$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa File: 3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa (raw, json) Hash identifier: mYRWw0JfiJCcfJl/V4GrtCuxQBr3hchOAZqCqQTPCvM= Subject key identifier: 63:6A:C9:34:AB:FF:70:4B:F4:55:10:8E:6C:9C:26:FE:A8:11:AD:20 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F43285849B9AA060E49FA2DDC8AF8FE00 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa Signing time: Sat 03 May 2025 01:00:47 +0000 ROA not before: Sat 03 May 2025 01:00:47 +0000 ROA not after: Fri 01 Aug 2025 01:00:47 +0000 asID: 33724 IP address blocks: 66.85.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b9:aa:06:0e:49:fa:2d:dc:8a:f8:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: May 3 01:00:47 2025 GMT Not After : Aug 1 01:00:47 2025 GMT Subject: CN=77941dc0-c2b9-47f1-81ac-a23e5dd1ae0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:35:b2:9e:8f:05:28:fa:d3:8f:1f:ee:be:5b: c1:ce:83:9f:06:cf:68:84:6b:40:fd:2d:4e:72:47: b5:f5:15:4e:b5:32:8e:ab:6c:04:05:ae:a5:76:05: 77:a4:80:48:77:2b:ea:e3:70:1d:48:81:2c:43:8c: 41:d6:18:59:42:21:bb:d6:0b:8e:3f:d2:c0:52:65: 58:7d:d2:99:33:28:42:8f:aa:ce:a1:a7:5e:04:e5: ef:bd:bc:62:77:e2:c2:12:7a:cb:29:e8:89:74:af: 00:a1:17:0b:ce:f5:52:56:5f:2b:48:b8:46:89:08: 2f:28:35:42:e9:67:f9:ae:cc:ac:1b:d1:f8:bd:ca: b5:9c:fe:67:9c:fb:5d:37:02:de:08:19:de:31:6d: 9b:56:b9:a6:99:cc:fb:ce:76:e5:2c:4c:99:ff:20: 30:84:62:68:c0:e7:19:bd:d0:cf:ef:a8:cf:35:1a: 40:32:56:9a:b0:64:c7:e6:14:69:d0:4c:29:f9:a4: bc:bc:de:b1:6f:93:d2:e4:cf:ea:92:a5:25:6e:41: e1:01:2e:f2:ad:62:74:10:c2:cf:4d:19:a6:fd:c2: fd:df:28:98:92:f0:15:21:6e:54:4f:4e:46:10:08: ab:a5:c2:4f:33:f4:08:db:a7:06:af:99:ee:6a:33: 7e:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:6A:C9:34:AB:FF:70:4B:F4:55:10:8E:6C:9C:26:FE:A8:11:AD:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/3b7a0e17-f6f9-3fb9-9879-fe8906c4f126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 66.85.13.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:14:da:ed:55:10:8f:72:71:06:95:b3:bb:4f:82:9e:ae:c3: 3a:58:94:d5:67:71:90:b1:f8:42:9b:1b:87:52:ed:19:c2:ed: c1:2f:65:b9:4b:e2:43:cd:9e:66:0d:6d:03:e8:d6:3c:ff:b3: 4a:df:dd:4b:2b:92:8b:81:70:1d:5e:1a:a3:bb:d0:de:4e:68: e0:90:6a:19:0e:0e:37:5c:ad:12:5c:2b:a3:1e:e0:7d:fb:f3: 64:74:a4:92:5d:56:a9:31:e3:f8:dd:39:7e:cb:51:cb:3e:37: ad:4a:fc:b1:ab:fd:91:56:c7:10:4a:14:55:41:20:ab:32:74: 67:80:92:b1:36:1a:80:52:d3:32:67:06:63:1e:22:64:7f:e8: 05:16:c6:c0:44:e3:58:44:22:de:b4:23:95:0d:78:6f:e3:8c: ea:4f:da:72:f3:dd:65:ac:72:dc:2d:77:97:35:2d:ca:6d:67: a7:de:80:1b:5f:0d:7d:e3:aa:2e:36:74:e3:36:66:77:d0:26: e1:05:2b:81:a7:75:22:09:43:ea:d3:60:e5:11:78:71:8a:97: 5d:c5:57:5e:47:01:08:15:b8:1e:ce:d7:b3:96:fa:fc:58:da: 3f:5c:ca:cf:88:91:dd:d1:9e:f4:04:42:6c:f8:b6:41:85:f4: 90:d2:de:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm5qgYOSfot3Ir4/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk Nzc5NDFkYzAtYzJiOS00N2YxLTgxYWMtYTIzZTVkZDFhZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TWyno8FKPrTjx/uvlvBzoOfBs9ohGtA/S1O cke19RVOtTKOq2wEBa6ldgV3pIBIdyvq43AdSIEsQ4xB1hhZQiG71guOP9LAUmVY fdKZMyhCj6rOoadeBOXvvbxid+LCEnrLKeiJdK8AoRcLzvVSVl8rSLhGiQgvKDVC 6Wf5rsysG9H4vcq1nP5nnPtdNwLeCBneMW2bVrmmmcz7znblLEyZ/yAwhGJowOcZ vdDP76jPNRpAMlaasGTH5hRp0Ewp+aS8vN6xb5PS5M/qkqUlbkHhAS7yrWJ0EMLP TRmm/cL93yiYkvAVIW5UT05GEAirpcJPM/QI26cGr5nuajN+9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNqyTSr/3BL9FUQjmycJv6oEa0gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvM2I3YTBlMTctZjZmOS0z ZmI5LTk4NzktZmU4OTA2YzRmMTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlUNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4U2u1VEI9ycQaVs7tPgp6uwzpYlNVncZCx+EKbG4dS7RnC7cEvZblL 4kPNnmYNbQPo1jz/s0rf3UsrkouBcB1eGqO70N5OaOCQahkODjdcrRJcK6Me4H37 82R0pJJdVqkx4/jdOX7LUcs+N61K/LGr/ZFWxxBKFFVBIKsydGeAkrE2GoBS0zJn BmMeImR/6AUWxsBE41hEIt60I5UNeG/jjOpP2nLz3WWsctwtd5c1LcptZ6fegBtf DX3jqi42dOM2ZnfQJuEFK4GndSIJQ+rTYOUReHGKl13FV15HAQgVuB7O17OW+vxY 2j9cys+Ikd3RnvQEQmz4tkGF9JDS3h0= -----END CERTIFICATE-----Generated at Sun May 11 10:24:17 2025 by rpki-client