$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa File: da48e2b0-51a1-3344-a379-970483f014db.roa (raw, json) Hash identifier: YYbb61z6HBU5+uWCu8MfgdZTN0+JQiE9vJM41QIRJaU= Subject key identifier: D8:1C:A7:CF:01:6F:E5:C3:60:7F:D5:14:19:43:01:D1:67:2B:AD:D0 Certificate issuer: /CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Certificate serial: 010D0C9F43285849BF3F667376AE62271F0B9F80 Authority key identifier: 52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa Signing time: Mon 05 May 2025 01:00:49 +0000 ROA not before: Mon 05 May 2025 01:00:49 +0000 ROA not after: Sun 03 Aug 2025 01:00:49 +0000 asID: 6528 IP address blocks: 67.213.192.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:bf:3f:66:73:76:ae:62:27:1f:0b:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58ecca6e-e4af-4a56-891d-c2e3051a1bc2 Validity Not Before: May 5 01:00:49 2025 GMT Not After : Aug 3 01:00:49 2025 GMT Subject: CN=c6306100-b79f-4a2a-89bd-1cb6e750034a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:d9:b8:22:2c:65:0c:fa:e5:29:a1:83:54: 14:eb:c3:61:6f:8d:ae:12:15:4c:1b:86:e2:03:13: 33:1d:8c:db:eb:b0:14:99:01:7e:fc:6b:5a:c2:bc: 25:e9:d6:5f:3e:8f:75:f8:0d:e9:23:77:bf:17:f0: c5:03:02:42:8c:df:af:3f:3f:80:07:95:b3:7d:e8: 8e:c4:96:5d:c5:a3:65:3b:fa:fe:49:e1:0a:7f:b6: 03:43:04:7c:8c:30:29:c0:ed:ad:fc:b0:86:ea:1f: 06:c5:60:fa:fb:86:57:26:e5:f9:34:71:f4:92:23: d2:81:cf:e0:25:b3:e2:aa:eb:19:1c:aa:28:39:72: 5c:83:61:3f:1f:09:18:04:ce:1c:b6:3c:b6:8e:da: 73:ab:39:67:87:8e:e4:39:78:d2:ce:a2:03:53:29: a5:ed:40:bc:3e:19:53:a8:8d:ec:5c:f6:44:1d:aa: b1:e3:2f:7c:23:a4:a9:ea:9f:af:d8:09:f0:a1:cb: 60:a6:03:08:e3:41:9d:6e:dd:77:1e:a3:a9:c2:db: 71:ae:95:7b:ba:61:06:d7:d9:78:1b:f7:c6:0b:be: 7b:09:c3:7e:73:75:02:62:9a:78:90:04:52:6b:3d: 1f:69:7c:8f:fd:3b:42:11:63:b1:3c:ce:7f:71:e9: ae:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1C:A7:CF:01:6F:E5:C3:60:7F:D5:14:19:43:01:D1:67:2B:AD:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/da48e2b0-51a1-3344-a379-970483f014db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.crl X509v3 Authority Key Identifier: keyid:52:E1:AE:21:4B:70:71:3E:62:B0:36:29:FA:94:57:9B:2D:90:11:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/58ecca6e-e4af-4a56-891d-c2e3051a1bc2.cer sbgp-ipAddrBlock: critical IPv4: 67.213.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:c4:c0:ec:e8:35:10:cd:49:b7:21:b9:65:9f:d0:c2:e7:dd: c4:4b:f5:8e:66:1e:dd:36:16:c3:31:91:59:78:e9:33:e5:4d: 1d:19:e9:01:fc:b3:01:5e:22:65:37:0d:42:cd:69:ac:ac:4e: df:18:ef:f8:bb:1e:82:d1:2c:d3:b9:3b:4d:f9:f8:b5:fb:5e: 4f:b5:9b:86:2a:76:c1:b1:ee:e3:54:7e:60:b7:18:d9:01:0f: a6:c3:78:ef:a9:e7:8d:e2:3a:83:1f:25:49:0f:45:2c:0d:a2: 44:66:9a:06:4c:93:65:f0:88:c5:24:20:b7:41:1c:8c:c9:eb: e2:28:2e:13:54:20:02:ed:89:d3:ca:e5:9e:2c:24:14:a7:5f: 25:20:e9:bb:04:5a:ba:b4:0c:e3:01:e1:d7:89:f4:6f:6d:71: 0e:96:bc:ef:aa:40:b4:25:03:34:5a:92:df:05:98:12:8b:6e: 96:3c:00:69:7f:44:06:78:72:0d:4f:fd:a5:da:2c:7f:52:f8: b5:5e:43:cf:cb:32:a7:7b:cf:2e:dc:11:7e:a8:1b:5e:65:f0: 2b:1a:0a:56:ce:fa:2c:16:31:a5:79:cf:3f:34:8a:f4:e7:a4: 61:1d:65:ad:16:57:01:39:29:38:c0:6d:4b:d1:9d:31:b4:c9: 35:6d:e5:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2Zzdq5iJx8Ln4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThlY2NhNmUtZTRhZi00YTU2LTg5MWQtYzJlMzA1MWEx YmMyMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk YzYzMDYxMDAtYjc5Zi00YTJhLTg5YmQtMWNiNmU3NTAwMzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphzZuCIsZQz65Smhg1QU68Nhb42uEhVMG4bi AxMzHYzb67AUmQF+/Gtawrwl6dZfPo91+A3pI3e/F/DFAwJCjN+vPz+AB5WzfeiO xJZdxaNlO/r+SeEKf7YDQwR8jDApwO2t/LCG6h8GxWD6+4ZXJuX5NHH0kiPSgc/g JbPiqusZHKooOXJcg2E/HwkYBM4ctjy2jtpzqzlnh47kOXjSzqIDUyml7UC8PhlT qI3sXPZEHaqx4y98I6Sp6p+v2AnwoctgpgMI40Gdbt13HqOpwttxrpV7umEG19l4 G/fGC757CcN+c3UCYpp4kARSaz0faXyP/TtCEWOxPM5/cemuhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgcp88Bb+XDYH/VFBlDAdFnK63QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OGVj Y2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUzMDUxYTFiYzIvZGE0OGUyYjAtNTFhMS0z MzQ0LWEzNzktOTcwNDgzZjAxNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNThlY2NhNmUtZTRhZi00YTU2LTg5 MWQtYzJlMzA1MWExYmMyLzU4ZWNjYTZlLWU0YWYtNGE1Ni04OTFkLWMyZTMwNTFh MWJjMi5jcmwwHwYDVR0jBBgwFoAUUuGuIUtwcT5isDYp+pRXmy2QESwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OGVjY2E2ZS1lNGFmLTRhNTYtODkxZC1jMmUz MDUxYTFiYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9XAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHEwOzoNRDNSbchuWWf0MLn3cRL9Y5mHt02FsMxkVl46TPlTR0Z6QH8 swFeImU3DULNaaysTt8Y7/i7HoLRLNO5O035+LX7Xk+1m4YqdsGx7uNUfmC3GNkB D6bDeO+p543iOoMfJUkPRSwNokRmmgZMk2XwiMUkILdBHIzJ6+IoLhNUIALtidPK 5Z4sJBSnXyUg6bsEWrq0DOMB4deJ9G9tcQ6WvO+qQLQlAzRakt8FmBKLbpY8AGl/ RAZ4cg1P/aXaLH9S+LVeQ8/LMqd7zy7cEX6oG15l8CsaClbO+iwWMaV5zz80ivTn pGEdZa0WVwE5KTjAbUvRnTG0yTVt5UY= -----END CERTIFICATE-----Generated at Mon May 12 02:55:51 2025 by rpki-client