$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f797ca8-692e-3e9b-b13f-8ed3001c7210.roa File: 1f797ca8-692e-3e9b-b13f-8ed3001c7210.roa (raw, json) Hash identifier: mN9X0Q8aJVPDLXj0cLDqevFFAx9eCxdMZoQk0HmaWrg= Subject key identifier: 31:07:D0:A8:56:20:B1:FC:AF:F0:48:F5:4F:33:35:C4:6E:08:99:D4 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848D7A64F8C913F0B2A9B50F910 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f797ca8-692e-3e9b-b13f-8ed3001c7210.roa Signing time: Tue 11 Feb 2025 02:00:39 +0000 ROA not before: Tue 11 Feb 2025 02:00:39 +0000 ROA not after: Mon 12 May 2025 01:00:39 +0000 asID: 7018 IP address blocks: 130.254.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d7:a6:4f:8c:91:3f:0b:2a:9b:50:f9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 11 02:00:39 2025 GMT Not After : May 12 01:00:39 2025 GMT Subject: CN=97f82d7d-0b98-4cb2-8edd-5d5260fdc1eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6f:7f:12:77:34:9b:3a:18:5b:85:7c:0c:d6: 04:89:85:9e:1f:ca:39:1b:a2:25:df:39:94:f9:c8: 55:26:e5:b3:cd:fd:65:cd:4d:69:9d:71:15:e4:25: 6f:bd:e3:10:10:df:44:93:ce:97:29:ab:f9:23:41: 80:94:96:11:08:37:8b:dc:9b:a6:d6:6e:86:6a:98: 0d:4c:2a:1d:54:65:c4:e8:e1:ed:f9:0d:75:14:53: bc:f1:87:f2:42:80:09:aa:9a:65:6c:28:03:57:fd: 8c:50:17:e2:59:81:09:bf:43:af:ef:2c:f0:f6:e4: de:16:58:cf:9c:60:d5:a5:bd:05:10:94:89:66:13: 9f:0c:e9:76:b8:a6:37:6e:49:49:9d:e7:7f:d1:ee: fd:07:f4:3d:7b:76:d1:ae:48:6a:c9:16:62:b7:1f: 42:ce:a8:59:7e:a9:f5:ac:2a:8f:7c:b8:ff:16:1b: b3:3d:86:bd:7f:c2:e9:c9:d7:14:a7:6b:40:ed:35: 80:80:fa:f8:4e:e1:ad:d7:15:3a:fc:cc:e7:05:87: 3b:58:22:7d:45:bc:d0:f4:df:26:a8:43:23:f4:a2: ad:20:e8:1e:85:d7:b0:bf:39:4a:8b:36:9b:67:45: f8:f0:68:86:14:b7:de:c2:ab:e1:f6:3c:26:96:a9: 5a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:07:D0:A8:56:20:B1:FC:AF:F0:48:F5:4F:33:35:C4:6E:08:99:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/1f797ca8-692e-3e9b-b13f-8ed3001c7210.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ee:c7:54:1b:7f:9e:46:a9:89:37:f2:9b:6f:5b:66:33:79: ad:7f:65:3b:9d:73:8f:ee:b3:ff:e3:4f:90:cf:5b:12:97:33: aa:98:6c:7f:b1:e1:64:18:1e:96:c5:0a:28:fa:f3:44:cf:b1: cd:d0:2a:a3:4a:7d:da:4c:89:b2:5a:49:12:37:67:13:a0:52: 69:e3:db:ec:6e:fa:b9:5f:18:e2:0e:ae:32:5b:24:0b:2f:74: 0b:25:40:73:1c:8b:43:01:0b:63:1e:76:19:ee:00:1e:30:80: c1:ff:1a:b9:e0:a1:48:a9:de:fe:8d:43:0a:99:a8:71:cf:09: f9:70:21:ba:ad:4a:67:eb:3b:dd:19:e1:d2:68:e9:de:e1:b2: 6a:9c:75:ee:b8:b9:ba:e8:dc:1e:09:d8:7e:54:6b:e8:13:e2: ba:28:a9:1e:bd:ae:3f:39:c6:eb:7c:17:fd:ab:53:12:58:bd: 4d:f0:09:33:07:d0:11:3a:75:ae:fc:bd:f1:cd:20:1a:1e:7f: bc:50:a5:5c:f2:86:60:ef:d2:be:26:5c:62:3d:86:fc:92:87: 1f:dc:5b:b9:b6:1b:46:b3:02:4f:4a:0b:b1:04:d2:a0:42:bb: df:9f:65:04:54:74:ec:43:1c:db:c4:24:cf:5d:01:d1:02:c5: e0:de:ec:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpk+MkT8LKptQ+RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk OTdmODJkN2QtMGI5OC00Y2IyLThlZGQtNWQ1MjYwZmRjMWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl29/Enc0mzoYW4V8DNYEiYWeH8o5G6Il3zmU +chVJuWzzf1lzU1pnXEV5CVvveMQEN9Ek86XKav5I0GAlJYRCDeL3Jum1m6GapgN TCodVGXE6OHt+Q11FFO88YfyQoAJqpplbCgDV/2MUBfiWYEJv0Ov7yzw9uTeFljP nGDVpb0FEJSJZhOfDOl2uKY3bklJned/0e79B/Q9e3bRrkhqyRZitx9CzqhZfqn1 rCqPfLj/FhuzPYa9f8LpydcUp2tA7TWAgPr4TuGt1xU6/MznBYc7WCJ9RbzQ9N8m qEMj9KKtIOgehdewvzlKizabZ0X48GiGFLfewqvh9jwmlqlalQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEH0KhWILH8r/BI9U8zNcRuCJnUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMWY3OTdjYTgtNjkyZS0z ZTliLWIxM2YtOGVkMzAwMWM3MjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnux1Qbf55GqYk38ptvW2Yzea1/ZTudc4/us//jT5DPWxKXM6qYbH+x 4WQYHpbFCij680TPsc3QKqNKfdpMibJaSRI3ZxOgUmnj2+xu+rlfGOIOrjJbJAsv dAslQHMci0MBC2MedhnuAB4wgMH/GrngoUip3v6NQwqZqHHPCflwIbqtSmfrO90Z 4dJo6d7hsmqcde64ubro3B4J2H5Ua+gT4rooqR69rj85xut8F/2rUxJYvU3wCTMH 0BE6da78vfHNIBoef7xQpVzyhmDv0r4mXGI9hvyShx/cW7m2G0azAk9KC7EE0qBC u9+fZQRUdOxDHNvEJM9dAdECxeDe7A4= -----END CERTIFICATE-----Generated at Fri Apr 4 21:09:20 2025 by rpki-client