$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa File: 2590657a-d799-3169-b7a8-d40b15429e02.roa (raw, json) Hash identifier: x2isUV4KdeEDD/Ob8W4RUHiYHcCz+1WqMdRrHq7R3+Y= Subject key identifier: B9:58:45:9C:3F:0A:BC:C7:96:F4:BC:B7:96:D8:CF:44:8B:06:54:FF Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F432858457083034EB4ADDC607AED6280 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa Signing time: Fri 05 Apr 2024 01:00:28 +0000 ROA not before: Fri 05 Apr 2024 01:00:28 +0000 ROA not after: Thu 04 Jul 2024 01:00:28 +0000 asID: 40627 IP address blocks: 66.81.240.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 May 2024 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:70:83:03:4e:b4:ad:dc:60:7a:ed:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Apr 5 01:00:28 2024 GMT Not After : Jul 4 01:00:28 2024 GMT Subject: CN=1afa3fe3-86f8-4869-8637-077cc6345cb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5a:d7:38:4b:d4:e4:7c:57:eb:d5:5c:12:6f: f4:cf:4b:6b:64:6d:db:3f:ee:43:a6:af:cb:19:d2: af:e4:0b:48:46:da:80:8d:e0:b6:a0:b9:88:22:af: 24:4c:32:3c:27:c6:b3:be:59:a0:98:78:59:11:a6: 14:7f:31:c7:b2:3c:73:22:68:2f:c6:ba:1c:5e:a5: fa:74:62:5e:7f:b1:be:bb:f2:98:c9:ac:87:c9:6c: 67:59:11:7e:b5:f0:24:0e:bd:74:4c:bc:51:30:a4: 80:a1:96:8a:4f:5b:28:e3:fb:10:5e:77:36:33:2f: 42:99:43:a8:15:e0:8b:a0:70:ce:66:ac:31:59:59: f9:3d:13:5b:9e:45:92:72:c9:80:69:58:59:c8:43: 71:c9:b9:a9:9f:8c:b8:98:a8:ba:03:23:de:2e:59: ef:1d:a3:bc:3f:39:33:90:b2:3c:06:3b:dd:7c:af: a1:59:7f:06:dd:ab:96:82:a4:8f:c6:78:27:33:c9: 3d:db:17:6d:e0:4e:25:5c:d4:f3:38:35:ee:af:38: e7:45:fa:18:ee:3d:b1:2f:9b:79:69:96:62:b5:95: b1:c3:13:1c:52:99:28:e2:a5:04:13:b0:72:02:72: 6a:f2:a3:1e:7e:6f:be:10:0e:11:11:28:d1:b2:2e: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:58:45:9C:3F:0A:BC:C7:96:F4:BC:B7:96:D8:CF:44:8B:06:54:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/2590657a-d799-3169-b7a8-d40b15429e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:09:6d:43:33:a4:44:cf:e8:19:3b:3b:34:08:f3:c7:ea:09: f8:dc:e9:73:41:91:1c:8c:a6:c6:b0:1d:e6:f1:12:62:76:c4: 30:9a:be:b8:07:71:e8:01:fc:89:93:b8:74:2a:62:70:5a:2f: a2:83:45:11:5c:66:92:cb:89:92:c4:61:ed:a9:66:22:c2:b6: 68:ed:ee:5e:56:2b:26:db:5a:7d:32:ab:d3:01:3f:94:2c:bc: 39:58:2b:51:36:24:ad:2c:fd:f7:cd:ab:97:de:7e:8d:e1:a7: b6:05:f0:ec:9d:78:6e:93:2d:e7:33:bc:93:9e:26:2f:bc:61: c7:02:40:26:ec:35:17:e5:e9:1c:92:84:9d:7e:24:d3:9a:da: c9:f9:b8:97:c8:61:31:40:ed:01:fa:b7:37:87:92:6e:71:e4: b1:66:31:59:25:de:2d:4c:19:14:41:59:d3:d4:24:e5:59:99: e0:69:37:5d:24:20:aa:08:57:9f:8f:e2:85:3b:ca:bf:e3:53: e9:76:ec:b5:d3:15:1e:f9:2a:17:3c:50:87:1b:a7:7e:a9:52: 28:aa:22:59:94:50:9d:af:7c:9f:91:9e:29:96:3c:42:7c:5e: 79:4e:36:67:d6:32:ab:1e:1f:24:44:79:46:2b:49:7a:bf:c5: f1:3b:af:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEVwgwNOtK3cYHrtYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI0MDQwNTAxMDAyOFoXDTI0MDcwNDAxMDAyOFowLzEtMCsGA1UEAxMk MWFmYTNmZTMtODZmOC00ODY5LTg2MzctMDc3Y2M2MzQ1Y2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlrXOEvU5HxX69VcEm/0z0trZG3bP+5Dpq/L GdKv5AtIRtqAjeC2oLmIIq8kTDI8J8azvlmgmHhZEaYUfzHHsjxzImgvxrocXqX6 dGJef7G+u/KYyayHyWxnWRF+tfAkDr10TLxRMKSAoZaKT1so4/sQXnc2My9CmUOo FeCLoHDOZqwxWVn5PRNbnkWScsmAaVhZyENxybmpn4y4mKi6AyPeLlnvHaO8Pzkz kLI8BjvdfK+hWX8G3auWgqSPxngnM8k92xdt4E4lXNTzODXurzjnRfoY7j2xL5t5 aZZitZWxwxMcUpko4qUEE7ByAnJq8qMefm++EA4RESjRsi4a5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlYRZw/CrzHlvS8t5bYz0SLBlT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMjU5MDY1N2EtZDc5OS0z MTY5LWI3YTgtZDQwYjE1NDI5ZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQlHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMJbUMzpETP6Bk7OzQI88fqCfjc6XNBkRyMpsawHebxEmJ2xDCavrgH cegB/ImTuHQqYnBaL6KDRRFcZpLLiZLEYe2pZiLCtmjt7l5WKybbWn0yq9MBP5Qs vDlYK1E2JK0s/ffNq5fefo3hp7YF8OydeG6TLeczvJOeJi+8YccCQCbsNRfl6RyS hJ1+JNOa2sn5uJfIYTFA7QH6tzeHkm5x5LFmMVkl3i1MGRRBWdPUJOVZmeBpN10k IKoIV5+P4oU7yr/jU+l27LXTFR75Khc8UIcbp36pUiiqIlmUUJ2vfJ+RnimWPEJ8 XnlONmfWMqseHyREeUYrSXq/xfE7r4k= -----END CERTIFICATE-----Generated at Sun May 12 15:03:55 2024 by rpki-client on console-fra.rpki-client.org