$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa File: fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa (raw, json) Hash identifier: e3XYtnSUAoVuWCx2E7N3Q3nD0MsXvUFWza4iunAur4c= Subject key identifier: 2A:8A:6C:FB:1A:E6:E8:94:09:37:3B:7F:7D:EF:5A:24:72:94:81:02 Certificate issuer: /CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362 Certificate serial: 010D0C9F43285848A1360E34029FC050F1375CC0 Authority key identifier: 4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa Signing time: Wed 22 Jan 2025 14:00:52 +0000 ROA not before: Wed 22 Jan 2025 14:00:52 +0000 ROA not after: Tue 22 Apr 2025 13:00:52 +0000 asID: 11131 IP address blocks: 130.85.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a1:36:0e:34:02:9f:c0:50:f1:37:5c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f720b0-43fb-4ad6-91ba-aa11cf6b2362 Validity Not Before: Jan 22 14:00:52 2025 GMT Not After : Apr 22 13:00:52 2025 GMT Subject: CN=44813c57-a89f-4a13-addf-ef936f5d8c66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b2:2e:b6:a7:25:dc:98:ea:e7:c1:ed:a2:58: 07:a8:2a:e1:fe:a9:19:80:df:f6:76:fe:9f:a4:c7: 95:27:6f:66:a2:dd:ba:54:f2:55:4c:05:d3:1c:56: 56:5c:ed:ff:29:49:a7:c4:fc:e5:14:9e:3d:9d:b4: 3a:63:c0:1c:d4:a7:2a:13:42:5d:57:35:bc:b4:76: e0:dd:3a:ef:9d:61:2e:54:b8:42:d1:0d:f7:27:b8: 08:c1:a7:24:0c:8f:a7:aa:b6:91:dc:17:a7:9d:43: a8:3b:d2:9c:9d:d4:e5:b9:74:dd:31:22:ea:91:eb: 10:2f:65:95:e9:c2:e6:f8:a2:f0:57:87:dd:04:ea: 71:66:56:57:ef:28:85:ea:8a:2d:90:0c:8c:e2:03: 35:34:28:7f:75:3d:ed:4d:fb:a7:3e:a2:ec:5b:e8: 35:2f:e7:ad:98:dc:44:9b:2e:8e:a1:57:0c:b7:76: d4:11:4e:70:05:13:00:33:0b:6f:4b:c0:79:f0:e2: 5d:0e:ce:26:27:75:26:ab:e7:b1:e8:c8:cb:a0:c9: 21:d1:b0:2a:13:2e:8c:d1:25:cb:9a:f9:eb:b5:30: 44:16:83:22:03:e9:9a:2f:34:72:bb:a1:52:96:d1: 92:5a:6e:67:ae:a2:c9:10:7d:fc:5a:b1:8e:1c:d6: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:6C:FB:1A:E6:E8:94:09:37:3B:7F:7D:EF:5A:24:72:94:81:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/fe24cd81-d5da-3df4-a5b1-d2656c6463be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.crl X509v3 Authority Key Identifier: keyid:4B:EA:44:54:40:B7:14:EB:83:E3:CF:CD:DB:25:22:D6:27:75:28:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/69f720b0-43fb-4ad6-91ba-aa11cf6b2362.cer sbgp-ipAddrBlock: critical IPv4: 130.85.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:fe:8f:e4:41:5e:8c:d6:04:a2:26:bc:ee:85:0d:a4:3a:ad: 12:ef:c6:e2:97:54:33:8c:f4:70:f8:46:12:9d:66:06:d2:81: 8c:f3:79:24:81:81:13:30:fd:49:25:1a:c5:35:0e:f4:49:ea: 1f:8b:a5:84:36:6e:d6:af:30:36:b2:a5:f0:50:ca:da:e8:9b: 0d:be:95:1a:1d:45:4b:55:6d:8c:8b:57:ae:f1:bf:d1:6e:7b: 94:3e:e0:a4:51:4a:fe:81:01:a3:6f:be:25:10:0f:2d:66:15: 63:cf:0b:30:44:ca:2a:ab:0f:45:44:a8:85:12:04:b3:fd:7c: 83:dc:9b:d3:09:3b:fc:9e:07:e5:b6:04:e0:7a:79:0f:e7:d0: 60:4f:64:f0:6e:93:28:3c:40:74:39:03:cb:27:3e:c7:68:ab: d1:76:ad:6e:d7:f4:fb:cc:47:07:e8:28:74:0f:0f:62:3c:03: b1:55:8f:8c:54:78:48:75:67:81:aa:a7:98:a0:a3:ab:0d:f0: 5e:7d:5e:e5:40:04:2b:e3:0a:6e:2d:1c:8c:f4:43:d8:56:7e: 95:83:32:7e:b6:0f:ba:f9:51:02:b0:cc:2d:30:a5:8a:4e:e0: 9d:e4:fe:56:37:1e:16:65:63:de:a1:b1:80:e9:28:0f:03:27: be:30:82:69 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEihNg40Ap/AUPE3XMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjlmNzIwYjAtNDNmYi00YWQ2LTkxYmEtYWExMWNmNmIy MzYyMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk NDQ4MTNjNTctYTg5Zi00YTEzLWFkZGYtZWY5MzZmNWQ4YzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbIutqcl3Jjq58HtolgHqCrh/qkZgN/2dv6f pMeVJ29mot26VPJVTAXTHFZWXO3/KUmnxPzlFJ49nbQ6Y8Ac1KcqE0JdVzW8tHbg 3TrvnWEuVLhC0Q33J7gIwackDI+nqraR3BennUOoO9KcndTluXTdMSLqkesQL2WV 6cLm+KLwV4fdBOpxZlZX7yiF6ootkAyM4gM1NCh/dT3tTfunPqLsW+g1L+etmNxE my6OoVcMt3bUEU5wBRMAMwtvS8B58OJdDs4mJ3Umq+ex6MjLoMkh0bAqEy6M0SXL mvnrtTBEFoMiA+maLzRyu6FSltGSWm5nrqLJEH38WrGOHNaIxwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCqKbPsa5uiUCTc7f33vWiRylIECMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82OWY3 MjBiMC00M2ZiLTRhZDYtOTFiYS1hYTExY2Y2YjIzNjIvZmUyNGNkODEtZDVkYS0z ZGY0LWE1YjEtZDI2NTZjNjQ2M2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjlmNzIwYjAtNDNmYi00YWQ2LTkx YmEtYWExMWNmNmIyMzYyLzY5ZjcyMGIwLTQzZmItNGFkNi05MWJhLWFhMTFjZjZi MjM2Mi5jcmwwHwYDVR0jBBgwFoAUS+pEVEC3FOuD48/N2yUi1id1KJwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82OWY3MjBiMC00M2ZiLTRhZDYtOTFiYS1hYTEx Y2Y2YjIzNjIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAglUwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAfP6P5EFejNYEoia87oUNpDqtEu/G4pdUM4z0cPhGEp1mBtKBjPN5JIGB EzD9SSUaxTUO9EnqH4ulhDZu1q8wNrKl8FDK2uibDb6VGh1FS1VtjItXrvG/0W57 lD7gpFFK/oEBo2++JRAPLWYVY88LMETKKqsPRUSohRIEs/18g9yb0wk7/J4H5bYE 4Hp5D+fQYE9k8G6TKDxAdDkDyyc+x2ir0Xatbtf0+8xHB+godA8PYjwDsVWPjFR4 SHVngaqnmKCjqw3wXn1e5UAEK+MKbi0cjPRD2FZ+lYMyfrYPuvlRArDMLTClik7g neT+VjceFmVj3qGxgOkoDwMnvjCCaQ== -----END CERTIFICATE-----Generated at Sun Apr 6 17:42:01 2025 by rpki-client