$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa File: 8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa (raw, json) Hash identifier: Sf6w0Lo6Q1Y8GVlfafA0n2gsxmFkb90rnlXuJHETqu8= Subject key identifier: C5:05:E6:CD:97:4E:8A:F6:25:37:84:A5:F7:1C:33:09:B7:A9:C7:64 Certificate issuer: /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Certificate serial: 010D0C9F43285849674EEC2ACB5C31CA8A90EC70 Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa Signing time: Thu 03 Apr 2025 13:01:02 +0000 ROA not before: Thu 03 Apr 2025 13:01:02 +0000 ROA not after: Wed 02 Jul 2025 13:01:02 +0000 asID: 396982 IP address blocks: 130.41.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:67:4e:ec:2a:cb:5c:31:ca:8a:90:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7 Validity Not Before: Apr 3 13:01:02 2025 GMT Not After : Jul 2 13:01:02 2025 GMT Subject: CN=c2abb6b2-b0e7-4b49-9d7a-23018eeabf53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:ee:3d:82:24:a5:53:9e:b3:2a:1e:a1:93: 62:fc:19:a7:0d:a4:01:ab:b6:b3:83:79:4d:ef:e0: 65:38:c7:3b:87:62:0e:95:0e:a5:ca:d0:d8:9e:c2: dc:0e:ba:1d:e9:4b:41:73:06:7c:a0:41:53:0b:bc: 10:ba:0f:e5:a4:bc:24:79:c7:96:58:0c:55:e7:bb: 92:1b:83:34:67:9a:85:08:cb:02:f9:71:c9:7d:fc: b7:29:e8:02:a1:ed:b3:c7:3c:39:36:71:d1:4c:bd: 8a:40:71:e9:f7:43:ec:c3:24:31:0d:4f:d4:eb:93: 43:e9:0e:17:b6:54:87:47:b8:81:e6:9a:b0:5f:1d: d1:d9:eb:c5:de:6f:91:18:bd:23:79:10:55:56:0b: bb:4f:10:a3:61:1b:33:81:88:2d:d4:48:27:a5:4a: 42:11:35:05:5a:5e:9f:cd:d2:53:24:db:5a:73:5a: 56:c6:d1:c9:7b:3d:5c:e3:41:8f:a5:41:22:29:b6: a6:2b:ed:a2:e7:e7:68:47:0d:06:32:e2:4c:a9:43: 8e:4f:71:fc:24:e6:8b:d8:64:f0:b0:b0:ab:3c:be: 10:c6:92:0c:0b:53:cf:d6:cb:32:8a:cb:55:d5:84: a6:f4:f5:85:86:03:3f:52:8e:d5:65:e3:0a:5e:14: 38:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:05:E6:CD:97:4E:8A:F6:25:37:84:A5:F7:1C:33:09:B7:A9:C7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/8189d120-4f14-361d-9d35-dfdd7d1fe42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl X509v3 Authority Key Identifier: keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer sbgp-ipAddrBlock: critical IPv4: 130.41.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:7e:f6:01:55:17:66:23:dd:35:6b:ca:af:8e:59:78:87:2e: 0b:93:ad:91:b6:ce:a9:66:0f:94:6b:d2:d5:b8:4f:48:2f:fa: c7:2b:26:d0:59:bc:c0:8d:13:69:1c:14:bc:78:76:7e:ab:87: 8b:06:35:63:79:54:a6:c6:d8:50:83:41:65:fe:bf:91:d6:39: 03:ff:c1:59:88:6a:df:2f:d0:cf:31:b0:4b:04:06:c6:c2:d8: 0e:63:07:d7:92:9b:f5:f6:1a:12:2f:d8:b5:a8:cd:ce:54:fd: ee:9a:3a:d6:9d:7e:29:b5:15:b9:54:58:4b:be:93:a9:21:ae: 75:96:23:4c:8a:ef:9d:81:8d:60:ee:c4:47:19:ef:39:a1:a8: 15:bc:d8:0d:52:ba:5b:4e:6b:1c:48:d9:6f:53:40:8a:e6:b0: f3:3d:e9:1c:9a:62:80:22:84:19:3e:bb:3f:a6:de:43:26:93: 11:3c:d8:38:a3:3f:27:fd:77:2f:04:d9:54:3f:3e:b8:37:04: a3:b0:85:49:ad:1f:b2:16:db:09:bc:fd:1e:b0:9f:85:b3:51: 1f:3e:b8:fd:e1:64:5e:30:a5:5e:16:de:ac:86:69:16:62:73: e0:de:e4:bf:43:96:31:a1:35:fc:61:c1:56:e3:8e:84:7a:44: db:69:40:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTuwqy1wxyoqQ7HAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk OWU3MB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk YzJhYmI2YjItYjBlNy00YjQ5LTlkN2EtMjMwMThlZWFiZjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5zuPYIkpVOesyoeoZNi/BmnDaQBq7azg3lN 7+BlOMc7h2IOlQ6lytDYnsLcDrod6UtBcwZ8oEFTC7wQug/lpLwkeceWWAxV57uS G4M0Z5qFCMsC+XHJffy3KegCoe2zxzw5NnHRTL2KQHHp90PswyQxDU/U65ND6Q4X tlSHR7iB5pqwXx3R2evF3m+RGL0jeRBVVgu7TxCjYRszgYgt1EgnpUpCETUFWl6f zdJTJNtac1pWxtHJez1c40GPpUEiKbamK+2i5+doRw0GMuJMqUOOT3H8JOaL2GTw sLCrPL4QxpIMC1PP1ssyistV1YSm9PWFhgM/Uo7VZeMKXhQ4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUF5s2XTor2JTeEpfccMwm3qcdkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvODE4OWQxMjAtNGYxNC0z NjFkLTlkMzUtZGZkZDdkMWZlNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3 M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4 ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5 NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgingMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH1+9gFVF2Yj3TVryq+OWXiHLguTrZG2zqlmD5Rr0tW4T0gv+scrJtBZ vMCNE2kcFLx4dn6rh4sGNWN5VKbG2FCDQWX+v5HWOQP/wVmIat8v0M8xsEsEBsbC 2A5jB9eSm/X2GhIv2LWozc5U/e6aOtadfim1FblUWEu+k6khrnWWI0yK752BjWDu xEcZ7zmhqBW82A1SultOaxxI2W9TQIrmsPM96RyaYoAihBk+uz+m3kMmkxE82Dij Pyf9dy8E2VQ/Prg3BKOwhUmtH7IW2wm8/R6wn4WzUR8+uP3hZF4wpV4W3qyGaRZi c+De5L9DljGhNfxhwVbjjoR6RNtpQCk= -----END CERTIFICATE-----Generated at Thu Apr 17 09:03:21 2025 by rpki-client