$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa File: 4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa (raw, json) Hash identifier: EUxCtKS6GQR8z4n9+ZWVSL3p2WOvmVQj70EwHRaK4Dc= Subject key identifier: F1:EF:AF:0B:6C:28:B4:F7:67:43:CA:3B:C2:AF:D8:D0:EC:29:DE:D0 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24A0D76B3BDEF725171E60 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 130.211.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a0:d7:6b:3b:de:f7:25:17:1e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3c2d6dbe-ab8c-4e9f-8adc-1ba0a30bca4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:33:92:7f:6a:24:6b:33:b8:cc:68:b4:6a:d0: 6d:a3:eb:67:88:2d:d3:fb:d9:26:7a:0d:a0:e2:5b: 17:2a:21:e9:8f:9e:9e:b9:a8:bf:90:79:1d:20:7d: 76:ed:19:c3:f6:4c:38:01:8a:44:97:49:27:81:68: 9b:1a:b2:66:0d:61:9d:d7:6d:61:68:02:47:85:a7: 44:17:ea:07:71:cc:c5:10:e5:b5:c8:2d:5e:98:81: c4:f7:1e:8e:c0:7e:a8:a2:f9:12:4d:3a:0c:fc:af: 59:79:05:5a:ab:72:d3:70:e7:66:6d:47:31:59:95: 67:88:5a:c9:9e:92:43:59:e8:52:40:82:68:be:10: 8e:e6:3b:83:3b:e5:bb:3a:2b:b8:26:c3:02:a0:87: 1d:c8:e4:ca:a4:77:63:b0:d2:e1:c1:53:39:08:bc: 17:f3:f4:fc:21:f2:db:df:b0:c8:e1:b4:2c:94:50: 73:d6:e1:2e:8e:ce:1a:eb:13:3a:94:52:91:f9:0a: 74:02:b9:95:40:17:83:b9:38:2a:66:7a:cd:f5:dc: 52:fb:ff:61:e3:cb:57:c3:5b:7b:59:82:cd:70:e8: d0:5a:e7:f3:15:4a:38:6c:b1:f4:00:26:db:4f:43: 71:15:fc:2b:34:5e:28:5f:7c:1b:af:57:ba:6a:df: 11:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:EF:AF:0B:6C:28:B4:F7:67:43:CA:3B:C2:AF:D8:D0:EC:29:DE:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4aa84822-23ef-3686-a338-9bb44ad3ee5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:63:da:ae:8c:a2:6f:24:02:1d:33:ba:d2:07:d1:91:0a:ae: 77:ff:9e:63:1e:60:35:29:82:d1:28:a9:f1:56:e2:fa:58:f2: ac:5f:17:f8:01:91:70:81:ff:bb:9a:8a:91:b6:1b:5a:d5:39: 0d:65:1b:84:43:a6:09:11:d3:7e:47:fb:09:bd:08:c8:86:5f: c4:f4:67:a3:b1:c3:98:17:49:d3:f5:ac:de:25:b7:76:85:31: 2a:b2:ed:80:9f:e9:22:fe:93:e9:97:a4:3d:e0:48:ba:e2:8c: e7:43:24:e4:5c:63:d5:ba:99:e9:dd:54:4e:15:bf:31:b3:76: c2:dc:2b:15:f7:f7:d5:ef:d7:eb:35:de:92:66:9b:47:6c:ca: 0f:67:b5:cb:89:b1:a2:b8:7d:d3:d6:18:f7:cf:4c:b6:44:49: 2a:13:79:5f:88:22:16:c8:23:5d:62:75:45:dd:69:9b:80:f7: cd:ff:6a:a3:0a:80:50:e4:9a:9d:75:bf:c4:f6:a3:76:ae:22: b9:03:f0:e2:a3:c4:3b:7a:02:97:b9:9d:d7:80:19:d8:c2:02: dd:a0:fa:0f:9f:19:0f:30:4b:0c:45:13:42:2b:b6:e2:df:12: b9:f0:73:3d:0c:05:22:d9:24:09:0f:b2:39:56:71:ac:16:fd: 93:94:6c:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKDXazve9yUXHmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2MyZDZkYmUtYWI4Yy00ZTlmLThhZGMtMWJhMGEzMGJjYTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojOSf2okazO4zGi0atBto+tniC3T+9kmeg2g 4lsXKiHpj56euai/kHkdIH127RnD9kw4AYpEl0kngWibGrJmDWGd121haAJHhadE F+oHcczFEOW1yC1emIHE9x6OwH6oovkSTToM/K9ZeQVaq3LTcOdmbUcxWZVniFrJ npJDWehSQIJovhCO5juDO+W7Oiu4JsMCoIcdyOTKpHdjsNLhwVM5CLwX8/T8IfLb 37DI4bQslFBz1uEujs4a6xM6lFKR+Qp0ArmVQBeDuTgqZnrN9dxS+/9h48tXw1t7 WYLNcOjQWufzFUo4bLH0ACbbT0NxFfwrNF4oX3wbr1e6at8R2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPHvrwtsKLT3Z0PKO8Kv2NDsKd7QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNGFhODQ4MjItMjNlZi0z Njg2LWEzMzgtOWJiNDRhZDNlZTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEgtNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5j2q6Mom8kAh0zutIH0ZEKrnf/nmMeYDUpgtEoqfFW4vpY8qxfF/gB kXCB/7uaipG2G1rVOQ1lG4RDpgkR035H+wm9CMiGX8T0Z6Oxw5gXSdP1rN4lt3aF MSqy7YCf6SL+k+mXpD3gSLrijOdDJORcY9W6mendVE4VvzGzdsLcKxX399Xv1+s1 3pJmm0dsyg9ntcuJsaK4fdPWGPfPTLZESSoTeV+IIhbII11idUXdaZuA983/aqMK gFDkmp11v8T2o3auIrkD8OKjxDt6Ape5ndeAGdjCAt2g+g+fGQ8wSwxFE0IrtuLf Ernwcz0MBSLZJAkPsjlWcawW/ZOUbOk= -----END CERTIFICATE-----Generated at Sat Apr 26 14:57:49 2025 by rpki-client