$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa File: 8a509389-0c08-38b5-a0f7-fc832fca5895.roa (raw, json) Hash identifier: rC7t6sxJd/yHh2gYAoQyU0RxeiGFVEcMSgBTU9Z04P4= Subject key identifier: F3:BB:43:D3:1B:FF:FB:73:1A:D0:B2:49:5B:49:3A:4C:80:2B:00:43 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A23C019E1767A91692ECA9F00 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa Signing time: Tue 10 Jun 2025 01:00:50 +0000 ROA not before: Tue 10 Jun 2025 01:00:50 +0000 ROA not after: Mon 08 Sep 2025 01:00:50 +0000 asID: 64267 IP address blocks: 130.254.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 21 Jun 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:23:c0:19:e1:76:7a:91:69:2e:ca:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 10 01:00:50 2025 GMT Not After : Sep 8 01:00:50 2025 GMT Subject: CN=475209cc-2a38-465e-93ca-85f9ebcef4b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7e:d4:57:b2:e7:90:19:de:8a:fa:45:2d:44: f8:16:16:0c:8c:69:d2:1f:1a:01:ed:97:90:ab:7a: 72:cc:f6:c3:f4:16:b3:92:15:43:f6:dc:e2:a6:32: 1a:bd:ab:6b:6d:7f:cb:b3:bf:ae:0b:0a:a0:60:96: d2:f2:57:04:0a:22:81:fe:9c:73:3f:44:77:c9:5b: 87:c3:e9:5c:4f:9a:40:1a:80:b6:39:d4:c5:be:80: 3e:d6:6e:21:88:3b:d1:e2:e6:bf:65:44:0b:6f:e6: b6:b0:fb:dc:d5:55:18:81:dd:81:b9:44:e2:ff:1c: 64:56:cb:32:59:b6:f3:06:e8:81:fd:84:37:5a:3b: 48:41:3c:b9:19:10:42:b5:e5:25:9a:fd:3d:cd:20: e7:50:83:ce:8f:7d:e5:2d:73:42:51:56:31:11:99: 40:ec:e3:3f:30:fb:ab:e3:23:82:e3:0a:d4:4b:5c: 53:31:bb:3c:26:ab:14:98:eb:58:48:cb:92:7b:f6: 3c:71:b0:8f:75:66:aa:4b:6a:c9:1e:19:d9:0a:41: 4c:be:e5:2a:a7:3f:0f:85:b2:58:0e:6c:29:8e:4d: c0:fb:ea:4a:ce:71:8e:43:d9:25:2f:54:df:ca:e7: a3:09:79:6f:0b:61:95:ab:56:3f:b7:b3:33:d3:d3: 24:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BB:43:D3:1B:FF:FB:73:1A:D0:B2:49:5B:49:3A:4C:80:2B:00:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/8a509389-0c08-38b5-a0f7-fc832fca5895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.254.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:c4:7d:4e:7b:19:cf:99:27:66:de:49:d5:a3:fe:14:41:f4: 84:ce:92:71:2f:13:13:3a:1d:2b:b2:0a:c0:42:71:d9:b1:8b: e5:5c:75:c0:2f:39:3c:84:81:38:56:f1:dd:fd:c8:7c:57:5f: d7:db:54:fb:e0:b2:b1:8b:a8:eb:2e:c0:38:aa:8c:d1:95:35: 38:56:68:41:7a:62:3f:99:de:86:04:58:59:41:42:09:b3:34: 76:2e:61:b7:dd:ac:df:56:2f:64:3c:54:54:6b:d5:e3:fc:c1: 6f:41:0f:ad:f5:17:43:b4:a2:10:73:65:ec:0d:9a:b5:dd:85: 55:c6:23:75:ad:70:2d:0c:6b:29:31:2a:f6:4b:ac:29:3b:88: 75:44:9c:af:3b:0f:af:ef:dd:02:63:e4:70:fd:be:57:c3:0e: 4f:e6:58:0d:d2:f1:30:20:80:3c:ee:35:74:24:20:a0:44:65: 10:6f:a2:bc:65:ea:c1:4c:94:1a:48:06:44:84:d2:48:1c:82: 47:af:0b:18:eb:e0:95:21:91:f9:d8:03:ed:c1:33:64:b3:9b: 5e:a3:32:94:67:12:78:8a:75:40:85:21:d8:ad:94:b8:5c:6d: 9e:1e:0a:c7:63:bc:34:4d:13:e0:90:26:92:ab:e9:e6:3d:e7: 50:3f:65:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBnhdnqRaS7KnwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk NDc1MjA5Y2MtMmEzOC00NjVlLTkzY2EtODVmOWViY2VmNGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj37UV7LnkBneivpFLUT4FhYMjGnSHxoB7ZeQ q3pyzPbD9BazkhVD9tzipjIavatrbX/Ls7+uCwqgYJbS8lcECiKB/pxzP0R3yVuH w+lcT5pAGoC2OdTFvoA+1m4hiDvR4ua/ZUQLb+a2sPvc1VUYgd2BuUTi/xxkVssy WbbzBuiB/YQ3WjtIQTy5GRBCteUlmv09zSDnUIPOj33lLXNCUVYxEZlA7OM/MPur 4yOC4wrUS1xTMbs8JqsUmOtYSMuSe/Y8cbCPdWaqS2rJHhnZCkFMvuUqpz8PhbJY Dmwpjk3A++pKznGOQ9klL1TfyuejCXlvC2GVq1Y/t7Mz09MklQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO7Q9Mb//tzGtCySVtJOkyAKwBDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvOGE1MDkzODktMGMwOC0z OGI1LWEwZjctZmM4MzJmY2E1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv5iMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbEfU57Gc+ZJ2beSdWj/hRB9ITOknEvExM6HSuyCsBCcdmxi+VcdcAv OTyEgThW8d39yHxXX9fbVPvgsrGLqOsuwDiqjNGVNThWaEF6Yj+Z3oYEWFlBQgmz NHYuYbfdrN9WL2Q8VFRr1eP8wW9BD631F0O0ohBzZewNmrXdhVXGI3WtcC0Maykx KvZLrCk7iHVEnK87D6/v3QJj5HD9vlfDDk/mWA3S8TAggDzuNXQkIKBEZRBvorxl 6sFMlBpIBkSE0kgcgkevCxjr4JUhkfnYA+3BM2Szm16jMpRnEniKdUCFIditlLhc bZ4eCsdjvDRNE+CQJpKr6eY951A/ZbM= -----END CERTIFICATE-----Generated at Thu Jun 19 14:26:11 2025 by rpki-client