$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/af77c18a-c300-313a-a88e-3c5a333fa72e.roa File: af77c18a-c300-313a-a88e-3c5a333fa72e.roa (raw, json) Hash identifier: M/geWRpvH6fiJ6PlHxUByc8xoqp5cvyF5aKHgpX9QEQ= Subject key identifier: 7D:5E:AD:76:3D:4A:72:E6:AF:7E:0D:C0:66:38:E6:E8:91:97:DB:04 Certificate issuer: /CN=b052c0e7-788b-47d1-8126-ea94da7ceca7 Certificate serial: 010D0C9F4328584950F95DE5401216F1DB9CC640 Authority key identifier: A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/af77c18a-c300-313a-a88e-3c5a333fa72e.roa Signing time: Wed 26 Mar 2025 13:00:53 +0000 ROA not before: Wed 26 Mar 2025 13:00:53 +0000 ROA not after: Tue 24 Jun 2025 13:00:53 +0000 asID: 14618 IP address blocks: 130.150.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:50:f9:5d:e5:40:12:16:f1:db:9c:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b052c0e7-788b-47d1-8126-ea94da7ceca7 Validity Not Before: Mar 26 13:00:53 2025 GMT Not After : Jun 24 13:00:53 2025 GMT Subject: CN=b5474ba7-9656-47bd-b88d-dfd282220271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4b:55:cc:67:a7:2c:ff:2d:5a:79:0b:5a:7f: 96:b6:67:3b:ae:77:b6:5f:a1:d4:a2:04:0f:c7:8c: 2d:48:52:df:c8:37:1d:bc:ab:21:4e:34:9d:ab:fb: f5:1d:07:01:c5:db:ba:a9:31:2c:3f:6a:64:9c:fb: 92:d1:1b:e1:f2:f2:50:48:de:18:32:2f:a1:62:97: b7:28:d6:99:43:d4:16:eb:a4:a2:05:42:11:f3:b9: 15:71:df:77:cc:cc:71:08:6c:ef:63:e0:ed:03:a0: 8c:80:5f:e6:5f:c9:76:fe:de:4c:b8:d3:9a:96:77: ac:0a:5e:47:cf:9d:5f:2a:3a:8f:96:83:45:31:33: 62:ac:6e:da:1d:58:10:a9:52:45:5b:38:66:10:2c: 15:a1:2b:d0:5a:f7:c9:39:74:aa:2d:f9:31:35:90: 2a:a3:6e:2f:2f:5f:dc:a2:8e:91:e9:58:32:4f:a6: 50:9a:bc:91:d9:3f:5d:cd:2e:7d:b5:14:29:c4:6c: 0b:9f:b7:83:89:c4:7e:ce:34:f0:92:8b:0c:04:30: 46:6c:5c:62:e3:63:ab:89:99:00:d3:57:bf:7f:a5: a9:fa:18:80:f0:7f:12:d7:c2:00:be:6a:5a:6e:ba: 85:68:7d:66:62:8c:e6:98:57:5b:52:bc:ae:73:03: 58:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:5E:AD:76:3D:4A:72:E6:AF:7E:0D:C0:66:38:E6:E8:91:97:DB:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/af77c18a-c300-313a-a88e-3c5a333fa72e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7/b052c0e7-788b-47d1-8126-ea94da7ceca7.crl X509v3 Authority Key Identifier: keyid:A2:CA:80:7C:4E:97:6F:F1:9F:0E:FA:60:F0:60:96:4F:A5:8B:FA:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b052c0e7-788b-47d1-8126-ea94da7ceca7.cer sbgp-ipAddrBlock: critical IPv4: 130.150.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:4a:4c:95:6f:c3:b8:a7:53:c4:90:ca:4a:38:73:cb:2a:74: fc:43:d7:84:45:8c:35:ad:41:c1:8e:1f:fb:14:f7:75:f3:dd: aa:34:aa:38:19:1e:23:92:19:98:e3:c6:6b:cb:a4:a2:23:f8: 20:17:ce:2d:09:53:c0:7f:80:90:5a:02:a9:bc:54:ed:40:d9: 99:ad:2b:8d:5b:bc:97:d1:4a:de:85:23:68:e5:c2:eb:a1:db: 4b:1e:ca:5c:37:33:87:f1:5c:fe:da:49:e8:91:dc:c4:6a:60: eb:1c:9f:a1:72:9b:ec:ea:21:24:4a:ad:b4:84:43:ef:7a:45: bc:9b:9d:b3:89:78:af:e9:92:db:00:87:20:11:9a:fc:cf:41: 03:ec:28:08:da:dc:79:d8:87:b4:4d:06:d6:95:2f:63:fa:87: a4:05:06:0c:06:02:be:8b:ca:ab:79:35:61:27:ca:06:be:26: 8a:94:02:29:44:6e:f1:f8:5a:d9:36:da:22:6d:3a:7d:dd:4c: 38:e8:69:f2:88:66:39:ca:b0:0b:12:76:19:d4:a2:8f:78:29: 37:6b:c5:18:a4:1b:f7:dd:ba:18:90:26:87:c9:f4:4e:aa:67: 60:8a:6f:48:3a:ac:32:41:a5:54:6b:5e:d9:98:84:5f:c7:8a: 04:9c:9f:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElQ+V3lQBIW8ducxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjA1MmMwZTctNzg4Yi00N2QxLTgxMjYtZWE5NGRhN2Nl Y2E3MB4XDTI1MDMyNjEzMDA1M1oXDTI1MDYyNDEzMDA1M1owLzEtMCsGA1UEAxMk YjU0NzRiYTctOTY1Ni00N2JkLWI4OGQtZGZkMjgyMjIwMjcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0tVzGenLP8tWnkLWn+Wtmc7rne2X6HUogQP x4wtSFLfyDcdvKshTjSdq/v1HQcBxdu6qTEsP2pknPuS0Rvh8vJQSN4YMi+hYpe3 KNaZQ9QW66SiBUIR87kVcd93zMxxCGzvY+DtA6CMgF/mX8l2/t5MuNOalnesCl5H z51fKjqPloNFMTNirG7aHVgQqVJFWzhmECwVoSvQWvfJOXSqLfkxNZAqo24vL1/c oo6R6VgyT6ZQmryR2T9dzS59tRQpxGwLn7eDicR+zjTwkosMBDBGbFxi42OriZkA 01e/f6Wp+hiA8H8S18IAvmpabrqFaH1mYozmmFdbUryucwNYdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH1erXY9SnLmr34NwGY45uiRl9sEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDUy YzBlNy03ODhiLTQ3ZDEtODEyNi1lYTk0ZGE3Y2VjYTcvYWY3N2MxOGEtYzMwMC0z MTNhLWE4OGUtM2M1YTMzM2ZhNzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjA1MmMwZTctNzg4Yi00N2QxLTgx MjYtZWE5NGRhN2NlY2E3L2IwNTJjMGU3LTc4OGItNDdkMS04MTI2LWVhOTRkYTdj ZWNhNy5jcmwwHwYDVR0jBBgwFoAUosqAfE6Xb/GfDvpg8GCWT6WL+icwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDUyYzBlNy03ODhiLTQ3ZDEtODEyNi1lYTk0 ZGE3Y2VjYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGgpZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZKTJVvw7inU8SQyko4c8sqdPxD14RFjDWtQcGOH/sU93Xz3ao0qjgZ HiOSGZjjxmvLpKIj+CAXzi0JU8B/gJBaAqm8VO1A2ZmtK41bvJfRSt6FI2jlwuuh 20seylw3M4fxXP7aSeiR3MRqYOscn6Fym+zqISRKrbSEQ+96RbybnbOJeK/pktsA hyARmvzPQQPsKAja3HnYh7RNBtaVL2P6h6QFBgwGAr6Lyqt5NWEnyga+JoqUAilE bvH4Wtk22iJtOn3dTDjoafKIZjnKsAsSdhnUoo94KTdrxRikG/fduhiQJofJ9E6q Z2CKb0g6rDJBpVRrXtmYhF/HigScn7s= -----END CERTIFICATE-----Generated at Sat Apr 26 13:24:09 2025 by rpki-client