$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa File: cad5ca65-956d-31bd-87ac-8299da4f56ec.roa (raw, json) Hash identifier: GUXCHeNFeV+3eEcELrqXj02gUnc8TwZkNiE7ipxA5pM= Subject key identifier: D9:46:B9:CE:F4:C8:9D:01:22:14:3F:00:01:89:24:9B:D0:71:B5:8D Certificate issuer: /CN=1347cdae-54c7-4fcb-9019-0bee16977198 Certificate serial: 010D0C9F4328584827C53908DB2D54881A8FAF20 Authority key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa Signing time: Tue 10 Dec 2024 02:00:40 +0000 ROA not before: Tue 10 Dec 2024 02:00:40 +0000 ROA not after: Mon 10 Mar 2025 01:00:40 +0000 asID: 25656 IP address blocks: 130.74.0.0/16 maxlen: 16 130.74.0.0/17 maxlen: 17 130.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:27:c5:39:08:db:2d:54:88:1a:8f:af:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Validity Not Before: Dec 10 02:00:40 2024 GMT Not After : Mar 10 01:00:40 2025 GMT Subject: CN=133b4b08-ec8a-4284-a64d-04375288a75b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b3:84:80:ee:13:04:e3:78:db:eb:b1:8e:ca: 4e:59:52:cc:d9:08:87:bd:22:b8:15:f2:e6:eb:2f: bb:f8:67:3a:f3:99:9c:b9:20:4c:a8:83:9c:dd:73: 15:0f:c3:49:62:42:43:f7:fd:cb:48:00:58:87:42: 49:81:f2:cf:f0:bf:38:d6:65:94:b7:85:9a:75:48: 41:e7:d1:27:e7:a0:d9:55:f2:d4:cd:34:52:51:ca: 80:4c:05:14:df:d1:95:57:2e:5b:e6:6d:3f:39:88: 48:9d:f6:80:2e:5d:9b:22:eb:0d:c8:7b:24:40:e9: 00:a7:1d:81:9b:44:4a:f9:db:a6:88:86:61:bd:e9: 3f:5c:22:69:30:da:91:d7:b9:c8:48:7a:53:a6:0c: fc:3c:7c:2d:91:aa:27:17:fb:d2:40:33:2b:cc:e6: dd:cf:91:46:55:32:5a:f6:d6:b6:5c:0e:8c:11:67: 6f:ca:d9:9b:67:e3:4a:81:e1:18:44:de:63:fe:35: ff:d4:f1:0e:15:af:f7:ea:75:30:88:8a:e7:ee:c7: 9b:6d:9d:8b:a9:33:57:fa:96:9a:3c:b5:4a:b0:0b: 0a:16:57:86:a1:b9:ae:bc:47:a7:d8:ea:67:36:0a: 44:41:e1:7c:4e:e8:48:d4:d5:3a:70:49:29:fa:ce: aa:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:46:B9:CE:F4:C8:9D:01:22:14:3F:00:01:89:24:9B:D0:71:B5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl X509v3 Authority Key Identifier: keyid:29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer sbgp-ipAddrBlock: critical IPv4: 130.74.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:b7:de:28:e7:4a:3c:37:ac:1c:84:6e:6f:04:f7:6f:b5:63: 5f:32:92:e0:a9:03:6b:4d:f3:ac:56:27:85:f1:a8:ce:78:f4: 8b:ad:19:2f:fc:26:cb:01:ea:0c:3d:aa:67:3e:21:61:d5:6d: 19:78:45:16:9a:31:70:36:cd:e9:b1:3c:17:0f:95:62:7f:30: 61:d8:52:32:cb:31:cf:ad:89:ce:3d:ec:77:4d:c7:f1:eb:e0: 44:da:a8:92:34:15:ae:9c:0c:b4:72:99:3b:47:75:f1:89:cb: 34:00:bb:fd:22:f3:be:8b:a2:75:32:48:42:30:98:42:83:cd: 34:b7:9b:c9:9a:68:a4:4e:a7:5b:e6:6e:b3:2d:76:aa:ed:70: 3c:4d:6d:e1:93:74:14:71:32:6b:11:77:5a:23:47:3e:ea:a4: 0a:7f:a6:6f:49:d9:34:63:62:9e:7b:17:b1:3d:4a:32:f9:34: d5:ee:fd:09:b8:00:6d:46:85:ac:5b:f1:57:20:dd:81:cc:76: 90:aa:9d:00:41:dd:e6:b0:94:fb:bf:e7:62:86:3e:90:a6:87: 0c:46:c5:41:d8:ea:a0:70:cc:cc:e8:09:a0:10:21:dd:ff:df: 23:76:bd:77:08:2f:70:33:3b:0a:29:c8:aa:12:7e:95:36:26: c2:91:7c:5f -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEgnxTkI2y1UiBqPryAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3 MTk4MB4XDTI0MTIxMDAyMDA0MFoXDTI1MDMxMDAxMDA0MFowLzEtMCsGA1UEAxMk MTMzYjRiMDgtZWM4YS00Mjg0LWE2NGQtMDQzNzUyODhhNzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LOEgO4TBON42+uxjspOWVLM2QiHvSK4FfLm 6y+7+Gc685mcuSBMqIOc3XMVD8NJYkJD9/3LSABYh0JJgfLP8L841mWUt4WadUhB 59En56DZVfLUzTRSUcqATAUU39GVVy5b5m0/OYhInfaALl2bIusNyHskQOkApx2B m0RK+dumiIZhvek/XCJpMNqR17nISHpTpgz8PHwtkaonF/vSQDMrzObdz5FGVTJa 9ta2XA6MEWdvytmbZ+NKgeEYRN5j/jX/1PEOFa/36nUwiIrn7sebbZ2LqTNX+paa PLVKsAsKFleGobmuvEen2OpnNgpEQeF8TuhI1NU6cEkp+s6qeQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNlGuc70yJ0BIhQ/AAGJJJvQcbWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3 Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvY2FkNWNhNjUtOTU2ZC0z MWJkLTg3YWMtODI5OWRhNGY1NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM0N2NkYWUtNTRjNy00ZmNiLTkw MTktMGJlZTE2OTc3MTk4LzEzNDdjZGFlLTU0YzctNGZjYi05MDE5LTBiZWUxNjk3 NzE5OC5jcmwwHwYDVR0jBBgwFoAUKck+QbaG+wvqUxdAy5HQsTSyNvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVl MTY5NzcxOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgkowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAhLfeKOdKPDesHIRubwT3b7VjXzKS4KkDa03zrFYnhfGoznj0i60ZL/wm ywHqDD2qZz4hYdVtGXhFFpoxcDbN6bE8Fw+VYn8wYdhSMssxz62Jzj3sd03H8evg RNqokjQVrpwMtHKZO0d18YnLNAC7/SLzvouidTJIQjCYQoPNNLebyZpopE6nW+Zu sy12qu1wPE1t4ZN0FHEyaxF3WiNHPuqkCn+mb0nZNGNinnsXsT1KMvk01e79CbgA bUaFrFvxVyDdgcx2kKqdAEHd5rCU+7/nYoY+kKaHDEbFQdjqoHDMzOgJoBAh3f/f I3a9dwgvcDM7CinIqhJ+lTYmwpF8Xw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:42 2025 by rpki-client