$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0571202-5873-37e0-8260-4a7a83ddbf16.roa File: f0571202-5873-37e0-8260-4a7a83ddbf16.roa (raw, json) Hash identifier: cSNoAP2ZOosiJ3JzfwZRea0on/8zBxfNanut+h7lOEY= Subject key identifier: 1B:25:EA:FC:48:3D:5D:71:BE:5A:B6:90:60:E5:81:32:93:B0:97:9E Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848BFEBCDB7BF5FB27DCEAF3780 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0571202-5873-37e0-8260-4a7a83ddbf16.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 396982 IP address blocks: 130.211.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cd:b7:bf:5f:b2:7d:ce:af:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=8abc1fb1-7a36-42f2-a244-e6c1a0a1fab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8d:62:f5:54:ca:81:a7:e3:60:c8:90:8a:d7: 3d:a0:48:44:88:2b:5c:c2:84:6e:e5:83:2c:c1:9f: be:81:42:46:0c:ea:68:9a:3e:7b:98:f0:a9:fc:08: 26:60:5e:e8:be:df:39:ef:5d:dd:93:f9:8c:ae:c0: c0:82:d3:6d:f7:57:bf:b9:39:d9:b7:3a:1b:ee:30: c7:45:22:85:6e:1d:61:d5:51:08:51:60:77:de:d7: 2a:b5:d3:3a:80:c4:99:cf:84:ae:54:bf:4e:38:cb: b4:ef:4c:24:15:d5:46:d5:cc:88:4f:c0:4d:01:09: b0:37:25:ca:b6:22:2d:43:03:c5:35:e8:3c:5e:c1: 97:e1:d1:de:90:67:be:6e:2a:a5:d0:5b:60:80:08: a5:76:81:58:ec:13:ca:13:57:5c:27:30:20:85:5b: a1:fa:5a:97:9a:77:7b:14:ed:11:d8:b3:07:dd:e9: 3d:0e:81:40:76:03:a5:9a:80:a0:67:32:80:ea:fd: 74:78:75:92:9c:05:9d:b2:d8:3d:a4:63:fb:da:1f: 42:a1:b8:e0:1b:ae:1e:7e:3e:dd:bb:d6:44:b9:fc: a2:24:6a:12:2b:8b:2d:d3:18:03:98:0c:cd:7d:28: 66:ca:9f:51:56:6d:71:33:e5:c8:29:8b:f9:73:9f: f6:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:25:EA:FC:48:3D:5D:71:BE:5A:B6:90:60:E5:81:32:93:B0:97:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/f0571202-5873-37e0-8260-4a7a83ddbf16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2d:48:bd:1c:36:c5:23:84:30:b5:06:0b:15:5c:d0:5c:c2: e9:e1:0a:4d:47:63:9a:93:26:a6:2d:2d:89:fc:56:a3:ee:77: f8:93:ef:b9:76:74:d5:4a:8f:95:fd:76:76:80:5f:ac:95:38: e7:fa:c8:07:9d:a9:2e:1d:36:9f:42:bb:6e:92:a4:02:e0:b0: 1b:4d:5b:51:31:44:af:fc:f6:34:6e:b4:df:3d:52:46:2a:a9: 91:f9:45:4d:c0:2b:3d:bc:96:56:bf:52:f9:3f:cd:a7:67:5c: 08:51:2e:f5:07:fb:11:4f:dd:28:3a:fc:f7:d7:2a:1d:04:6d: 48:df:42:84:18:a3:1b:4c:ce:1f:64:14:ca:48:da:7b:83:31: ba:08:86:a8:5d:04:07:1f:da:a7:2f:48:28:42:65:4c:42:ac: 37:fe:6e:d6:7f:8e:2a:88:a0:6b:24:ae:20:b6:ba:85:0b:33: 22:9d:59:09:bb:b0:69:10:e3:17:11:58:e8:47:c8:b7:c8:20: 24:e3:2e:b7:25:80:24:e8:b7:5b:35:bd:1d:21:3b:8d:56:47: 16:b1:f1:c5:15:90:b4:8e:bb:ba:8a:bc:31:98:56:6e:0b:7c: 5c:6e:d7:0b:8a:f4:1e:ce:df:d6:b5:55:cd:35:26:f2:42:f1: e6:59:73:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/6823v1+yfc6vN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk OGFiYzFmYjEtN2EzNi00MmYyLWEyNDQtZTZjMWEwYTFmYWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4I1i9VTKgafjYMiQitc9oEhEiCtcwoRu5YMs wZ++gUJGDOpomj57mPCp/AgmYF7ovt85713dk/mMrsDAgtNt91e/uTnZtzob7jDH RSKFbh1h1VEIUWB33tcqtdM6gMSZz4SuVL9OOMu070wkFdVG1cyIT8BNAQmwNyXK tiItQwPFNeg8XsGX4dHekGe+biql0FtggAildoFY7BPKE1dcJzAghVuh+lqXmnd7 FO0R2LMH3ek9DoFAdgOlmoCgZzKA6v10eHWSnAWdstg9pGP72h9CobjgG64efj7d u9ZEufyiJGoSK4st0xgDmAzNfShmyp9RVm1xM+XIKYv5c5/2KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsl6vxIPV1xvlq2kGDlgTKTsJeeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZjA1NzEyMDItNTg3My0z N2UwLTgyNjAtNGE3YTgzZGRiZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgtMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEtSL0cNsUjhDC1BgsVXNBcwunhCk1HY5qTJqYtLYn8VqPud/iT77l2 dNVKj5X9dnaAX6yVOOf6yAedqS4dNp9Cu26SpALgsBtNW1ExRK/89jRutN89UkYq qZH5RU3AKz28lla/Uvk/zadnXAhRLvUH+xFP3Sg6/PfXKh0EbUjfQoQYoxtMzh9k FMpI2nuDMboIhqhdBAcf2qcvSChCZUxCrDf+btZ/jiqIoGskriC2uoULMyKdWQm7 sGkQ4xcRWOhHyLfIICTjLrclgCTot1s1vR0hO41WRxax8cUVkLSOu7qKvDGYVm4L fFxu1wuK9B7O39a1Vc01JvJC8eZZcxo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:53 2025 by rpki-client