$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa File: aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa (raw, json) Hash identifier: 2MTtkRmGHqG/yeBaXyZQMXtT6wXzSW8ApWD6OSAuTkE= Subject key identifier: 1B:A6:FD:E1:5C:A3:4F:72:D2:24:D8:58:5A:D6:FF:09:8A:64:AD:82 Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566 Certificate serial: 010D0C9F43285849E91FA2F40B98E304C0C72B00 Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa Signing time: Tue 20 May 2025 01:00:49 +0000 ROA not before: Tue 20 May 2025 01:00:49 +0000 ROA not after: Mon 18 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 66.81.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e9:1f:a2:f4:0b:98:e3:04:c0:c7:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566 Validity Not Before: May 20 01:00:49 2025 GMT Not After : Aug 18 01:00:49 2025 GMT Subject: CN=2c151093-7496-4996-b720-305f6d88ba4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2f:84:21:89:cb:ae:00:5c:15:e8:f6:f9:97: 0f:50:99:5a:50:30:31:6e:3c:99:e9:fd:8f:3a:8d: cf:cb:7a:72:8b:45:b1:ce:18:86:63:5f:8a:50:2e: 9e:2a:97:c1:41:20:22:3f:65:91:39:48:d8:26:a7: d1:23:9e:a1:fb:0e:1e:bf:c2:a7:da:68:ba:1a:69: 6a:31:84:40:65:38:8f:34:e2:b0:2d:4b:07:63:1d: 54:47:ac:10:ec:bc:c1:e1:80:e6:6f:22:fe:9a:e2: f5:1c:54:d4:63:58:ed:1c:1a:f0:d1:10:e8:b6:2c: 75:f3:6c:24:c6:a3:83:48:cb:65:38:1d:24:2e:b7: 84:b0:42:8b:02:98:12:d1:7f:23:f1:9c:ef:22:84: 90:8b:05:bb:81:cf:90:aa:65:e0:9c:9b:9c:6a:73: 5e:f7:5a:b4:a8:c9:22:3e:39:23:7a:50:39:77:8a: 75:52:9c:5d:d7:ae:92:dd:8a:18:fd:ac:bf:60:f0: 00:20:c9:1a:2e:82:e1:7b:15:54:5d:31:8f:8f:55: 57:29:84:3f:2e:63:f1:62:68:89:32:3e:af:b2:c5: 56:5b:df:88:7c:e6:4b:73:ee:1f:0d:f5:f1:ba:1a: f2:c5:15:a8:05:7a:93:2f:45:b9:23:08:41:e7:ae: e8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A6:FD:E1:5C:A3:4F:72:D2:24:D8:58:5A:D6:FF:09:8A:64:AD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl X509v3 Authority Key Identifier: keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer sbgp-ipAddrBlock: critical IPv4: 66.81.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:71:d4:3e:30:2f:0a:da:f5:54:e3:f0:7f:e2:aa:26:4f:7d: c3:71:5f:f5:2a:5c:5c:21:cb:ea:2b:4d:da:cd:62:61:6a:c3: 90:74:3b:1d:8a:47:f2:04:52:f6:38:44:89:b1:1d:54:6c:d6: 60:43:c4:e4:f4:d6:cf:04:45:cf:c9:4f:68:97:b8:1d:3d:da: f1:ff:81:c6:6d:c8:d7:b9:6c:72:a0:83:96:84:16:53:15:a3: 3b:f2:28:68:d7:6b:fa:27:fe:2c:1f:f9:b3:c7:89:62:d0:9a: b7:a7:0c:5e:1a:e1:c3:55:53:6e:e9:47:b1:2c:41:96:76:5d: 50:8b:7b:3e:09:22:44:70:eb:3d:bc:16:0f:ef:78:c7:9b:44: 54:81:2b:a5:14:fd:91:87:85:36:66:c4:ab:d0:44:1c:2e:3b: 0b:7c:a4:c8:1a:bf:69:78:9e:03:81:17:2b:9a:d0:a3:68:c9: ad:5e:97:8a:90:96:fa:a1:bf:04:02:22:18:b1:62:e9:ba:e4: 6f:61:51:ac:85:20:ac:eb:f1:e7:cc:9b:41:ef:fc:23:10:60: 48:1b:0b:8f:b1:df:11:63:85:3e:d6:25:9d:fb:62:fd:15:de: 0d:f3:b2:27:60:2d:b0:64:d8:be:3c:4e:d1:38:1f:10:58:9e: a3:0d:15:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6L0C5jjBMDHKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThkMmIyOWYtMWRhOS00YjY1LWE4MmYtMzg5ODIyYmVk NTY2MB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk MmMxNTEwOTMtNzQ5Ni00OTk2LWI3MjAtMzA1ZjZkODhiYTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoi+EIYnLrgBcFej2+ZcPUJlaUDAxbjyZ6f2P Oo3Py3pyi0WxzhiGY1+KUC6eKpfBQSAiP2WROUjYJqfRI56h+w4ev8Kn2mi6Gmlq MYRAZTiPNOKwLUsHYx1UR6wQ7LzB4YDmbyL+muL1HFTUY1jtHBrw0RDotix182wk xqODSMtlOB0kLreEsEKLApgS0X8j8ZzvIoSQiwW7gc+QqmXgnJucanNe91q0qMki PjkjelA5d4p1Upxd166S3YoY/ay/YPAAIMkaLoLhexVUXTGPj1VXKYQ/LmPxYmiJ Mj6vssVWW9+IfOZLc+4fDfXxuhryxRWoBXqTL0W5IwhB567o4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBum/eFco09y0iTYWFrW/wmKZK2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81OGQy YjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4MjJiZWQ1NjYvYWE0NTQ0YzctMGMyZi0z Njg1LThhZGItZjViY2IzZGI2MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNThkMmIyOWYtMWRhOS00YjY1LWE4 MmYtMzg5ODIyYmVkNTY2LzU4ZDJiMjlmLTFkYTktNGI2NS1hODJmLTM4OTgyMmJl ZDU2Ni5jcmwwHwYDVR0jBBgwFoAUP8WjehofdIhEyjPLx625tWDqEHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81OGQyYjI5Zi0xZGE5LTRiNjUtYTgyZi0zODk4 MjJiZWQ1NjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQlHxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKtx1D4wLwra9VTj8H/iqiZPfcNxX/UqXFwhy+orTdrNYmFqw5B0Ox2K R/IEUvY4RImxHVRs1mBDxOT01s8ERc/JT2iXuB092vH/gcZtyNe5bHKgg5aEFlMV ozvyKGjXa/on/iwf+bPHiWLQmrenDF4a4cNVU27pR7EsQZZ2XVCLez4JIkRw6z28 Fg/veMebRFSBK6UU/ZGHhTZmxKvQRBwuOwt8pMgav2l4ngOBFyua0KNoya1el4qQ lvqhvwQCIhixYum65G9hUayFIKzr8efMm0Hv/CMQYEgbC4+x3xFjhT7WJZ37Yv0V 3g3zsidgLbBk2L48TtE4HxBYnqMNFZI= -----END CERTIFICATE-----Generated at Sun Jun 29 06:03:41 2025 by rpki-client