$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa File: 8eab7860-30e1-3df5-9c83-1583684e864c.roa (raw, json) Hash identifier: y1Wgom+i8jjs6sN8COssxH5DWoGjJ6JsGM+OcJdy7mc= Subject key identifier: 21:8A:E1:DD:BB:EE:D4:E0:1A:54:21:93:23:A1:0A:CA:8B:6E:C5:6F Certificate issuer: /CN=adf336cd-e30b-4fd4-a132-8eede3026803 Certificate serial: 010D0C9F43285847BC2C20C3E88E57B5F2E23960 Authority key identifier: 43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa Signing time: Fri 01 Nov 2024 13:00:41 +0000 ROA not before: Fri 01 Nov 2024 13:00:41 +0000 ROA not after: Thu 30 Jan 2025 14:00:41 +0000 asID: 11094 IP address blocks: 130.219.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:bc:2c:20:c3:e8:8e:57:b5:f2:e2:39:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf336cd-e30b-4fd4-a132-8eede3026803 Validity Not Before: Nov 1 13:00:41 2024 GMT Not After : Jan 30 14:00:41 2025 GMT Subject: CN=b54de20c-0732-4faa-82e7-e7c23c4299c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:40:eb:ff:b0:b0:75:13:1a:f6:32:6a:da:e7: 72:52:a6:b8:90:78:83:31:44:aa:0d:d7:80:c2:85: 0d:53:18:a5:b1:2d:bc:bc:3e:26:cf:45:07:14:03: bc:82:39:7e:01:4f:51:9d:24:79:46:4b:ed:e1:1e: 16:e6:84:09:14:b6:72:6b:76:e9:a4:9b:8c:97:9c: 5c:7e:53:8e:1c:a3:3e:1e:bc:dd:80:27:c6:c9:be: e1:ab:68:a1:32:89:09:ce:0d:3b:40:a5:cc:b9:af: 73:76:f5:be:1a:c5:b8:fa:35:45:2f:8c:1f:b0:c8: 4d:df:7c:16:aa:56:fc:71:44:db:1b:ba:5f:58:f7: 1d:40:d4:f2:2d:95:f1:56:05:cc:9f:b1:54:ea:af: a9:31:62:41:ea:4d:61:40:c3:f0:c9:d9:68:f5:e8: fa:31:d6:3f:4a:6d:28:6e:70:e7:47:9a:3c:48:99: 42:2c:cb:9c:92:f8:d3:69:d0:a1:4e:a8:a4:f5:7a: db:29:d8:bd:2c:3e:14:4f:7a:c3:20:e3:1f:be:4b: 32:62:02:8b:f2:5e:54:04:c7:e6:d3:00:df:de:45: 69:d7:1d:97:c2:a1:2c:ff:ed:b9:67:cc:01:6e:ef: 9d:dc:fb:27:51:0a:fc:4f:1f:b2:2e:19:2d:93:ee: 30:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8A:E1:DD:BB:EE:D4:E0:1A:54:21:93:23:A1:0A:CA:8B:6E:C5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/8eab7860-30e1-3df5-9c83-1583684e864c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803/adf336cd-e30b-4fd4-a132-8eede3026803.crl X509v3 Authority Key Identifier: keyid:43:13:C7:FA:51:66:91:DB:FC:9F:FB:6F:E5:C7:17:10:21:4A:56:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/adf336cd-e30b-4fd4-a132-8eede3026803.cer sbgp-ipAddrBlock: critical IPv4: 130.219.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:e8:4e:58:08:9a:6b:f3:56:d6:20:ca:ce:17:d8:fb:37:c2: a4:35:71:a5:75:43:6a:cf:c7:e2:73:2b:ef:ff:0f:ef:63:b8: 3c:55:e2:e1:ea:0e:0a:4f:29:5b:10:53:1f:73:f1:8e:b6:97: f7:47:9d:4c:2c:a8:39:d0:fd:21:ea:fe:69:a7:dd:6f:1d:d1: ed:b1:e3:bd:86:9c:53:f3:34:79:73:97:4d:12:a8:1c:a2:e3: 92:eb:8e:95:72:bf:b8:37:e6:20:fa:2a:b2:ac:dd:6e:74:77: 04:ff:77:ef:0a:6a:73:de:74:14:de:bd:8b:25:ed:fb:40:e4: c5:1b:48:a1:66:d4:dc:3b:1f:b8:7d:0e:fb:58:a3:fb:0b:b6: bc:cb:51:f4:e9:40:9c:85:01:31:68:b4:7e:98:8b:f8:f4:42: 42:fd:84:bb:0d:a6:92:8f:15:de:44:d6:91:9f:bb:d9:85:bb: e1:d7:5d:b0:ea:95:ea:d6:1c:d0:5e:04:ba:f4:72:16:9f:27: 83:ed:fa:04:66:11:e6:7f:ca:78:cc:7c:9b:39:72:d4:a7:7e: 34:b1:ca:48:40:b6:1b:d6:6c:55:0e:d4:6b:a1:f2:39:10:3f: a3:94:25:6d:94:a9:5e:51:9f:b2:a9:96:22:ac:9d:13:01:0d: 9b:93:4a:94 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEe8LCDD6I5XtfLiOWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRmMzM2Y2QtZTMwYi00ZmQ0LWExMzItOGVlZGUzMDI2 ODAzMB4XDTI0MTEwMTEzMDA0MVoXDTI1MDEzMDE0MDA0MVowLzEtMCsGA1UEAxMk YjU0ZGUyMGMtMDczMi00ZmFhLTgyZTctZTdjMjNjNDI5OWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUDr/7CwdRMa9jJq2udyUqa4kHiDMUSqDdeA woUNUxilsS28vD4mz0UHFAO8gjl+AU9RnSR5Rkvt4R4W5oQJFLZya3bppJuMl5xc flOOHKM+HrzdgCfGyb7hq2ihMokJzg07QKXMua9zdvW+GsW4+jVFL4wfsMhN33wW qlb8cUTbG7pfWPcdQNTyLZXxVgXMn7FU6q+pMWJB6k1hQMPwydlo9ej6MdY/Sm0o bnDnR5o8SJlCLMuckvjTadChTqik9XrbKdi9LD4UT3rDIOMfvksyYgKL8l5UBMfm 0wDf3kVp1x2XwqEs/+25Z8wBbu+d3PsnUQr8Tx+yLhktk+4wrQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFCGK4d277tTgGlQhkyOhCsqLbsVvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hZGYz MzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVkZTMwMjY4MDMvOGVhYjc4NjAtMzBlMS0z ZGY1LTljODMtMTU4MzY4NGU4NjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWRmMzM2Y2QtZTMwYi00ZmQ0LWEx MzItOGVlZGUzMDI2ODAzL2FkZjMzNmNkLWUzMGItNGZkNC1hMTMyLThlZWRlMzAy NjgwMy5jcmwwHwYDVR0jBBgwFoAUQxPH+lFmkdv8n/tv5ccXECFKVo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9hZGYzMzZjZC1lMzBiLTRmZDQtYTEzMi04ZWVk ZTMwMjY4MDMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgtswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEACuhOWAiaa/NW1iDKzhfY+zfCpDVxpXVDas/H4nMr7/8P72O4PFXi4eoO Ck8pWxBTH3PxjraX90edTCyoOdD9Ier+aafdbx3R7bHjvYacU/M0eXOXTRKoHKLj kuuOlXK/uDfmIPoqsqzdbnR3BP937wpqc950FN69iyXt+0DkxRtIoWbU3DsfuH0O +1ij+wu2vMtR9OlAnIUBMWi0fpiL+PRCQv2Euw2mko8V3kTWkZ+72YW74dddsOqV 6tYc0F4EuvRyFp8ng+36BGYR5n/KeMx8mzly1Kd+NLHKSEC2G9ZsVQ7Ua6HyORA/ o5QlbZSpXlGfsqmWIqydEwENm5NKlA== -----END CERTIFICATE-----