$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e3ab61d-77f0-3017-a1ad-163246da0d6e.roa File: 6e3ab61d-77f0-3017-a1ad-163246da0d6e.roa (raw, json) Hash identifier: 4YHogo5B3GIYjZ9JdfZa3TWhQRnXgNhEu99EcHXMjHg= Subject key identifier: E2:29:CD:3B:16:BC:ED:43:51:4E:A9:AA:47:4B:68:37:C9:C9:01:02 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584863CB15DB47401AF345FC8400 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e3ab61d-77f0-3017-a1ad-163246da0d6e.roa Signing time: Tue 31 Dec 2024 14:00:53 +0000 ROA not before: Tue 31 Dec 2024 14:00:53 +0000 ROA not after: Mon 31 Mar 2025 13:00:53 +0000 asID: 64267 IP address blocks: 130.254.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:63:cb:15:db:47:40:1a:f3:45:fc:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Dec 31 14:00:53 2024 GMT Not After : Mar 31 13:00:53 2025 GMT Subject: CN=b594cbf8-a21c-4362-823d-76fbcc29dc5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c9:b8:73:91:2f:62:98:d1:86:fc:af:52:d0: 56:f9:2c:80:f3:25:d3:35:c4:ea:00:4d:9d:d7:e8: aa:00:c3:2a:8c:5b:1f:00:75:d7:e5:79:f3:0d:1c: 68:de:fb:aa:a2:89:cf:35:db:1d:38:b8:38:ac:97: 2c:68:7e:0f:e8:47:83:dd:5d:35:6d:e4:2d:fd:b5: e7:ab:d7:c1:31:57:d9:9d:3a:07:4c:0f:88:3a:68: 80:ae:9c:d3:57:98:a2:66:5b:4a:e7:dc:79:98:c6: 9e:f6:d6:57:84:ad:80:bd:35:67:03:02:02:8d:8d: fa:32:01:74:39:e1:8c:78:89:0f:70:19:60:99:c6: 8b:56:3d:92:1e:d1:5e:a1:c6:67:99:93:f4:c7:4f: bb:b4:29:c7:98:2d:86:bf:21:21:e4:a9:6b:fe:ea: 1b:d0:48:97:30:48:e9:68:19:dd:ae:ed:9b:b2:70: bf:84:a2:d8:71:04:43:ba:39:70:43:dc:dd:71:12: 34:57:2e:af:c7:fd:de:fa:a1:07:5f:71:0b:fc:77: b5:ad:60:18:25:c4:23:10:8f:d9:79:b6:41:a9:7b: 59:6c:8d:38:5b:fe:b8:24:16:eb:b2:34:f3:d2:ba: 83:86:a9:b7:6c:d4:25:e6:d3:55:16:3b:11:8a:5a: 04:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:29:CD:3B:16:BC:ED:43:51:4E:A9:AA:47:4B:68:37:C9:C9:01:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/6e3ab61d-77f0-3017-a1ad-163246da0d6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:d8:04:56:26:3b:13:5b:05:7a:70:3d:c5:c0:db:a2:51:42: e0:9c:48:ca:e8:7e:69:73:a0:41:19:12:87:dc:0a:af:0c:8c: d2:63:4e:7a:01:1a:b3:b5:78:98:87:26:7c:55:51:38:04:f7: 11:47:01:86:fd:75:58:ed:1e:92:2c:54:29:cb:44:c4:96:3f: 66:9f:65:78:4f:4a:e4:26:7e:af:66:8f:42:99:95:d9:b7:3e: 3c:97:dc:68:08:af:e5:55:89:51:c7:9e:09:64:c1:f3:be:7a: 17:3f:22:99:fb:49:47:3e:b7:77:62:82:ed:62:66:b0:a9:62: 0f:1a:f1:4d:69:36:18:3c:d1:dc:e9:0d:f2:82:0b:a4:e3:95: 91:1b:81:22:9a:25:bd:b6:f4:c6:9a:b6:22:3e:fe:0a:ec:a5: 0b:17:61:f2:57:ef:af:d1:69:fe:e9:e2:ec:c5:04:f3:26:ef: f3:18:a1:79:9c:04:69:f2:be:5e:d1:0b:fb:6b:8a:2f:01:a1: a0:8d:8a:d3:94:93:2b:1f:80:3a:10:55:b8:45:b1:4d:71:86: 5e:91:3f:11:f7:2a:04:05:d9:a0:2c:ac:c4:c3:d6:36:69:ca: 1d:19:57:18:fd:4e:a0:ec:db:8e:64:3e:06:3d:9b:2c:52:17: b9:bf:2b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhjyxXbR0Aa80X8hAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI0MTIzMTE0MDA1M1oXDTI1MDMzMTEzMDA1M1owLzEtMCsGA1UEAxMk YjU5NGNiZjgtYTIxYy00MzYyLTgyM2QtNzZmYmNjMjlkYzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMm4c5EvYpjRhvyvUtBW+SyA8yXTNcTqAE2d 1+iqAMMqjFsfAHXX5XnzDRxo3vuqoonPNdsdOLg4rJcsaH4P6EeD3V01beQt/bXn q9fBMVfZnToHTA+IOmiArpzTV5iiZltK59x5mMae9tZXhK2AvTVnAwICjY36MgF0 OeGMeIkPcBlgmcaLVj2SHtFeocZnmZP0x0+7tCnHmC2GvyEh5Klr/uob0EiXMEjp aBndru2bsnC/hKLYcQRDujlwQ9zdcRI0Vy6vx/3e+qEHX3EL/He1rWAYJcQjEI/Z ebZBqXtZbI04W/64JBbrsjTz0rqDhqm3bNQl5tNVFjsRiloE+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOIpzTsWvO1DUU6pqkdLaDfJyQECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNmUzYWI2MWQtNzdmMC0z MDE3LWExYWQtMTYzMjQ2ZGEwZDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrYBFYmOxNbBXpwPcXA26JRQuCcSMrofmlzoEEZEofcCq8MjNJjTnoB GrO1eJiHJnxVUTgE9xFHAYb9dVjtHpIsVCnLRMSWP2afZXhPSuQmfq9mj0KZldm3 PjyX3GgIr+VViVHHnglkwfO+ehc/Ipn7SUc+t3digu1iZrCpYg8a8U1pNhg80dzp DfKCC6TjlZEbgSKaJb229MaatiI+/grspQsXYfJX76/Raf7p4uzFBPMm7/MYoXmc BGnyvl7RC/trii8BoaCNitOUkysfgDoQVbhFsU1xhl6RPxH3KgQF2aAsrMTD1jZp yh0ZVxj9TqDs245kPgY9myxSF7m/K4I= -----END CERTIFICATE-----Generated at Fri Mar 14 13:19:55 2025 by rpki-client