$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa File: 5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa (raw, json) Hash identifier: kiIRuftOffsDTqKrF5X/imUviGgsJVN9frZXU3WK1DA= Subject key identifier: 0F:D8:7E:2A:2F:91:D4:A9:3F:F0:B2:21:6A:DB:DA:BE:5F:35:34:9D Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285849CBCF980A9F2E2439F63AFD00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 40627 IP address blocks: 199.68.212.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:98:0a:9f:2e:24:39:f6:3a:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=a7c2545a-752d-40f4-953a-8b0f23057d7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b9:8d:7d:b9:35:5d:48:d8:d2:a7:21:ce:7e: 7c:cb:10:3b:18:0d:1b:e2:bd:43:bf:0b:dd:74:3c: 6b:10:14:38:3b:0d:6e:91:f3:2a:53:84:93:72:7e: 0c:a6:e2:f2:7a:09:70:c4:2c:84:09:27:b2:7b:f2: c9:ee:3d:96:f4:4a:54:87:9e:b1:0b:be:27:0d:f3: e6:1c:c5:f4:c6:bf:7f:a0:4a:b6:71:8d:6a:24:30: a9:0d:33:23:f1:4c:73:5f:ab:f6:fb:7d:af:f5:7e: c8:34:54:28:64:ae:8a:71:43:ca:b0:f6:86:f4:21: 6e:22:f3:96:40:f5:32:e4:e1:31:e6:d4:8e:b0:b5: 81:da:c7:f1:d7:92:8d:c9:79:1b:fd:83:b4:da:72: 4c:e6:ab:fb:2c:d3:dd:99:14:20:a8:89:cb:37:89: 6c:b6:82:e4:d4:d8:20:57:55:eb:7e:26:15:e6:d9: 42:37:7d:3a:1e:1e:28:fb:71:7b:df:6d:a8:61:54: c9:0b:06:24:dc:d0:4b:1b:06:20:ae:63:f2:f8:32: a1:2c:7c:6c:39:0d:06:83:f0:3d:a9:75:56:b1:82: 47:88:cb:e3:5a:48:e8:26:91:b8:1c:92:97:86:2f: fb:6f:62:48:90:a3:7c:68:20:e2:cd:ef:bd:db:8a: f1:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D8:7E:2A:2F:91:D4:A9:3F:F0:B2:21:6A:DB:DA:BE:5F:35:34:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/5e8d3c4e-5600-314f-90b5-69d7ca44d79d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 199.68.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:f1:eb:6e:7e:14:50:a7:f2:4a:8a:2d:62:2d:b5:3f:7b:6c: e4:cd:be:9f:1f:1a:57:9f:4f:2a:56:16:3b:ad:82:24:17:df: 71:ca:07:2e:60:56:2e:76:67:d9:d2:7a:05:13:d3:e3:b7:a6: a8:36:dc:c1:bd:4e:71:c8:f5:9f:88:c6:7c:73:60:bf:27:4a: 71:f6:bb:67:a5:a0:ff:03:73:93:f8:74:3a:da:09:29:8c:57: eb:fc:cf:3d:93:ba:ac:5b:ba:57:6b:c8:a1:af:03:3a:8e:80: dd:d6:7c:4c:5f:c1:76:ed:c4:a0:57:de:67:14:ae:38:e2:a5: 7a:56:ec:c5:46:2c:d6:ad:6b:af:97:89:d7:09:76:0d:00:d1: 3f:d4:82:2a:80:95:d5:57:81:82:03:11:8f:bf:eb:c5:5c:77: bd:88:5b:9a:8b:5e:15:d2:28:77:e9:e0:bb:9d:77:db:3c:46: 98:e0:67:32:91:31:77:b0:f6:3e:5a:fa:8f:c5:2d:a5:0e:fb: 50:24:2f:b2:5d:55:e3:01:15:1d:2b:6a:aa:29:20:e9:07:cd: 3e:5e:70:ba:14:12:45:72:7b:8f:0e:cc:46:3f:c9:6e:01:27: 30:3c:98:ce:d8:d6:19:12:7a:19:bd:07:ea:9f:af:5c:9a:26: 28:10:3f:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz5gKny4kOfY6/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk YTdjMjU0NWEtNzUyZC00MGY0LTk1M2EtOGIwZjIzMDU3ZDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87mNfbk1XUjY0qchzn58yxA7GA0b4r1Dvwvd dDxrEBQ4Ow1ukfMqU4STcn4MpuLyeglwxCyECSeye/LJ7j2W9EpUh56xC74nDfPm HMX0xr9/oEq2cY1qJDCpDTMj8UxzX6v2+32v9X7INFQoZK6KcUPKsPaG9CFuIvOW QPUy5OEx5tSOsLWB2sfx15KNyXkb/YO02nJM5qv7LNPdmRQgqInLN4lstoLk1Ngg V1XrfiYV5tlCN306Hh4o+3F7322oYVTJCwYk3NBLGwYgrmPy+DKhLHxsOQ0Gg/A9 qXVWsYJHiMvjWkjoJpG4HJKXhi/7b2JIkKN8aCDize+924rx6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/YfiovkdSpP/CyIWrb2r5fNTSdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvNWU4ZDNjNGUtNTYwMC0z MTRmLTkwYjUtNjlkN2NhNDRkNzlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0TUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTx625+FFCn8kqKLWIttT97bOTNvp8fGlefTypWFjutgiQX33HKBy5g Vi52Z9nSegUT0+O3pqg23MG9TnHI9Z+IxnxzYL8nSnH2u2eloP8Dc5P4dDraCSmM V+v8zz2TuqxbuldryKGvAzqOgN3WfExfwXbtxKBX3mcUrjjipXpW7MVGLNata6+X idcJdg0A0T/UgiqAldVXgYIDEY+/68Vcd72IW5qLXhXSKHfp4Ludd9s8RpjgZzKR MXew9j5a+o/FLaUO+1AkL7JdVeMBFR0raqopIOkHzT5ecLoUEkVye48OzEY/yW4B JzA8mM7Y1hkSehm9B+qfr1yaJigQP6U= -----END CERTIFICATE-----Generated at Sun Jun 29 19:53:33 2025 by rpki-client