$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/848b258d-32d5-379b-89f4-5319fa03475a.roa File: 848b258d-32d5-379b-89f4-5319fa03475a.roa (raw, json) Hash identifier: iZ6lZjbUsd7H9przbkMBDDJJibjqiHrh5VVQvw8mDvY= Subject key identifier: 86:2B:2B:52:19:AB:D9:A3:30:B3:73:7B:14:1E:9C:AE:2F:72:B8:12 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F43285848DA70F0A160BA032858D2D2E0 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/848b258d-32d5-379b-89f4-5319fa03475a.roa Signing time: Wed 12 Feb 2025 02:00:39 +0000 ROA not before: Wed 12 Feb 2025 02:00:39 +0000 ROA not after: Tue 13 May 2025 01:00:39 +0000 asID: 7018 IP address blocks: 130.254.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:da:70:f0:a1:60:ba:03:28:58:d2:d2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Feb 12 02:00:39 2025 GMT Not After : May 13 01:00:39 2025 GMT Subject: CN=8b65a3cc-6be8-45f6-ade4-1eb61bcd78ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:9d:1d:38:a7:98:e0:23:b1:db:79:27:ea:d8: d9:db:9d:eb:85:5e:03:c2:bc:fc:82:10:93:86:01: 15:eb:6a:58:91:5c:65:6d:29:0a:71:3e:c0:7c:4c: 5b:ba:82:c4:ae:24:ad:c7:8c:4d:1c:6e:34:94:8f: eb:2a:29:40:a6:b5:8e:20:ee:1e:38:13:9a:b2:b4: 50:aa:29:eb:fb:5d:20:2e:44:d2:14:19:33:e5:d1: e0:3b:24:e9:22:e1:ab:5f:76:3b:b6:9c:3c:94:dd: f6:e7:1e:5f:4d:48:f9:71:49:7d:b1:48:11:c0:6b: 89:42:c6:73:4e:84:76:e2:6f:bb:c9:37:80:14:30: f9:67:e9:4f:3f:bc:1d:59:b2:ea:05:0e:0c:86:99: ee:3d:45:1e:23:78:3e:4e:f2:7c:1a:90:cd:4d:c8: 4d:4f:c1:8c:1e:ec:3a:a5:28:99:66:7b:b6:d7:f8: 77:39:f1:5c:16:12:43:f3:9b:9d:6d:8d:c6:e6:71: c5:43:14:5e:7b:cf:76:1b:ef:24:e2:0f:59:75:98: 97:7f:7c:45:10:1a:62:a7:21:e6:83:28:b0:c7:18: 72:3a:fe:12:31:3d:2b:7c:4a:58:00:a7:b9:09:23: de:22:54:88:be:9e:02:f1:77:4f:17:d9:92:a0:72: 9b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2B:2B:52:19:AB:D9:A3:30:B3:73:7B:14:1E:9C:AE:2F:72:B8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/848b258d-32d5-379b-89f4-5319fa03475a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f5:8d:e1:0b:c3:3c:2a:66:da:6b:24:f5:cd:3b:61:d9:30: fb:07:23:ba:9e:29:c4:5f:44:75:16:9b:44:6b:e1:91:51:02: 91:79:f2:49:96:1d:11:2d:de:15:a7:42:a5:cb:c4:55:8d:49: 86:3d:04:9c:6e:4e:56:b5:6f:b4:3f:e2:00:72:df:a6:4c:19: 5a:61:d1:2a:51:28:85:2a:17:a6:9d:e7:aa:d3:b9:ee:50:dd: 43:8b:b3:83:7b:a9:2c:43:32:76:8e:73:8d:46:4a:63:7e:7d: e7:fd:9b:28:44:6c:5c:3c:b9:f3:33:7a:36:46:db:f1:34:1c: b1:ff:de:fa:5a:40:a2:7c:a8:90:80:bc:dd:09:9f:45:bb:98: 06:ce:10:ea:dc:c8:21:7c:16:b7:b9:20:da:4c:4f:a6:e6:dc: b0:fc:56:af:f1:7e:ce:a0:c8:97:3f:23:2d:c0:dc:3d:ee:14: 33:75:78:1f:1e:13:35:5a:dc:72:f3:b5:fe:4b:42:bf:45:98: ca:42:f6:ec:bb:49:4f:fc:93:47:fe:67:0e:71:04:60:5b:87: 39:80:ab:d1:84:0a:14:03:4d:1a:16:67:d4:88:82:c2:29:24: d3:65:53:eb:06:6b:3b:b5:ca:3c:ef:c0:c3:d6:4d:0b:50:f5: 77:8d:ea:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjacPChYLoDKFjS0uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDIxMjAyMDAzOVoXDTI1MDUxMzAxMDAzOVowLzEtMCsGA1UEAxMk OGI2NWEzY2MtNmJlOC00NWY2LWFkZTQtMWViNjFiY2Q3OGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp0dOKeY4COx23kn6tjZ253rhV4Dwrz8ghCT hgEV62pYkVxlbSkKcT7AfExbuoLEriStx4xNHG40lI/rKilAprWOIO4eOBOasrRQ qinr+10gLkTSFBkz5dHgOyTpIuGrX3Y7tpw8lN325x5fTUj5cUl9sUgRwGuJQsZz ToR24m+7yTeAFDD5Z+lPP7wdWbLqBQ4MhpnuPUUeI3g+TvJ8GpDNTchNT8GMHuw6 pSiZZnu21/h3OfFcFhJD85udbY3G5nHFQxRee892G+8k4g9ZdZiXf3xFEBpipyHm gyiwxxhyOv4SMT0rfEpYAKe5CSPeIlSIvp4C8XdPF9mSoHKbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYrK1IZq9mjMLNzexQenK4vcrgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvODQ4YjI1OGQtMzJkNS0z NzliLTg5ZjQtNTMxOWZhMDM0NzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv56MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIf1jeELwzwqZtprJPXNO2HZMPsHI7qeKcRfRHUWm0Rr4ZFRApF58kmW HREt3hWnQqXLxFWNSYY9BJxuTla1b7Q/4gBy36ZMGVph0SpRKIUqF6ad56rTue5Q 3UOLs4N7qSxDMnaOc41GSmN+fef9myhEbFw8ufMzejZG2/E0HLH/3vpaQKJ8qJCA vN0Jn0W7mAbOEOrcyCF8Fre5INpMT6bm3LD8Vq/xfs6gyJc/Iy3A3D3uFDN1eB8e EzVa3HLztf5LQr9FmMpC9uy7SU/8k0f+Zw5xBGBbhzmAq9GEChQDTRoWZ9SIgsIp JNNlU+sGazu1yjzvwMPWTQtQ9XeN6vE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:12:01 2025 by rpki-client