$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7437e6a4-3af7-3111-8fcb-ad880824ba7e.roa File: 7437e6a4-3af7-3111-8fcb-ad880824ba7e.roa (raw, json) Hash identifier: mQWVe3HJKnbD3d4gGreMfuiiQMZHfkgw1lkoFcfUxu4= Subject key identifier: F6:1C:22:B0:C8:AF:D6:C1:86:10:7F:B7:F2:E3:74:EA:67:30:B7:AE Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F43285848ACC64818BEA397FF40350380 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7437e6a4-3af7-3111-8fcb-ad880824ba7e.roa Signing time: Sun 26 Jan 2025 17:25:26 +0000 ROA not before: Sun 26 Jan 2025 17:25:26 +0000 ROA not after: Sat 26 Apr 2025 16:25:26 +0000 asID: 29802 IP address blocks: 130.254.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:ac:c6:48:18:be:a3:97:ff:40:35:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Jan 26 17:25:26 2025 GMT Not After : Apr 26 16:25:26 2025 GMT Subject: CN=bc03fa14-9ec7-4ced-b060-3fe9860bcffb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5e:6b:66:81:4e:f3:f6:f9:e0:f1:72:6e:9a: a3:3e:4c:78:f2:93:cc:af:f8:aa:01:26:f9:e0:55: 1c:0b:b6:45:8a:3b:1d:5f:5a:b7:ae:7f:39:df:f6: 9f:56:0f:30:f0:24:b8:7d:08:85:0f:9d:25:6a:60: 48:a7:cc:21:26:59:67:e5:25:d8:44:49:68:e8:c2: ae:2b:dd:ad:1e:68:a8:fa:e1:dc:a2:21:f7:72:1c: 91:ab:93:01:3c:e9:1c:4e:89:3d:f0:47:d9:7f:2b: c3:b7:df:e9:ca:84:e8:30:ef:93:c8:a8:e6:d9:dd: 0e:94:8f:13:6f:e3:a3:44:e5:6f:b8:11:b8:6e:94: fe:dc:3c:f5:fb:1f:bf:05:c5:ab:b2:12:3a:82:81: f0:b5:93:95:c1:52:ef:f6:80:b1:64:b0:4f:86:30: c5:f9:95:2f:92:93:01:5f:cc:03:2b:d8:57:63:fd: 46:bc:f3:64:38:84:56:5b:f9:d2:27:81:c4:d8:b1: c0:fd:f3:c5:1e:8c:54:e7:7b:0d:da:13:a0:13:d6: ca:f5:3d:e0:dd:b7:cd:2f:97:b5:4c:cd:45:89:42: b7:5b:5a:b7:a4:bb:51:8b:5b:bd:a8:d5:a6:88:b2: 98:67:bf:5c:b8:91:c2:1a:ac:ed:4c:73:fb:d8:6a: 78:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:1C:22:B0:C8:AF:D6:C1:86:10:7F:B7:F2:E3:74:EA:67:30:B7:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/7437e6a4-3af7-3111-8fcb-ad880824ba7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 130.254.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d3:2c:1b:7f:85:88:38:46:9c:2a:2f:3a:eb:4a:3e:3e:91: 89:62:76:1e:77:d5:eb:7f:8d:6c:3d:62:40:63:27:8e:aa:36: 17:ae:f4:6d:00:2d:c8:97:6d:b8:92:c9:ea:63:79:0c:26:ab: b1:1b:b4:ff:ba:90:4a:53:92:2e:6d:61:00:1b:ac:5b:bb:cd: 40:fd:a6:66:65:d9:16:c3:db:4e:0d:06:f9:18:7c:1a:4e:d9: 9c:3e:f3:22:6e:f0:48:1d:fd:70:64:f6:1e:88:a3:3b:1c:eb: 9d:a8:6f:11:23:5c:ad:84:1b:e3:48:db:e4:18:e6:0d:da:79: ea:d7:a9:55:43:d6:d3:5b:dc:c3:c6:83:f0:72:fd:8d:a2:ad: 81:18:95:1a:ff:f9:b3:6a:85:ae:f9:c2:58:d3:33:de:57:07: 59:e0:b3:51:b2:91:a0:26:93:04:4c:f8:23:aa:7f:c6:00:6c: 18:0c:e5:cb:0e:ce:08:3a:ad:3a:21:d6:1b:ad:7a:3f:94:c8: be:c4:99:60:19:83:c3:16:db:15:a9:d3:a3:8f:f9:c4:06:ad: d7:18:20:d7:e4:b0:7e:ad:68:5f:b8:8a:54:c1:86:22:d8:98: 44:51:4d:6a:fc:e3:9f:c4:6f:a7:cd:65:3a:c2:c7:8b:af:2f: b1:8a:48:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEisxkgYvqOX/0A1A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDEyNjE3MjUyNloXDTI1MDQyNjE2MjUyNlowLzEtMCsGA1UEAxMk YmMwM2ZhMTQtOWVjNy00Y2VkLWIwNjAtM2ZlOTg2MGJjZmZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl5rZoFO8/b54PFybpqjPkx48pPMr/iqASb5 4FUcC7ZFijsdX1q3rn853/afVg8w8CS4fQiFD50lamBIp8whJlln5SXYRElo6MKu K92tHmio+uHcoiH3chyRq5MBPOkcTok98EfZfyvDt9/pyoToMO+TyKjm2d0OlI8T b+OjROVvuBG4bpT+3Dz1+x+/BcWrshI6goHwtZOVwVLv9oCxZLBPhjDF+ZUvkpMB X8wDK9hXY/1GvPNkOIRWW/nSJ4HE2LHA/fPFHoxU53sN2hOgE9bK9T3g3bfNL5e1 TM1FiUK3W1q3pLtRi1u9qNWmiLKYZ79cuJHCGqztTHP72Gp4tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYcIrDIr9bBhhB/t/LjdOpnMLeuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvNzQzN2U2YTQtM2FmNy0z MTExLThmY2ItYWQ4ODA4MjRiYTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv4oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnTLBt/hYg4RpwqLzrrSj4+kYlidh531et/jWw9YkBjJ46qNheu9G0A LciXbbiSyepjeQwmq7EbtP+6kEpTki5tYQAbrFu7zUD9pmZl2RbD204NBvkYfBpO 2Zw+8yJu8Egd/XBk9h6Iozsc652obxEjXK2EG+NI2+QY5g3aeerXqVVD1tNb3MPG g/By/Y2irYEYlRr/+bNqha75wljTM95XB1ngs1GykaAmkwRM+COqf8YAbBgM5csO zgg6rToh1hutej+UyL7EmWAZg8MW2xWp06OP+cQGrdcYINfksH6taF+4ilTBhiLY mERRTWr845/Eb6fNZTrCx4uvL7GKSFA= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:17 2025 by rpki-client