$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa File: e10be919-601f-3120-a397-03955d29b5b8.roa (raw, json) Hash identifier: llMLzmXm3+X5MmzHjdIaMUPnTRDZRJ6CeZWyKu4Cnc4= Subject key identifier: D6:37:8E:80:8E:72:2D:08:D3:55:38:03:43:F7:F8:70:3F:6B:A2:22 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584919417B1853784073EB3F1700 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa Signing time: Thu 06 Mar 2025 14:00:52 +0000 ROA not before: Thu 06 Mar 2025 14:00:52 +0000 ROA not after: Wed 04 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 66.81.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:19:41:7b:18:53:78:40:73:eb:3f:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Mar 6 14:00:52 2025 GMT Not After : Jun 4 13:00:52 2025 GMT Subject: CN=ee5b3577-b0a7-4b89-8982-a464701a7f0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:fd:71:78:6e:f5:02:0a:89:c7:29:c7:79:61: 87:f2:82:08:22:8d:f5:60:b7:c0:00:ff:b4:cf:d6: f2:fb:42:bf:4a:e7:7d:cd:a8:e3:52:f0:5e:69:27: 72:d3:1c:81:99:b1:dc:38:a3:9c:62:73:f9:15:d8: 2e:24:4a:b7:eb:5c:c8:70:58:e1:45:75:86:51:09: d3:f2:3a:2e:75:50:5c:e8:dc:c9:bc:eb:ba:66:a4: e1:02:28:e2:71:f7:b1:fa:ad:85:c2:62:bf:2d:75: 84:60:c3:ec:fc:e9:58:46:fa:d0:c4:47:95:ba:31: 04:76:06:d4:cc:51:f1:a8:1b:77:bf:d3:17:60:57: c4:43:59:24:ab:b1:e6:3e:93:d1:58:1b:71:f0:ad: 8b:21:78:fa:fb:f2:74:48:17:20:87:7f:1d:29:81: 2c:6e:4e:70:e7:fb:7f:7e:e8:42:16:5e:78:c4:9f: b3:76:66:f6:92:4a:9f:50:34:1f:92:2e:cc:23:d8: 87:7e:93:07:7c:b0:db:b0:9d:64:d5:eb:2d:e2:19: 54:ac:2c:63:88:83:94:40:4a:73:37:10:9d:9c:f5: 11:2e:fa:77:5e:b3:91:3c:ec:e1:f2:c0:c4:b8:ae: 31:5b:f9:92:7f:2b:ef:7d:70:a1:bf:71:3a:df:02: bd:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:37:8E:80:8E:72:2D:08:D3:55:38:03:43:F7:F8:70:3F:6B:A2:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/e10be919-601f-3120-a397-03955d29b5b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:35:04:c5:04:b3:a6:b9:13:18:9b:68:a6:97:b2:11:33:6e: 3b:f6:e1:f5:38:1d:09:16:cb:1b:82:4c:84:4d:64:8e:f7:35: 65:9f:66:fe:dd:ca:4a:b2:28:f5:7c:f4:63:ff:dc:13:87:5e: dc:72:b8:81:cc:c1:8b:85:90:fe:ed:c9:02:ff:85:35:4b:68: b9:18:fa:4b:30:6b:73:8a:fd:c1:c4:ea:a5:1d:45:00:ea:56: aa:93:7b:33:79:2b:8a:fc:33:62:19:0e:48:ed:8b:b6:47:be: 00:bc:ca:bf:74:aa:8e:de:08:ad:20:82:2d:60:48:da:2d:2e: 34:c4:6a:1e:f5:a7:8c:76:93:13:0d:08:27:a9:d5:8c:2a:9a: b2:7d:03:23:24:e1:5e:2a:98:20:04:f0:f9:0e:1b:b1:64:8b: 1b:b4:13:d1:a8:31:57:25:a0:eb:f0:94:a6:04:30:42:32:f7: f7:48:e9:6b:16:36:ce:0f:29:4a:d6:e0:6d:14:29:3e:a4:a2: 30:0a:60:c9:38:11:69:dc:18:f5:65:68:42:51:55:ff:19:b9: 09:fa:44:de:45:06:f2:62:e7:74:1c:11:16:27:30:54:58:7e: 40:c6:4e:07:ad:4c:94:5e:e9:ef:e8:ef:8f:67:04:a0:97:63: 7d:10:9d:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkZQXsYU3hAc+s/FwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDMwNjE0MDA1MloXDTI1MDYwNDEzMDA1MlowLzEtMCsGA1UEAxMk ZWU1YjM1NzctYjBhNy00Yjg5LTg5ODItYTQ2NDcwMWE3ZjBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1xeG71AgqJxynHeWGH8oIIIo31YLfAAP+0 z9by+0K/Sud9zajjUvBeaSdy0xyBmbHcOKOcYnP5FdguJEq361zIcFjhRXWGUQnT 8joudVBc6NzJvOu6ZqThAijicfex+q2FwmK/LXWEYMPs/OlYRvrQxEeVujEEdgbU zFHxqBt3v9MXYFfEQ1kkq7HmPpPRWBtx8K2LIXj6+/J0SBcgh38dKYEsbk5w5/t/ fuhCFl54xJ+zdmb2kkqfUDQfki7MI9iHfpMHfLDbsJ1k1est4hlUrCxjiIOUQEpz NxCdnPURLvp3XrORPOzh8sDEuK4xW/mSfyvvfXChv3E63wK9dwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY3joCOci0I01U4A0P3+HA/a6IiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvZTEwYmU5MTktNjAxZi0z MTIwLWEzOTctMDM5NTVkMjliNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAU1BMUEs6a5ExibaKaXshEzbjv24fU4HQkWyxuCTIRNZI73NWWfZv7d ykqyKPV89GP/3BOHXtxyuIHMwYuFkP7tyQL/hTVLaLkY+kswa3OK/cHE6qUdRQDq VqqTezN5K4r8M2IZDkjti7ZHvgC8yr90qo7eCK0ggi1gSNotLjTEah71p4x2kxMN CCep1YwqmrJ9AyMk4V4qmCAE8PkOG7Fkixu0E9GoMVcloOvwlKYEMEIy9/dI6WsW Ns4PKUrW4G0UKT6kojAKYMk4EWncGPVlaEJRVf8ZuQn6RN5FBvJi53QcERYnMFRY fkDGTgetTJRe6e/o749nBKCXY30QnUg= -----END CERTIFICATE-----Generated at Fri Mar 14 13:34:04 2025 by rpki-client