$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa File: cad5ca65-956d-31bd-87ac-8299da4f56ec.roa (raw, json) Hash identifier: l+wJS4zDbJwG24UgZZg0npREzVP7r/KlBsBqed4XVF4= Subject key identifier: 9E:EF:65:5B:40:F1:E5:27:F0:FE:9F:74:B9:17:91:7F:A3:43:98:43 Certificate issuer: /CN=1347cdae-54c7-4fcb-9019-0bee16977198 Certificate serial: 010D0C9F43285849088160B2C456B4754F3B3080 Authority key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 25656 IP address blocks: 130.74.0.0/16 maxlen: 16 130.74.0.0/17 maxlen: 17 130.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:60:b2:c4:56:b4:75:4f:3b:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=0f113b20-e291-43bf-b025-98b76911970b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a3:58:a0:db:1e:80:c3:7b:a7:6c:08:87:62: 97:6a:90:12:63:80:b0:b2:ad:d6:fe:ad:08:eb:c4: bd:f5:9c:e5:92:82:f0:e6:2f:bf:0b:b3:90:11:d6: 90:da:24:d6:85:c1:3f:42:d5:12:9f:fd:43:6c:9b: 5c:fa:dc:54:90:6b:ca:59:c7:5b:a8:95:9a:74:e3: 55:37:0a:3c:e6:ba:bb:55:bf:de:ed:2e:05:2d:69: 4b:58:66:a3:0d:24:1a:15:82:51:14:6d:da:5a:37: da:23:a1:36:54:f8:10:a4:64:dc:19:26:d1:b0:8f: 21:6b:9e:c2:b3:53:82:c7:f8:36:81:0e:7f:9f:ee: 25:10:be:84:a7:a2:71:62:6a:12:32:ba:55:8c:77: f2:f6:2e:66:4b:80:3b:11:fa:31:9d:e2:55:01:63: 4f:95:72:b3:7b:c5:c0:d9:aa:60:0f:b3:16:e9:f2: d2:45:d7:7d:0d:b4:54:c3:e0:fb:2b:88:19:91:7f: 98:a9:ed:61:14:e7:7d:9f:f3:c8:84:c7:96:ac:76: 45:58:d8:40:0d:e1:0d:2f:42:b2:67:37:8a:9b:5d: f6:ee:ae:6a:de:b9:21:a1:4d:78:af:2c:b1:77:94: 79:5f:a3:de:04:49:51:0c:30:fa:4e:55:b8:55:36: 9d:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:EF:65:5B:40:F1:E5:27:F0:FE:9F:74:B9:17:91:7F:A3:43:98:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl X509v3 Authority Key Identifier: keyid:29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer sbgp-ipAddrBlock: critical IPv4: 130.74.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:82:2f:89:9f:fd:21:39:ee:ab:95:2f:29:48:dd:cc:d2:08: b5:52:2d:0e:bc:23:d4:2c:60:94:a5:91:af:7a:3e:95:ca:ed: 04:f0:04:2a:b7:bd:12:3b:9f:50:43:b9:bf:5c:dd:73:29:6e: 93:78:09:80:a4:76:96:58:7f:1d:79:96:f1:24:21:d7:12:8e: f4:db:7d:62:34:d1:3c:18:24:66:0d:8c:3a:62:24:8c:2f:64: 66:8b:eb:47:45:36:c4:b1:b5:31:95:1b:81:3c:7f:60:a7:15: 76:24:11:a3:e6:d9:60:d1:2f:33:ca:30:06:17:ae:00:fe:dc: 1f:ff:92:3f:b5:8a:a3:31:c3:6c:12:ce:20:51:43:00:fe:7a: f6:3f:c3:2b:2f:49:51:bc:1c:14:c9:f3:a6:d9:9e:0a:aa:a7: 07:fa:6f:96:34:7c:99:31:7f:f9:3e:26:24:9d:a1:13:bc:11: b3:f4:12:70:cd:cf:07:42:e7:db:42:67:7e:51:0c:58:7a:ce: 61:23:25:ba:af:fa:6c:88:fb:28:ba:67:67:31:82:bc:aa:62: 9a:12:02:35:5d:89:e7:8f:2d:da:1d:30:f2:6a:61:c4:1d:b9: 73:a7:48:c4:a8:7d:af:21:91:ce:e5:89:4b:59:d3:0e:22:56: e2:cf:c6:72 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkIgWCyxFa0dU87MIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3 MTk4MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk MGYxMTNiMjAtZTI5MS00M2JmLWIwMjUtOThiNzY5MTE5NzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqNYoNsegMN7p2wIh2KXapASY4Cwsq3W/q0I 68S99ZzlkoLw5i+/C7OQEdaQ2iTWhcE/QtUSn/1DbJtc+txUkGvKWcdbqJWadONV Nwo85rq7Vb/e7S4FLWlLWGajDSQaFYJRFG3aWjfaI6E2VPgQpGTcGSbRsI8ha57C s1OCx/g2gQ5/n+4lEL6Ep6JxYmoSMrpVjHfy9i5mS4A7EfoxneJVAWNPlXKze8XA 2apgD7MW6fLSRdd9DbRUw+D7K4gZkX+Yqe1hFOd9n/PIhMeWrHZFWNhADeENL0Ky ZzeKm1327q5q3rkhoU14ryyxd5R5X6PeBElRDDD6TlW4VTadTwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFJ7vZVtA8eUn8P6fdLkXkX+jQ5hDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3 Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvY2FkNWNhNjUtOTU2ZC0z MWJkLTg3YWMtODI5OWRhNGY1NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM0N2NkYWUtNTRjNy00ZmNiLTkw MTktMGJlZTE2OTc3MTk4LzEzNDdjZGFlLTU0YzctNGZjYi05MDE5LTBiZWUxNjk3 NzE5OC5jcmwwHwYDVR0jBBgwFoAUKck+QbaG+wvqUxdAy5HQsTSyNvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVl MTY5NzcxOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgkowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAc4IviZ/9ITnuq5UvKUjdzNIItVItDrwj1CxglKWRr3o+lcrtBPAEKre9 EjufUEO5v1zdcyluk3gJgKR2llh/HXmW8SQh1xKO9Nt9YjTRPBgkZg2MOmIkjC9k ZovrR0U2xLG1MZUbgTx/YKcVdiQRo+bZYNEvM8owBheuAP7cH/+SP7WKozHDbBLO IFFDAP569j/DKy9JUbwcFMnzptmeCqqnB/pvljR8mTF/+T4mJJ2hE7wRs/QScM3P B0Ln20JnflEMWHrOYSMluq/6bIj7KLpnZzGCvKpimhICNV2J548t2h0w8mphxB25 c6dIxKh9ryGRzuWJS1nTDiJW4s/Gcg== -----END CERTIFICATE-----Generated at Fri Mar 14 09:11:53 2025 by rpki-client