$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa File: 1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa (raw, json) Hash identifier: tqFGnMuKxHjH18UIFhUa5WIT7BcMnBDMF/HL0hY8cOY= Subject key identifier: E9:BA:24:25:07:C1:9E:95:7C:5E:B4:B0:EC:73:74:FC:57:95:4A:4A Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F4328584A331ADFC4353ABEB34F9D38E0 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 209242 IP address blocks: 66.81.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1a:df:c4:35:3a:be:b3:4f:9d:38:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=2b6e55fe-1bbc-432b-9b28-59fd44930713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:7d:5e:22:69:54:5b:07:41:27:eb:15:73:2e: c6:4a:09:1b:00:07:11:0c:43:3a:c7:56:c2:4d:9b: 5f:eb:60:44:48:63:38:70:bb:e3:46:a4:27:b6:7a: c3:23:d9:36:42:72:20:28:56:e3:30:ea:aa:e7:f3: df:4e:63:b8:dc:20:71:d4:78:0b:57:e2:bb:cb:6d: 27:bc:31:75:bf:bb:22:e1:2d:ad:4e:42:11:56:c5: 6b:5a:0b:36:85:c5:68:a6:72:37:48:83:8a:78:31: 68:77:da:70:5c:d8:69:3d:81:bf:49:df:71:20:fb: 79:f3:ec:91:86:e6:d3:ac:19:43:19:87:f6:bb:08: 94:ed:73:cf:bc:d5:a9:84:1c:50:45:b0:f7:ee:e1: f5:01:c1:44:bd:0a:21:95:4b:30:59:8c:4b:99:e1: c0:c6:1f:ab:ec:84:63:a3:07:c8:e8:ce:89:63:35: 16:00:02:29:87:a8:48:5f:c7:d0:be:7c:30:6f:a2: 9a:45:eb:32:44:b7:03:67:e3:e5:61:d1:af:22:6d: b1:4f:51:69:5c:80:d2:07:b4:92:ed:ba:15:4c:e5: 0d:e6:9b:f9:17:89:ea:e6:38:4e:55:6c:f2:67:c7: de:f8:50:af:15:01:59:d9:4f:9a:a0:ca:50:d3:54: 62:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:BA:24:25:07:C1:9E:95:7C:5E:B4:B0:EC:73:74:FC:57:95:4A:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/1bfd927a-7bde-365b-a1e3-52dd07daa7d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ce:3e:b1:0f:34:95:b6:d6:d7:7e:7f:12:8c:2c:70:78:10: e0:bd:11:0f:a2:4d:0d:fb:e9:f0:ed:a5:ee:9b:d7:44:15:d0: 6f:e1:ea:3d:b5:46:1e:49:43:f8:ed:14:a4:0d:db:b3:df:3a: 53:c3:61:72:54:41:77:ec:d4:21:12:8f:d6:84:26:d2:a2:99: a1:16:54:f5:4a:9e:c4:81:bf:96:11:bc:1d:61:f0:6c:a6:56: 3e:f8:06:4c:40:3c:83:24:b9:09:ae:63:50:2e:cd:93:85:30: 1c:9a:f4:86:f1:6b:1e:fa:44:7f:84:d4:7f:11:25:a5:ae:65: e6:5b:e9:c2:45:d5:64:c2:e2:4f:cf:9e:99:a8:51:9a:8c:ea: c4:53:96:a9:b2:17:b9:42:1d:d1:de:14:c9:29:b5:49:72:42: bf:7f:79:44:4a:22:53:f8:5b:26:37:ab:5b:57:c1:00:da:36: 01:1a:c9:11:21:b8:29:d7:d5:ee:5f:5f:7f:be:74:ea:18:5f: a5:ff:b0:b3:c4:8e:41:7f:b3:9a:98:a5:a5:a4:e5:67:15:36: 10:10:44:cb:ac:82:0c:aa:63:d3:33:91:97:0f:4b:0e:07:35: 0d:28:1a:cb:57:82:5b:23:b9:6c:6a:2d:c9:c2:b1:70:26:67: 79:ae:5c:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGt/ENTq+s0+dOOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk MmI2ZTU1ZmUtMWJiYy00MzJiLTliMjgtNTlmZDQ0OTMwNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn1eImlUWwdBJ+sVcy7GSgkbAAcRDEM6x1bC TZtf62BESGM4cLvjRqQntnrDI9k2QnIgKFbjMOqq5/PfTmO43CBx1HgLV+K7y20n vDF1v7si4S2tTkIRVsVrWgs2hcVopnI3SIOKeDFod9pwXNhpPYG/Sd9xIPt58+yR hubTrBlDGYf2uwiU7XPPvNWphBxQRbD37uH1AcFEvQohlUswWYxLmeHAxh+r7IRj owfI6M6JYzUWAAIph6hIX8fQvnwwb6KaResyRLcDZ+PlYdGvIm2xT1FpXIDSB7SS 7boVTOUN5pv5F4nq5jhOVWzyZ8fe+FCvFQFZ2U+aoMpQ01RirQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOm6JCUHwZ6VfF60sOxzdPxXlUpKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvMWJmZDkyN2EtN2JkZS0z NjViLWExZTMtNTJkZDA3ZGFhN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlH3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDOPrEPNJW21td+fxKMLHB4EOC9EQ+iTQ376fDtpe6b10QV0G/h6j21 Rh5JQ/jtFKQN27PfOlPDYXJUQXfs1CESj9aEJtKimaEWVPVKnsSBv5YRvB1h8Gym Vj74BkxAPIMkuQmuY1AuzZOFMBya9Ibxax76RH+E1H8RJaWuZeZb6cJF1WTC4k/P npmoUZqM6sRTlqmyF7lCHdHeFMkptUlyQr9/eURKIlP4WyY3q1tXwQDaNgEayREh uCnX1e5fX3++dOoYX6X/sLPEjkF/s5qYpaWk5WcVNhAQRMusggyqY9MzkZcPSw4H NQ0oGstXglsjuWxqLcnCsXAmZ3muXF8= -----END CERTIFICATE-----Generated at Sun Jun 29 19:33:30 2025 by rpki-client