$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa File: 86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa (raw, json) Hash identifier: M67r+Fjzy4mAWbAQzru2y9X7GDwrsz5KJ9TlONzxJ14= Subject key identifier: 50:AB:AE:DC:21:D6:12:F1:96:CA:32:DC:DF:D0:94:9C:95:49:B0:53 Certificate issuer: /CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d Certificate serial: 010D0C9F4328584968B4247B91C84A3E5CA19920 Authority key identifier: 81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa Signing time: Fri 04 Apr 2025 01:00:47 +0000 ROA not before: Fri 04 Apr 2025 01:00:47 +0000 ROA not after: Thu 03 Jul 2025 01:00:47 +0000 asID: 36195 IP address blocks: 130.250.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:68:b4:24:7b:91:c8:4a:3e:5c:a1:99:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b5ce35f-042e-4fa4-8e8b-c101e60ee67d Validity Not Before: Apr 4 01:00:47 2025 GMT Not After : Jul 3 01:00:47 2025 GMT Subject: CN=e12133f1-093d-47d4-8704-e4de0770adb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:13:a2:21:4e:50:73:10:b1:b8:8b:c5:3f:58: 3a:39:0c:37:87:0e:54:36:aa:d7:b3:c2:b2:fb:75: 6e:53:cc:9d:d4:57:8b:1d:d8:d7:71:d2:19:e7:a0: 89:e1:48:8c:b6:1f:19:4e:db:57:4d:37:cc:ae:62: 31:33:3c:62:ca:15:18:6a:20:21:87:b6:8c:f3:93: 6b:f5:94:72:99:e2:1f:46:a0:e2:dc:17:d4:cf:0f: 84:3d:8e:e2:e3:33:05:b8:b0:4d:fd:6a:b2:af:12: fe:c3:15:59:a1:d3:9f:7b:5d:b6:ef:00:72:57:85: f2:d2:60:f3:02:87:5e:0e:f6:1c:56:dd:5c:e4:60: c0:70:83:bf:77:97:c6:c1:44:f3:a5:88:ff:22:d4: 97:e7:71:19:88:3a:38:32:66:77:16:8b:37:bc:fc: af:d7:0c:7c:6a:a0:3f:f2:e7:3f:47:99:54:ed:19: e9:2f:d5:60:16:52:7f:e7:fa:18:b4:bb:6a:de:bb: 29:bb:4a:79:0d:51:9c:ed:1d:e6:64:84:59:eb:ac: 8b:f7:e4:f3:50:82:cd:96:16:57:a1:7c:96:f4:e1: d9:64:fe:a3:99:b4:23:b5:d3:ea:3b:a7:b2:2b:6d: 8e:14:5f:35:8d:cd:1d:bb:e3:77:92:a5:c9:10:1d: bb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:AB:AE:DC:21:D6:12:F1:96:CA:32:DC:DF:D0:94:9C:95:49:B0:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/86c9e094-9f98-3ae1-ac5e-3d2072fb339e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.crl X509v3 Authority Key Identifier: keyid:81:BE:35:78:25:EE:BE:88:D2:4D:4B:F9:FC:4E:0B:B2:6E:B3:AB:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3b5ce35f-042e-4fa4-8e8b-c101e60ee67d.cer sbgp-ipAddrBlock: critical IPv4: 130.250.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:7a:f2:2a:f4:59:20:6e:95:e6:5f:4b:d7:b6:89:e4:1a:61: 1e:73:ec:e9:d4:0d:8b:58:a0:0b:c0:ab:df:0f:8f:f0:55:f1: 91:cf:3c:85:d7:77:33:47:6f:e1:40:86:3d:3a:59:e4:22:2b: e9:fc:01:4e:c3:54:a5:8a:6d:f9:cb:2e:12:3f:e9:1b:e8:9f: 13:f0:f1:a2:eb:28:4c:bf:06:2e:37:c1:78:7f:e3:c2:e6:41: df:71:4f:2f:98:78:9b:48:cb:1f:96:24:b9:8b:e6:e4:41:79: 03:de:b5:46:5e:c0:29:af:e9:7f:90:54:e4:81:d6:30:8b:8f: ca:b1:64:3f:78:0a:29:dd:9d:31:23:88:af:73:9c:7e:7a:66: 88:28:27:29:f6:2e:1d:a8:d5:a0:ee:86:26:67:0d:86:83:02: 86:19:17:5e:e5:37:4d:3a:fd:c4:88:39:19:30:0d:a2:08:3a: a0:0f:86:de:4e:46:9b:b8:b9:82:36:60:50:74:fb:1c:e1:51: af:d4:3d:30:fb:74:9c:ce:ca:d2:3d:97:50:fc:1a:73:2b:e6: 94:87:ba:e5:32:63:00:63:85:61:fd:4c:57:f9:cf:9d:5b:eb: 6b:c6:35:31:8f:4f:c6:34:70:6c:26:88:29:08:40:93:4b:ec: ca:9c:af:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElotCR7kchKPlyhmSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I1Y2UzNWYtMDQyZS00ZmE0LThlOGItYzEwMWU2MGVl NjdkMB4XDTI1MDQwNDAxMDA0N1oXDTI1MDcwMzAxMDA0N1owLzEtMCsGA1UEAxMk ZTEyMTMzZjEtMDkzZC00N2Q0LTg3MDQtZTRkZTA3NzBhZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxOiIU5QcxCxuIvFP1g6OQw3hw5UNqrXs8Ky +3VuU8yd1FeLHdjXcdIZ56CJ4UiMth8ZTttXTTfMrmIxMzxiyhUYaiAhh7aM85Nr 9ZRymeIfRqDi3BfUzw+EPY7i4zMFuLBN/WqyrxL+wxVZodOfe1227wByV4Xy0mDz AodeDvYcVt1c5GDAcIO/d5fGwUTzpYj/ItSX53EZiDo4MmZ3Fos3vPyv1wx8aqA/ 8uc/R5lU7RnpL9VgFlJ/5/oYtLtq3rspu0p5DVGc7R3mZIRZ66yL9+TzUILNlhZX oXyW9OHZZP6jmbQjtdPqO6eyK22OFF81jc0du+N3kqXJEB27ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCrrtwh1hLxlsoy3N/QlJyVSbBTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zYjVj ZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAxZTYwZWU2N2QvODZjOWUwOTQtOWY5OC0z YWUxLWFjNWUtM2QyMDcyZmIzMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2I1Y2UzNWYtMDQyZS00ZmE0LThl OGItYzEwMWU2MGVlNjdkLzNiNWNlMzVmLTA0MmUtNGZhNC04ZThiLWMxMDFlNjBl ZTY3ZC5jcmwwHwYDVR0jBBgwFoAUgb41eCXuvojSTUv5/E4Lsm6zq8kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8zYjVjZTM1Zi0wNDJlLTRmYTQtOGU4Yi1jMTAx ZTYwZWU2N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgvq7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ68ir0WSBuleZfS9e2ieQaYR5z7OnUDYtYoAvAq98Pj/BV8ZHPPIXX dzNHb+FAhj06WeQiK+n8AU7DVKWKbfnLLhI/6RvonxPw8aLrKEy/Bi43wXh/48Lm Qd9xTy+YeJtIyx+WJLmL5uRBeQPetUZewCmv6X+QVOSB1jCLj8qxZD94CindnTEj iK9znH56ZogoJyn2Lh2o1aDuhiZnDYaDAoYZF17lN006/cSIORkwDaIIOqAPht5O Rpu4uYI2YFB0+xzhUa/UPTD7dJzOytI9l1D8GnMr5pSHuuUyYwBjhWH9TFf5z51b 62vGNTGPT8Y0cGwmiCkIQJNL7Mqcr/Y= -----END CERTIFICATE-----Generated at Mon Apr 28 09:20:34 2025 by rpki-client