$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa File: 894a95d5-8d7e-324f-86dc-996779abcf7f.roa (raw, json) Hash identifier: xJuIMm4V0Cyys324NLJMmBRkUlQKyf/OR+9Wzu6Ku4o= Subject key identifier: E2:92:6D:8B:1E:78:5F:AD:E6:72:58:CD:9C:70:63:07:2C:33:08:A2 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F432858486C2B09415D3583BD7256C880 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa Signing time: Fri 03 Jan 2025 14:00:51 +0000 ROA not before: Fri 03 Jan 2025 14:00:51 +0000 ROA not after: Thu 03 Apr 2025 13:00:51 +0000 asID: 209242 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:6c:2b:09:41:5d:35:83:bd:72:56:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jan 3 14:00:51 2025 GMT Not After : Apr 3 13:00:51 2025 GMT Subject: CN=d87130ea-7bfe-428b-b7ff-eac24c4119bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:c5:67:39:a0:f1:be:d5:1d:5a:f6:2d:8f: bf:23:a8:2f:cd:cc:5a:46:8a:29:32:da:cb:b9:0c: 65:78:d2:ab:31:d2:80:9c:7d:0f:29:97:5f:b8:8f: e1:7f:be:dd:3f:a8:78:6a:52:19:45:d3:14:3b:83: cc:dc:2c:b4:f8:75:e6:4f:03:22:e5:04:79:e2:d7: 41:d9:18:da:82:5a:09:9d:31:8f:f4:b0:19:c3:63: b9:70:b4:95:d3:b4:33:8f:04:c7:7e:a0:0d:85:e1: 81:4e:bc:06:8b:65:1a:66:de:a0:0b:b4:73:01:05: b0:5a:36:b1:5c:fb:b7:30:79:40:d3:02:e2:19:2e: 94:9f:c9:d1:6e:3d:a0:58:a0:a4:bf:91:5c:61:72: 34:2f:65:b6:47:fb:47:7c:87:57:05:73:ee:be:ad: 1e:fb:c4:d8:75:5d:98:ce:c2:e5:c7:42:c8:d2:7e: cd:68:14:63:77:69:b5:29:15:c3:43:c8:77:65:c8: e4:6c:5f:b3:be:67:d4:8a:36:31:f0:e1:1b:cb:d9: 1c:53:fa:28:f6:08:03:8d:9d:86:89:82:85:7a:e7: 1e:9b:68:52:02:07:2c:20:8c:45:53:1d:0b:bc:3b: d4:21:be:be:b9:b7:03:b5:cd:13:4f:53:f1:f4:9b: b7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:92:6D:8B:1E:78:5F:AD:E6:72:58:CD:9C:70:63:07:2C:33:08:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/894a95d5-8d7e-324f-86dc-996779abcf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:cd:15:a7:40:d7:c5:24:73:26:5b:63:4e:73:34:6b:d5:84: bb:83:29:b4:02:5b:f9:d4:2a:b3:4a:0d:97:09:4d:c1:f5:e7: 36:41:54:01:05:71:92:37:ce:c2:e9:46:0b:13:33:15:e9:2f: 62:61:17:b0:ac:a7:4c:94:36:a7:da:f2:6c:db:96:b3:86:86: 2b:1b:6a:aa:58:ad:28:59:9a:ad:a4:15:4e:95:0a:3d:69:aa: a4:15:79:c9:b2:c3:b8:ff:2c:ec:a4:eb:5e:fe:43:17:36:7f: c5:dc:11:06:5f:0b:1a:73:65:11:b3:9a:80:dc:4b:a0:11:e4: 3b:22:3a:26:9e:13:d3:30:20:09:5e:c8:32:57:68:e3:d6:0a: 79:b9:51:94:c6:e5:0b:39:18:45:f9:06:dc:93:a5:72:e9:a5: 0c:7b:99:71:b1:8d:c0:9a:63:53:8a:ff:09:46:3e:77:08:87: 73:18:7a:a6:ee:70:c9:c3:31:b6:f8:f1:e6:c9:ee:35:fb:10: 31:d7:f5:38:31:a1:55:38:be:bc:d6:7f:eb:83:c5:0f:d7:06: 50:99:5b:27:ce:97:f1:0c:2d:dd:ee:87:e4:d4:6a:b4:dd:3a: c5:b6:ba:06:df:a1:f3:c6:63:71:12:00:a4:38:db:43:0a:b1: ae:f5:d9:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhsKwlBXTWDvXJWyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDEwMzE0MDA1MVoXDTI1MDQwMzEzMDA1MVowLzEtMCsGA1UEAxMk ZDg3MTMwZWEtN2JmZS00MjhiLWI3ZmYtZWFjMjRjNDExOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxnFZzmg8b7VHVr2LY+/I6gvzcxaRoopMtrL uQxleNKrMdKAnH0PKZdfuI/hf77dP6h4alIZRdMUO4PM3Cy0+HXmTwMi5QR54tdB 2RjagloJnTGP9LAZw2O5cLSV07QzjwTHfqANheGBTrwGi2UaZt6gC7RzAQWwWjax XPu3MHlA0wLiGS6Un8nRbj2gWKCkv5FcYXI0L2W2R/tHfIdXBXPuvq0e+8TYdV2Y zsLlx0LI0n7NaBRjd2m1KRXDQ8h3ZcjkbF+zvmfUijYx8OEby9kcU/oo9ggDjZ2G iYKFeucem2hSAgcsIIxFUx0LvDvUIb6+ubcDtc0TT1Px9Ju3FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKSbYseeF+t5nJYzZxwYwcsMwiiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvODk0YTk1ZDUtOGQ3ZS0z MjRmLTg2ZGMtOTk2Nzc5YWJjZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABTNFadA18UkcyZbY05zNGvVhLuDKbQCW/nUKrNKDZcJTcH15zZBVAEF cZI3zsLpRgsTMxXpL2JhF7Csp0yUNqfa8mzblrOGhisbaqpYrShZmq2kFU6VCj1p qqQVecmyw7j/LOyk617+Qxc2f8XcEQZfCxpzZRGzmoDcS6AR5DsiOiaeE9MwIAle yDJXaOPWCnm5UZTG5Qs5GEX5BtyTpXLppQx7mXGxjcCaY1OK/wlGPncIh3MYeqbu cMnDMbb48ebJ7jX7EDHX9TgxoVU4vrzWf+uDxQ/XBlCZWyfOl/EMLd3uh+TUarTd OsW2ugbfofPGY3ESAKQ420MKsa712Ss= -----END CERTIFICATE-----Generated at Fri Mar 14 11:19:46 2025 by rpki-client