$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa File: c1ec8d09-5670-3d88-8368-60f557c12759.roa (raw, json) Hash identifier: 3VvuQTdpbkNEtTbv6rsPhRscpHNMPP/I4e80rnztkCc= Subject key identifier: 1B:CD:94:DF:3A:7C:D7:EC:86:ED:DA:FF:5D:C0:AD:B0:83:FC:4D:95 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584949FE8CCEEF61F86415295C40 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa Signing time: Mon 24 Mar 2025 01:00:38 +0000 ROA not before: Mon 24 Mar 2025 01:00:38 +0000 ROA not after: Sun 22 Jun 2025 01:00:38 +0000 asID: 13335 IP address blocks: 66.81.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:49:fe:8c:ce:ef:61:f8:64:15:29:5c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 24 01:00:38 2025 GMT Not After : Jun 22 01:00:38 2025 GMT Subject: CN=ee977b10-b7b9-42b6-bc38-a9b22cab417d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ae:ac:8e:e0:f7:0a:23:e9:96:68:ee:f8:61: 7d:83:30:e9:41:4a:a5:c2:6d:18:62:15:37:65:0a: 97:be:c4:00:66:bd:51:a3:b3:c4:22:8f:5b:84:df: 75:3f:89:05:57:9d:a4:d8:24:0c:61:64:5c:c6:76: 94:f2:bc:24:5b:d4:b1:b7:0a:51:81:9d:23:42:27: 84:4e:a9:13:8e:dc:bc:4a:80:b0:e9:e7:dc:cc:70: 25:da:dc:00:cf:99:26:96:48:8f:0e:1e:e9:2a:0b: 73:4a:ae:a9:c6:4a:7b:80:a6:c8:94:74:2c:e4:b2: d8:48:a1:a3:ec:c4:64:e8:00:66:64:d6:5b:ad:4f: cd:bf:57:ad:69:23:ae:6a:0b:8a:ca:d6:1a:45:15: be:05:4f:9e:98:7e:89:31:92:d0:47:ab:90:3e:b6: 03:68:9b:01:af:de:b2:cd:ee:29:fc:de:2c:91:4d: 40:5f:0e:ba:b8:ad:ad:5f:ec:dc:83:05:af:6a:7c: 08:af:10:89:2f:b9:eb:04:b5:f8:a1:1c:ca:2f:b2: 77:7c:65:e2:e6:24:8b:82:12:b6:11:c3:41:69:f3: aa:54:ab:70:8f:77:4c:64:f9:1f:14:29:8e:9d:39: 00:b1:78:67:7e:3a:5a:99:af:57:57:eb:74:ef:21: 5f:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:94:DF:3A:7C:D7:EC:86:ED:DA:FF:5D:C0:AD:B0:83:FC:4D:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/c1ec8d09-5670-3d88-8368-60f557c12759.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:7a:04:e3:79:12:c7:22:57:1d:b9:bc:d7:df:a3:d5:35:b8: 96:ca:38:c3:c9:23:47:bb:d5:92:d4:5a:90:f3:53:80:1f:b8: 65:9a:d8:9e:5c:c0:d8:18:d4:d5:bb:72:76:1c:e0:b5:2d:72: ba:b1:20:fd:b0:ab:6a:3e:86:0e:57:eb:b2:8b:6d:7a:b8:3f: 14:ca:07:91:97:a2:ed:a3:28:35:c2:1c:77:57:75:74:e2:2f: a2:2b:db:3f:d6:5b:df:fe:e2:de:55:3f:9c:8a:5f:3b:f3:a1: bb:41:a5:24:69:6d:74:17:6c:85:6c:d8:b4:b3:e4:4f:85:50: 03:78:2d:09:4d:63:e3:75:5b:18:93:15:c1:55:99:82:31:a3: db:07:98:c5:80:5b:4b:e3:0d:15:eb:a2:46:8e:e6:0e:26:3c: fa:c5:53:f0:07:82:33:c5:c2:d2:75:87:2a:5c:7d:98:f3:24: 69:09:77:df:fa:77:49:05:ce:3a:a7:82:ee:7f:8d:93:d2:c5: 89:78:00:8c:4c:0f:f0:f8:6b:4a:09:b1:c4:5e:c5:61:e5:56: 91:25:bf:a1:81:0e:09:52:71:70:2b:f5:a9:f1:66:45:2d:7f: be:b0:50:15:32:cf:21:38:59:98:de:d8:93:a6:2a:bf:d9:22: ae:02:e5:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElJ/ozO72H4ZBUpXEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDMyNDAxMDAzOFoXDTI1MDYyMjAxMDAzOFowLzEtMCsGA1UEAxMk ZWU5NzdiMTAtYjdiOS00MmI2LWJjMzgtYTliMjJjYWI0MTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtK6sjuD3CiPplmju+GF9gzDpQUqlwm0YYhU3 ZQqXvsQAZr1Ro7PEIo9bhN91P4kFV52k2CQMYWRcxnaU8rwkW9SxtwpRgZ0jQieE TqkTjty8SoCw6efczHAl2twAz5kmlkiPDh7pKgtzSq6pxkp7gKbIlHQs5LLYSKGj 7MRk6ABmZNZbrU/Nv1etaSOuaguKytYaRRW+BU+emH6JMZLQR6uQPrYDaJsBr96y ze4p/N4skU1AXw66uK2tX+zcgwWvanwIrxCJL7nrBLX4oRzKL7J3fGXi5iSLghK2 EcNBafOqVKtwj3dMZPkfFCmOnTkAsXhnfjpama9XV+t07yFf7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBvNlN86fNfshu3a/13ArbCD/E2VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYzFlYzhkMDktNTY3MC0z ZDg4LTgzNjgtNjBmNTU3YzEyNzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAId6BON5EsciVx25vNffo9U1uJbKOMPJI0e71ZLUWpDzU4AfuGWa2J5c wNgY1NW7cnYc4LUtcrqxIP2wq2o+hg5X67KLbXq4PxTKB5GXou2jKDXCHHdXdXTi L6Ir2z/WW9/+4t5VP5yKXzvzobtBpSRpbXQXbIVs2LSz5E+FUAN4LQlNY+N1WxiT FcFVmYIxo9sHmMWAW0vjDRXrokaO5g4mPPrFU/AHgjPFwtJ1hypcfZjzJGkJd9/6 d0kFzjqngu5/jZPSxYl4AIxMD/D4a0oJscRexWHlVpElv6GBDglScXAr9anxZkUt f76wUBUyzyE4WZje2JOmKr/ZIq4C5WI= -----END CERTIFICATE-----Generated at Sat Apr 5 13:14:13 2025 by rpki-client