$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa File: c370e212-a1ea-3215-a2ef-5220722c0d21.roa (raw, json) Hash identifier: F/7MXeHQnEFuOY2nCaCqcOE8cJHupQfaMNRqRKTc8iE= Subject key identifier: F3:E7:3C:4C:79:56:40:B8:36:FE:0D:DF:1C:31:06:E2:CD:56:C9:F8 Certificate issuer: /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362 Certificate serial: 010D0C9F43285848A1361425B5FA97671D1A0900 Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 7922 IP address blocks: 130.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:14:25:b5:fa:97:67:1d:1a:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=51ac0975-2489-4900-9038-55b439e76042 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:e6:6d:d4:ac:c0:33:67:b5:ca:7b:2d:c9:42: 96:12:1f:23:6c:5d:eb:c1:d3:30:6f:67:70:5c:3a: 32:eb:12:c2:a6:b5:f4:4b:ac:38:70:51:3f:b7:96: b6:f7:87:a9:6f:32:34:5a:e6:c6:17:99:6e:20:20: 74:1e:98:6c:18:a3:55:5f:6e:08:cb:a9:6c:9d:95: ad:87:bc:87:18:e8:04:24:9c:3d:a5:b2:55:34:c4: ed:f0:f3:44:cd:0b:c3:6d:77:e6:82:6f:62:a7:37: 73:ba:3b:96:d1:d6:84:ed:dc:a2:a0:c9:34:c2:ee: a5:09:99:69:f3:55:4b:96:05:67:27:73:69:02:c1: b4:25:42:94:41:41:96:7e:ea:cb:a1:cf:bf:4a:8d: 0f:30:62:9e:38:05:9c:d3:7d:55:d7:08:f6:3d:d9: 41:06:0e:b2:ab:30:21:52:3a:77:e3:a1:a9:c0:f1: 63:92:9b:f5:e9:93:29:f7:80:a5:49:0d:dd:ed:9e: 73:00:4c:0f:29:bb:fc:b7:a3:99:11:9a:15:67:49: e2:11:b9:e7:04:06:4d:c1:4c:7c:47:df:89:18:ca: 71:92:07:d3:08:c7:1e:f4:f3:e6:b5:3b:31:20:77: 31:86:e0:70:37:17:e3:6a:bd:10:83:84:37:fa:72: 5b:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E7:3C:4C:79:56:40:B8:36:FE:0D:DF:1C:31:06:E2:CD:56:C9:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/c370e212-a1ea-3215-a2ef-5220722c0d21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl X509v3 Authority Key Identifier: keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer sbgp-ipAddrBlock: critical IPv4: 130.85.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:9d:81:e6:0a:e7:85:08:2f:6a:5c:ea:36:f1:82:27:15:3f: 49:44:d0:be:0c:15:54:b8:3f:70:37:3d:c4:16:fe:be:d9:40: 27:31:34:7d:69:07:77:2c:1d:25:2f:87:82:91:fd:26:02:35: 32:41:6e:57:62:3a:7e:cb:72:ed:fd:03:af:8c:31:06:1a:a6: a3:89:f6:10:23:e9:a9:45:52:46:61:ed:93:ea:3d:41:3a:b8: 1d:a4:cd:94:85:ad:c4:60:4c:30:ae:9a:73:84:c1:d8:2d:1f: 5b:78:bf:42:a7:d5:e0:ec:ef:71:aa:48:0c:03:36:22:93:cb: 8f:ed:79:36:50:5c:02:e0:5a:f0:2d:0e:ae:79:2e:ec:d3:82: 10:32:74:54:ee:24:fc:c1:6d:2d:9c:86:0e:9c:7d:f2:b0:ed: 81:7a:64:5f:65:ce:1c:53:f3:b5:18:f2:44:ef:54:86:50:52: 81:81:79:d1:be:f2:aa:b0:bb:25:be:f7:bc:7b:16:bd:83:9e: 47:4f:7b:46:30:ae:0a:a0:f8:fa:b2:21:78:e4:ec:dc:32:09: 44:09:17:ef:3d:d4:88:cf:ba:69:34:3d:50:0a:68:d1:ff:03: a1:8e:30:4a:60:b7:50:e2:59:d0:1a:61:d0:f6:b3:12:9c:4b: e6:18:cd:80 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEihNhQltfqXZx0aCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmNzIwYjAtNDNmYi00YWQ2LTkxYmEtYWExMWNmNmIy MzYyMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NTFhYzA5NzUtMjQ4OS00OTAwLTkwMzgtNTViNDM5ZTc2MDQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZt1KzAM2e1ynstyUKWEh8jbF3rwdMwb2dw XDoy6xLCprX0S6w4cFE/t5a294epbzI0WubGF5luICB0HphsGKNVX24Iy6lsnZWt h7yHGOgEJJw9pbJVNMTt8PNEzQvDbXfmgm9ipzdzujuW0daE7dyioMk0wu6lCZlp 81VLlgVnJ3NpAsG0JUKUQUGWfurLoc+/So0PMGKeOAWc031V1wj2PdlBBg6yqzAh Ujp346GpwPFjkpv16ZMp94ClSQ3d7Z5zAEwPKbv8t6OZEZoVZ0niEbnnBAZNwUx8 R9+JGMpxkgfTCMce9PPmtTsxIHcxhuBwNxfjar0Qg4Q3+nJbDwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFPPnPEx5VkC4Nv4N3xwxBuLNVsn4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OWY3 MjBiMC00M2ZiLTRhZDYtOTFiYS1hYTExY2Y2YjIzNjIvYzM3MGUyMTItYTFlYS0z MjE1LWEyZWYtNTIyMDcyMmMwZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjlmNzIwYjAtNDNmYi00YWQ2LTkx YmEtYWExMWNmNmIyMzYyLzY5ZjcyMGIwLTQzZmItNGFkNi05MWJhLWFhMTFjZjZi MjM2Mi5jcmwwHwYDVR0jBBgwFoAUS+pEVEC3FOuD48/N2yUi1id1KJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OWY3MjBiMC00M2ZiLTRhZDYtOTFiYS1hYTEx Y2Y2YjIzNjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAZZ2B5grnhQgvalzqNvGCJxU/SUTQvgwVVLg/cDc9xBb+vtlAJzE0fWkH dywdJS+HgpH9JgI1MkFuV2I6fsty7f0Dr4wxBhqmo4n2ECPpqUVSRmHtk+o9QTq4 HaTNlIWtxGBMMK6ac4TB2C0fW3i/QqfV4OzvcapIDAM2IpPLj+15NlBcAuBa8C0O rnku7NOCEDJ0VO4k/MFtLZyGDpx98rDtgXpkX2XOHFPztRjyRO9UhlBSgYF50b7y qrC7Jb73vHsWvYOeR097RjCuCqD4+rIheOTs3DIJRAkX7z3UiM+6aTQ9UApo0f8D oY4wSmC3UOJZ0Bph0PazEpxL5hjNgA== -----END CERTIFICATE-----Generated at Sat Apr 5 10:57:07 2025 by rpki-client