$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa File: 85b99b16-3c92-33b6-9ed8-133467e30af3.roa (raw, json) Hash identifier: as8r99RXhTrPplr0HPk/T6qm2UcM+BZIQOevBiW1gFc= Subject key identifier: D6:EF:D4:72:6B:62:F2:D1:3C:3F:BE:8B:38:A5:DC:DB:F2:C9:50:F8 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285848EF6150A27C4BF000D9A2A900 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa Signing time: Wed 19 Feb 2025 14:00:52 +0000 ROA not before: Wed 19 Feb 2025 14:00:52 +0000 ROA not after: Tue 20 May 2025 13:00:52 +0000 asID: 7342 IP address blocks: 209.131.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ef:61:50:a2:7c:4b:f0:00:d9:a2:a9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: Feb 19 14:00:52 2025 GMT Not After : May 20 13:00:52 2025 GMT Subject: CN=7c4f79a3-320b-4b00-b058-8ce99474dad0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:95:cc:c3:ce:29:53:09:f0:53:4b:43:04:6f: 2d:ad:b0:d8:f2:2a:b9:20:2e:1b:2a:6e:67:1e:c1: 0c:8e:62:e8:dd:cd:2f:bd:b8:55:c0:d9:96:ae:62: 96:c0:8c:d2:a4:01:3b:ae:49:7f:62:2b:1d:2c:f3: dd:36:a8:75:1b:bf:df:fd:b1:fc:fe:5b:1e:d0:19: 19:1e:d5:eb:32:7d:d5:2a:5c:06:62:ed:1b:b3:1d: 6d:b8:90:3a:91:f1:1d:12:93:20:e2:77:c3:90:5d: 33:7a:26:4e:f1:ea:1d:ab:f3:68:40:b1:53:2d:a2: 8f:d7:85:75:7d:f3:18:19:ff:97:96:f4:f5:8a:58: d6:5e:ac:cc:8d:04:66:ab:bb:92:f1:a8:13:f5:77: f6:4f:31:f2:88:75:18:d4:cf:d3:9c:60:88:52:3b: bb:7a:60:c4:8a:7b:43:fe:bb:c6:85:57:8c:d5:7c: b2:03:84:31:eb:e2:30:b9:dc:74:6c:d7:53:af:74: bd:a6:04:c1:6e:00:8a:84:cb:8f:c5:4c:8e:f4:13: 95:9e:1e:f5:9f:a2:f8:56:2d:58:46:3d:03:0b:1f: 0e:59:12:92:4e:71:66:b3:7b:e1:8e:bf:39:74:e6: 09:d4:1e:1f:8f:47:71:67:c1:15:19:e6:ed:92:8c: c0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:EF:D4:72:6B:62:F2:D1:3C:3F:BE:8B:38:A5:DC:DB:F2:C9:50:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:a4:2c:1b:a3:f5:61:bd:99:fa:7d:4d:02:f2:5c:44:7a:f4: 06:b1:1e:1d:11:3c:b8:d5:0b:eb:c1:b8:fe:2c:0e:9c:d2:30: 0d:81:ed:a9:bb:14:dd:62:91:94:64:08:97:ce:27:26:3d:4e: f9:b6:3b:a8:02:d5:82:b2:82:bd:84:ba:fa:8e:32:00:97:41: 94:96:55:13:8c:d0:93:07:27:ee:83:54:5d:18:ef:97:10:e2: d1:b7:2b:2e:a7:06:30:6f:c0:7b:47:b6:28:2e:fc:48:2a:e9: fe:cf:ad:67:5a:2c:c2:3b:3f:9e:82:d7:e8:b7:1f:0d:b1:bd: 4c:0a:ac:7e:c7:f3:f6:28:e2:d8:7a:b3:19:9b:0c:37:94:03: e1:f2:31:00:1b:ce:84:8a:14:0f:4d:16:fc:71:bf:f1:4f:ca: d0:21:7f:20:3b:24:e4:a0:bf:e9:81:ca:98:70:81:84:36:19: d2:da:1a:28:b1:27:6d:ba:e6:1b:0f:06:13:06:de:67:42:6f: 0b:9d:24:59:4a:cb:a3:15:7b:87:54:83:b3:94:ee:5c:39:2d: ed:33:1f:74:4c:ba:b3:b2:a6:34:51:64:ef:e1:53:52:eb:23: 63:b6:03:fc:d6:15:d9:b2:1c:ab:41:e9:47:61:9b:05:bb:01: e4:b3:1a:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVCifEvwANmiqQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk N2M0Zjc5YTMtMzIwYi00YjAwLWIwNTgtOGNlOTk0NzRkYWQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5XMw84pUwnwU0tDBG8trbDY8iq5IC4bKm5n HsEMjmLo3c0vvbhVwNmWrmKWwIzSpAE7rkl/YisdLPPdNqh1G7/f/bH8/lse0BkZ HtXrMn3VKlwGYu0bsx1tuJA6kfEdEpMg4nfDkF0zeiZO8eodq/NoQLFTLaKP14V1 ffMYGf+XlvT1iljWXqzMjQRmq7uS8agT9Xf2TzHyiHUY1M/TnGCIUju7emDEintD /rvGhVeM1XyyA4Qx6+Iwudx0bNdTr3S9pgTBbgCKhMuPxUyO9BOVnh71n6L4Vi1Y Rj0DCx8OWRKSTnFms3vhjr85dOYJ1B4fj0dxZ8EVGebtkozALQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbv1HJrYvLRPD++izil3NvyyVD4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODViOTliMTYtM2M5Mi0z M2I2LTllZDgtMTMzNDY3ZTMwYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJekLBuj9WG9mfp9TQLyXER69AaxHh0RPLjVC+vBuP4sDpzSMA2B7am7 FN1ikZRkCJfOJyY9Tvm2O6gC1YKygr2EuvqOMgCXQZSWVROM0JMHJ+6DVF0Y75cQ 4tG3Ky6nBjBvwHtHtigu/Egq6f7PrWdaLMI7P56C1+i3Hw2xvUwKrH7H8/Yo4th6 sxmbDDeUA+HyMQAbzoSKFA9NFvxxv/FPytAhfyA7JOSgv+mByphwgYQ2GdLaGiix J2265hsPBhMG3mdCbwudJFlKy6MVe4dUg7OU7lw5Le0zH3RMurOypjRRZO/hU1Lr I2O2A/zWFdmyHKtB6UdhmwW7AeSzGr0= -----END CERTIFICATE-----Generated at Wed Apr 9 01:16:51 2025 by rpki-client