx9ido5RKZ KOHpT9lWn0L7xrAtRc6IT8XwuEqwZBKZpYWdOp8/X34R0qKQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcwn+s6AVq3jsn3wJHUEhwBpkCDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84MjBl NTZlOC03NjNiLTQwMzctOTI5ZS1iMDFjOGQ3ODZlNzUvYTU5ODIwZWUtMDU4Yy0z Yjg5LTgwMmUtZmE5ZTNmMDQyN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODIwZTU2ZTgtNzYzYi00MDM3LTky OWUtYjAxYzhkNzg2ZTc1LzgyMGU1NmU4LTc2M2ItNDAzNy05MjllLWIwMWM4ZDc4 NmU3NS5jcmwwHwYDVR0jBBgwFoAUP3013qVs2g7sbxhuEQO8bIfW0y0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS84MjBlNTZlOC03NjNiLTQwMzctOTI5ZS1iMDFj OGQ3ODZlNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFE6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHX4XSwzhj2ryGOx4GhVwNTOx/hDqza4oKT8Z06lxbo48Tqx6knEUdqa EYyZjapPYbDTxJ9H77Tv/9yCkLJLvbLT3U+pSBnsNkNBpPBRVbj8EWIhF3GYsc1L IAb1KmhPZQJqz/jQUMoYr9t0TnfYw7a9DyaSBD7aa7Y5VXcnHU07PCjbYvz7vkN5 XBTiUtLdCm64VlEgnci0yVO+a4EliIjCnO/Qbgr1fnZm/K9AjNPQnpWvrkUl8iEu sRvp7Xeaa+/+73XCR8Omvl4Y1uccpwLEs/vIeN8GFFoISQz6rhkViEHeqzJhYAij HKXRWAdX2kqFvifrdkVc9czK0yABZWM= -----END CERTIFICATE-----Generated at Sat Apr 12 18:29:47 2025 by rpki-client