$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa File: cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa (raw, json) Hash identifier: gR6I8LqmdEOmeAYQfWpWvAdmonD12fAeaw9Aj8E7Ixg= Subject key identifier: 02:4D:0D:A6:5C:96:DE:FC:DA:68:16:48:B4:A9:BC:D1:D0:C2:92:0C Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f Certificate serial: 010D0C9F4328584A2DC7FC2C16B35D7C55EB4500 Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa Signing time: Fri 13 Jun 2025 15:15:05 +0000 ROA not before: Fri 13 Jun 2025 15:15:05 +0000 ROA not after: Thu 11 Sep 2025 15:15:05 +0000 asID: 3949 IP address blocks: 130.94.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2d:c7:fc:2c:16:b3:5d:7c:55:eb:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f Validity Not Before: Jun 13 15:15:05 2025 GMT Not After : Sep 11 15:15:05 2025 GMT Subject: CN=667825e3-84be-42b3-9d48-06bbb7af1fff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:b3:25:b6:05:b5:a5:f3:8a:93:2f:6d:fd: c8:ca:49:64:4a:e5:70:0e:d9:85:61:a3:ef:8c:f5: 5f:73:3c:ef:0d:c9:0f:fc:0a:fb:df:0a:bb:c8:15: d6:9f:8d:16:c1:2a:b8:5d:cb:24:c7:62:59:7f:d1: 94:24:c6:14:b2:60:05:60:fb:89:ac:f9:b5:ce:77: 4d:0e:b7:e4:7a:35:41:00:ed:76:5d:7b:3c:dd:4d: f2:e6:0c:70:94:55:7a:e2:75:e8:68:61:bb:cb:64: 58:17:4a:fc:44:73:84:dd:ba:fa:f3:ad:aa:03:60: 4a:ac:9e:a1:a6:0b:b4:f6:23:f8:24:3f:18:b5:fc: 7c:f3:6c:4d:d8:40:f5:81:8e:80:2a:15:71:34:85: 14:90:27:a9:e8:1a:48:10:5d:a4:aa:01:9d:44:b1: a0:df:52:28:c7:57:cc:11:dd:f2:12:2e:15:09:7a: b4:84:50:b1:8d:62:ee:52:82:b7:7c:89:ed:d2:37: c0:b5:fc:a5:ff:e0:50:70:6f:d1:90:f8:f5:d7:30: 6d:24:d4:e4:d6:22:de:41:a9:5e:36:9a:ac:ee:88: 82:4c:95:73:a6:1b:20:2c:b7:e7:68:7c:7d:7a:cc: 5f:cf:05:26:b8:9a:8e:d7:6a:5e:a1:89:3a:ed:93: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:4D:0D:A6:5C:96:DE:FC:DA:68:16:48:B4:A9:BC:D1:D0:C2:92:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/cf2d46e9-d6f4-37f8-98d7-6b9515235e1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl X509v3 Authority Key Identifier: keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer sbgp-ipAddrBlock: critical IPv4: 130.94.240.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:62:2c:c2:4f:f1:da:7f:eb:91:00:12:2f:ca:86:64:e1:c2: 4d:53:b5:2c:42:84:a9:d1:4b:35:e5:82:4b:6d:80:4a:dd:60: aa:c6:94:83:fa:b9:be:6c:65:20:48:43:d9:5e:df:8c:21:2a: 23:e3:c3:a7:3e:e2:e9:c5:ce:ae:ce:b9:0b:64:48:90:9e:df: 71:83:97:01:cb:58:a8:b7:49:82:e3:c2:21:3d:7b:7f:93:84: a6:3a:06:70:9e:19:dd:84:57:51:1e:33:c8:16:3c:67:0e:72: fb:ac:4b:e9:2a:27:d1:d5:78:c0:db:eb:e0:a1:3b:46:7e:bb: 08:4a:2d:51:d8:60:1e:31:5f:3f:2c:67:f9:54:37:a3:79:d0: ef:7c:07:33:87:08:f7:15:55:92:be:75:7b:cf:e6:5a:d7:4b: 38:26:64:b8:07:aa:d8:a5:20:89:f6:0f:a1:aa:00:cf:01:4b: d4:19:24:10:cb:4a:78:52:45:ee:1a:20:a8:c2:37:86:6b:8a: 23:2a:8b:6b:08:99:84:ef:d8:24:79:b6:7a:b0:6b:a7:81:ed: c2:b0:86:71:e2:ed:aa:72:c5:b4:ed:c7:09:4a:18:3d:ff:61: f1:5a:58:74:61:65:7a:8d:a1:2c:04:01:1f:26:51:87:68:8b: f5:b1:65:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEotx/wsFrNdfFXrRQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk OTdmMB4XDTI1MDYxMzE1MTUwNVoXDTI1MDkxMTE1MTUwNVowLzEtMCsGA1UEAxMk NjY3ODI1ZTMtODRiZS00MmIzLTlkNDgtMDZiYmI3YWYxZmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiyzJbYFtaXzipMvbf3IyklkSuVwDtmFYaPv jPVfczzvDckP/Ar73wq7yBXWn40WwSq4Xcskx2JZf9GUJMYUsmAFYPuJrPm1zndN DrfkejVBAO12XXs83U3y5gxwlFV64nXoaGG7y2RYF0r8RHOE3br6862qA2BKrJ6h pgu09iP4JD8Ytfx882xN2ED1gY6AKhVxNIUUkCep6BpIEF2kqgGdRLGg31Iox1fM Ed3yEi4VCXq0hFCxjWLuUoK3fInt0jfAtfyl/+BQcG/RkPj11zBtJNTk1iLeQale Npqs7oiCTJVzphsgLLfnaHx9esxfzwUmuJqO12peoYk67ZNCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAJNDaZclt782mgWSLSpvNHQwpIMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvY2YyZDQ2ZTktZDZmNC0z N2Y4LTk4ZDctNmI5NTE1MjM1ZTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0 ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3 NjcxNGQ5N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgl7wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdiLMJP8dp/65EAEi/KhmThwk1TtSxChKnRSzXlgkttgErdYKrGlIP6 ub5sZSBIQ9le34whKiPjw6c+4unFzq7OuQtkSJCe33GDlwHLWKi3SYLjwiE9e3+T hKY6BnCeGd2EV1EeM8gWPGcOcvusS+kqJ9HVeMDb6+ChO0Z+uwhKLVHYYB4xXz8s Z/lUN6N50O98BzOHCPcVVZK+dXvP5lrXSzgmZLgHqtilIIn2D6GqAM8BS9QZJBDL SnhSRe4aIKjCN4ZriiMqi2sImYTv2CR5tnqwa6eB7cKwhnHi7apyxbTtxwlKGD3/ YfFaWHRhZXqNoSwEAR8mUYdoi/WxZbk= -----END CERTIFICATE-----Generated at Sun Jun 15 11:38:07 2025 by rpki-client