$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa File: ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa (raw, json) Hash identifier: A4Yw1a4Ux+pSyv7BCZjgTj6+sSKcsWh3yY7qq+BXWQo= Subject key identifier: 7B:FD:79:D0:6F:40:85:26:75:43:DB:DD:4A:56:21:6F:17:F6:89:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBC0A4D5511D21FE6E3780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 130.211.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:c0:a4:d5:51:1d:21:fe:6e:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=99d6f640-9780-436a-99b4-4a893395dbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f5:eb:47:e8:7f:f1:c4:00:99:af:82:81:fc: 74:6b:e8:5b:03:a7:cb:b2:51:05:99:84:c3:66:78: 22:a1:55:a6:35:80:b9:1b:4d:1a:6c:86:7a:dc:a6: 41:8d:83:84:bc:2e:50:9e:20:68:95:80:6a:8f:8d: 83:45:ab:fe:dd:e9:8e:14:1e:0b:37:d6:2f:5f:ad: 00:2e:fa:b7:93:36:4f:84:f3:2c:82:ee:0a:ca:ab: e7:74:9c:ad:c4:12:2d:48:8f:6d:6c:f8:ee:02:f4: 58:8d:25:b9:4a:25:1b:4a:ce:4a:da:47:34:50:c4: c5:66:ad:67:ae:5b:8b:eb:59:b1:bb:25:15:ae:4b: 49:9d:59:cc:88:66:7f:2b:76:85:74:fd:34:15:96: 18:aa:64:ff:ac:2e:f1:77:79:6a:98:6b:39:17:85: 65:6c:02:d2:5c:c6:65:8c:82:08:08:1e:19:91:01: fe:05:65:1b:be:cc:ff:39:4c:9f:0c:9c:60:5e:6c: b1:c8:dc:b9:03:fc:bc:45:3a:d7:a8:7b:24:c3:6e: 08:59:74:28:7c:df:51:42:4f:16:81:53:a4:7a:c8: 47:43:26:46:06:2a:a9:15:be:21:40:33:fe:99:4e: cc:96:e2:86:49:02:3d:ae:7f:4a:de:6b:bb:b8:01: 7b:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:FD:79:D0:6F:40:85:26:75:43:DB:DD:4A:56:21:6F:17:F6:89:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ac304800-a551-3cb8-bfbb-5c22e9cd090b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:00:19:db:ce:fc:80:b9:37:5b:38:29:3f:8e:92:5c:e2:6c: 94:62:98:12:21:3a:4b:77:a6:a2:50:21:1f:d4:cc:fd:b4:fe: 3e:8e:dd:33:73:f9:3d:a6:bd:40:79:b2:37:ac:a0:03:42:4e: cb:db:31:3c:60:9e:db:5c:73:eb:8b:ad:02:95:30:68:6e:8c: 4a:1f:b1:1f:83:93:d9:44:bf:f0:de:71:31:b8:01:2f:13:0b: a3:39:7c:cc:12:be:dd:a5:c2:dd:eb:43:ea:99:50:f7:ad:75: a2:c9:f1:3c:49:b2:a4:ae:68:a0:ce:3b:ff:f2:eb:4f:09:e3: 4c:7b:4a:3d:c5:bc:a1:9a:86:6d:2e:7a:40:04:65:4b:09:ca: c9:71:f1:50:50:7f:f6:cd:72:6f:44:c2:ad:5b:fc:9a:69:96: fa:8e:f0:08:99:5d:dc:0c:a5:7a:7c:16:a9:46:71:1a:de:9c: da:96:ea:fc:2a:18:e1:f1:f6:d2:d8:50:7d:16:68:14:3c:40: a9:9a:b8:1d:8c:d6:b1:7b:02:04:0b:da:05:9c:ec:51:c6:7a: 72:a8:fa:3e:fe:bc:ff:fa:63:6d:90:8f:0a:e3:01:63:0f:49: f2:ec:1a:70:85:45:1a:df:24:5a:69:02:0e:92:39:d5:3e:5a: fa:ff:83:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68Ck1VEdIf5uN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OTlkNmY2NDAtOTc4MC00MzZhLTk5YjQtNGE4OTMzOTVkYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPXrR+h/8cQAma+Cgfx0a+hbA6fLslEFmYTD ZngioVWmNYC5G00abIZ63KZBjYOEvC5QniBolYBqj42DRav+3emOFB4LN9YvX60A Lvq3kzZPhPMsgu4KyqvndJytxBItSI9tbPjuAvRYjSW5SiUbSs5K2kc0UMTFZq1n rluL61mxuyUVrktJnVnMiGZ/K3aFdP00FZYYqmT/rC7xd3lqmGs5F4VlbALSXMZl jIIICB4ZkQH+BWUbvsz/OUyfDJxgXmyxyNy5A/y8RTrXqHskw24IWXQofN9RQk8W gVOkeshHQyZGBiqpFb4hQDP+mU7MluKGSQI9rn9K3mu7uAF7rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHv9edBvQIUmdUPb3UpWIW8X9onnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWMzMDQ4MDAtYTU1MS0z Y2I4LWJmYmItNWMyMmU5Y2QwOTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgtPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJEAGdvO/IC5N1s4KT+OklzibJRimBIhOkt3pqJQIR/UzP20/j6O3TNz +T2mvUB5sjesoANCTsvbMTxgnttcc+uLrQKVMGhujEofsR+Dk9lEv/DecTG4AS8T C6M5fMwSvt2lwt3rQ+qZUPetdaLJ8TxJsqSuaKDOO//y608J40x7Sj3FvKGahm0u ekAEZUsJyslx8VBQf/bNcm9Ewq1b/JpplvqO8AiZXdwMpXp8FqlGcRrenNqW6vwq GOHx9tLYUH0WaBQ8QKmauB2M1rF7AgQL2gWc7FHGenKo+j7+vP/6Y22QjwrjAWMP SfLsGnCFRRrfJFppAg6SOdU+Wvr/gys= -----END CERTIFICATE-----Generated at Wed Apr 9 17:14:42 2025 by rpki-client