$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5781cd3-fcb4-36ee-a2d1-1f75a4d379e3.roa File: d5781cd3-fcb4-36ee-a2d1-1f75a4d379e3.roa (raw, json) Hash identifier: r4/oz3OxyqC5Dh0UbHmIsNdzu6WUXsQd6OnU7PpKI5s= Subject key identifier: 12:9C:C2:27:DD:7F:FE:D3:D2:07:AE:2D:17:67:C9:1C:35:1B:62:65 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F432858499F24B7B8456F2B7BF5EC23B0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5781cd3-fcb4-36ee-a2d1-1f75a4d379e3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 396982 IP address blocks: 130.211.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b7:b8:45:6f:2b:7b:f5:ec:23:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b07b2f39-e1e2-4111-95af-7b52ba48100d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:22:e6:02:92:4a:7f:71:2e:3a:17:4f:94:70: 22:bc:cf:26:18:68:d6:94:02:b4:f6:6c:3e:a4:b9: 57:b9:18:07:1d:05:11:17:c6:a7:13:b6:23:01:3d: 2d:ca:07:19:97:c8:1f:36:80:9f:f2:9c:58:f8:90: d6:04:c2:a9:a0:0d:57:29:78:80:2e:8a:c7:62:c1: fb:28:1f:60:c1:7c:8d:69:9d:41:60:b8:5a:c0:1f: 81:a0:08:94:2c:d8:0f:0e:be:f9:b1:45:95:cc:80: b3:c0:0f:1c:55:30:8a:c1:c6:cc:dc:70:bb:37:dc: 62:78:0a:82:08:0b:69:08:23:8e:b7:0c:96:05:d5: c5:ff:b8:bb:94:3e:8c:14:47:d1:bd:ce:ae:a5:b2: 2c:6d:ad:a4:64:bb:fc:82:6b:07:2a:0e:58:d5:fe: c4:3f:63:7c:a0:c8:14:72:9c:35:b7:83:c6:83:35: bb:d1:f4:90:40:ee:93:34:4d:a1:56:8e:46:89:47: 34:26:be:92:5b:4e:53:59:1c:92:77:c3:6a:df:56: 6c:33:46:14:4d:21:9a:3a:e8:c7:7c:ab:18:d8:a2: ec:cb:65:96:53:ae:39:ab:67:48:fd:ba:b9:34:f2: 21:32:59:86:56:e3:ef:ab:0c:47:e8:13:70:55:6b: b5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:9C:C2:27:DD:7F:FE:D3:D2:07:AE:2D:17:67:C9:1C:35:1B:62:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d5781cd3-fcb4-36ee-a2d1-1f75a4d379e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 130.211.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d5:d6:74:91:fb:94:bb:ea:37:60:2a:5f:ce:04:27:d7:5b: d6:3e:dd:33:69:8d:45:e9:29:d7:ff:47:0d:a2:30:38:89:8b: b1:3d:5d:54:a7:09:23:f6:5d:4f:5c:a5:7a:54:04:35:5b:f1: c1:0b:3b:a2:f0:63:5f:af:d6:2a:f6:09:bc:1a:c2:06:1f:31: f2:dd:95:c3:5b:03:74:6c:29:e9:6b:0e:e0:ca:9a:75:9e:5d: 92:25:40:16:06:ba:43:1d:95:00:c9:74:21:05:83:3a:03:86: b7:01:64:24:f0:46:2c:20:2b:18:10:05:16:8b:8a:20:6b:e3: 03:bb:da:b6:b1:ef:2f:ba:b0:26:e5:01:04:4f:00:3e:34:8a: 90:7e:57:f7:e5:93:cc:78:3d:9a:3f:df:d4:60:67:ca:67:e1: 08:29:34:6d:69:d4:4b:73:cc:13:be:16:a4:e2:5b:39:1b:ed: 7b:ef:c8:58:bf:3a:20:c9:74:a7:c0:bd:f6:4c:fd:1e:ff:99: 48:13:4c:d0:22:b0:5e:00:73:72:d5:cb:14:41:42:5a:3f:46: 21:b8:6d:72:29:90:b8:6c:63:f6:b8:f9:5c:87:33:c4:59:42: 58:98:3f:54:45:ba:0b:0d:fc:39:a9:b2:dc:f2:8d:24:bc:5c: 3f:31:1b:4f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLe4RW8re/XsI7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YjA3YjJmMzktZTFlMi00MTExLTk1YWYtN2I1MmJhNDgxMDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiLmApJKf3EuOhdPlHAivM8mGGjWlAK09mw+ pLlXuRgHHQURF8anE7YjAT0tygcZl8gfNoCf8pxY+JDWBMKpoA1XKXiALorHYsH7 KB9gwXyNaZ1BYLhawB+BoAiULNgPDr75sUWVzICzwA8cVTCKwcbM3HC7N9xieAqC CAtpCCOOtwyWBdXF/7i7lD6MFEfRvc6upbIsba2kZLv8gmsHKg5Y1f7EP2N8oMgU cpw1t4PGgzW70fSQQO6TNE2hVo5GiUc0Jr6SW05TWRySd8Nq31ZsM0YUTSGaOujH fKsY2KLsy2WWU645q2dI/bq5NPIhMlmGVuPvqwxH6BNwVWu1RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKcwifdf/7T0geuLRdnyRw1G2JlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZDU3ODFjZDMtZmNiNC0z NmVlLWEyZDEtMWY3NWE0ZDM3OWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDgtMIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/V1nSR+5S76jdgKl/OBCfXW9Y+3TNpjUXpKdf/Rw2iMDiJi7E9XVSn CSP2XU9cpXpUBDVb8cELO6LwY1+v1ir2CbwawgYfMfLdlcNbA3RsKelrDuDKmnWe XZIlQBYGukMdlQDJdCEFgzoDhrcBZCTwRiwgKxgQBRaLiiBr4wO72rax7y+6sCbl AQRPAD40ipB+V/flk8x4PZo/39RgZ8pn4QgpNG1p1EtzzBO+FqTiWzkb7XvvyFi/ OiDJdKfAvfZM/R7/mUgTTNAisF4Ac3LVyxRBQlo/RiG4bXIpkLhsY/a4+VyHM8RZ QliYP1RFugsN/DmpstzyjSS8XD8xG08= -----END CERTIFICATE-----Generated at Sat Apr 26 20:21:29 2025 by rpki-client