$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa File: d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa (raw, json) Hash identifier: EWxeUVvCLbVvHj53JwHUE8fq+fXRFZH5/Ga/JYrLHJY= Subject key identifier: 87:51:34:E5:00:83:E7:5A:36:A2:4F:F3:84:38:3D:0C:F2:16:B2:1F Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBD597CE15EE1876B9AF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 130.211.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d5:97:ce:15:ee:18:76:b9:af:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=202fac83-b238-46c1-8eec-b13a526f1e0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:66:50:31:f1:e1:f7:d1:04:53:bf:36:ef:d3: 89:da:1a:c7:d1:cf:2e:07:e9:15:c0:1e:68:38:e1: 90:54:b6:1c:77:07:9a:88:67:02:00:74:8d:ac:cc: df:66:47:11:2a:f9:f6:41:7e:76:1e:70:ab:6a:7a: 3c:44:4a:a5:2f:55:72:a9:de:16:5c:54:ee:0f:c0: 17:0e:50:95:9a:fd:0b:46:30:5a:94:a9:58:91:7d: 6f:8b:57:8e:02:7e:b0:fc:d8:5e:a3:ae:2f:e6:84: 5f:22:3c:27:6f:13:d4:98:17:d8:3d:0f:58:7d:35: 10:8d:10:03:28:2f:01:20:6d:0a:fd:1e:f5:dc:4a: de:0f:3d:ca:08:f3:77:84:80:b8:02:19:05:a0:00: de:1a:37:38:62:3f:73:3a:76:7e:7f:88:e1:7f:6a: 50:74:ac:c8:e4:71:6b:11:d0:d5:aa:ac:b9:88:e8: 2c:7d:e0:a9:d5:05:d5:15:27:5f:5c:ad:3a:90:38: 7d:14:4a:4f:8a:a2:9f:47:1a:3c:99:54:01:d0:70: b6:68:07:5b:cd:d1:9b:97:b4:5b:bf:eb:3a:59:7c: 49:c1:78:eb:d7:0c:cb:f5:c9:c4:54:9e:e1:00:c3: bd:79:47:1e:e5:17:38:2e:9b:43:13:1a:7a:33:25: 18:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:51:34:E5:00:83:E7:5A:36:A2:4F:F3:84:38:3D:0C:F2:16:B2:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d09e6a95-de3d-345d-bd60-0c8c5f1eb237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:04:18:9a:62:59:76:04:d1:60:47:60:fd:fe:e3:1a:ab:99: 7a:9d:f7:57:f5:12:18:78:b5:71:81:3c:de:9f:fe:72:40:01: ab:b0:41:32:bc:e6:d2:f1:85:f7:40:30:e9:46:28:d7:ef:79: ff:88:2d:ff:1f:c3:81:15:82:53:c1:5e:8b:be:c6:07:bb:11: b8:5f:26:04:db:21:3c:a8:c2:3a:00:ea:77:86:b2:a6:40:3b: 4d:e5:d1:cf:77:d6:bf:0d:64:cb:12:df:57:37:90:23:97:a1: 4c:64:3d:b8:01:cd:9c:ff:fa:91:79:f3:d3:e4:4b:b9:51:62: b6:88:1d:89:85:92:8d:b9:4f:94:51:83:62:8b:15:e2:e1:96: 55:54:b2:57:07:30:f1:6a:42:e5:84:50:46:59:bf:99:3e:d1: 83:c5:fb:16:8a:b4:1c:0a:5e:f6:28:2c:e5:7b:cc:85:9d:10: 68:66:ed:6d:eb:6d:5e:82:e6:46:d9:44:32:22:40:8f:3c:69: 89:52:b8:15:9e:e7:b5:61:79:e3:b9:42:1a:e0:53:31:4d:9c: 26:8e:e7:01:8d:c1:79:c9:3b:50:2f:36:17:1f:60:66:7c:ce: 88:0b:18:c8:c1:b1:1e:44:be:38:a3:20:61:16:6a:3e:b4:a7: 10:fa:59:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69WXzhXuGHa5rwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk MjAyZmFjODMtYjIzOC00NmMxLThlZWMtYjEzYTUyNmYxZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGZQMfHh99EEU78279OJ2hrH0c8uB+kVwB5o OOGQVLYcdweaiGcCAHSNrMzfZkcRKvn2QX52HnCrano8REqlL1Vyqd4WXFTuD8AX DlCVmv0LRjBalKlYkX1vi1eOAn6w/Nheo64v5oRfIjwnbxPUmBfYPQ9YfTUQjRAD KC8BIG0K/R713EreDz3KCPN3hIC4AhkFoADeGjc4Yj9zOnZ+f4jhf2pQdKzI5HFr EdDVqqy5iOgsfeCp1QXVFSdfXK06kDh9FEpPiqKfRxo8mVQB0HC2aAdbzdGbl7Rb v+s6WXxJwXjr1wzL9cnEVJ7hAMO9eUce5Rc4LptDExp6MyUYoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdRNOUAg+daNqJP84Q4PQzyFrIfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDA5ZTZhOTUtZGUzZC0z NDVkLWJkNjAtMGM4YzVmMWViMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgtMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHMEGJpiWXYE0WBHYP3+4xqrmXqd91f1Ehh4tXGBPN6f/nJAAauwQTK8 5tLxhfdAMOlGKNfvef+ILf8fw4EVglPBXou+xge7EbhfJgTbITyowjoA6neGsqZA O03l0c931r8NZMsS31c3kCOXoUxkPbgBzZz/+pF589PkS7lRYraIHYmFko25T5RR g2KLFeLhllVUslcHMPFqQuWEUEZZv5k+0YPF+xaKtBwKXvYoLOV7zIWdEGhm7W3r bV6C5kbZRDIiQI88aYlSuBWe57VheeO5QhrgUzFNnCaO5wGNwXnJO1AvNhcfYGZ8 zogLGMjBsR5EvjijIGEWaj60pxD6WcY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:54:28 2025 by rpki-client