$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa File: cad5ca65-956d-31bd-87ac-8299da4f56ec.roa (raw, json) Hash identifier: cLzYmXaZTtbnzmVpN3kLznrxmvy/JDhVVgkdN5BqED0= Subject key identifier: 61:C2:64:D1:CF:B6:D6:39:8C:F2:41:64:5F:D0:4A:39:AA:B7:43:F0 Certificate issuer: /CN=1347cdae-54c7-4fcb-9019-0bee16977198 Certificate serial: 010D0C9F43285849E7BA6F9FF08F8E50C65F3400 Authority key identifier: 29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa Signing time: Mon 19 May 2025 13:01:01 +0000 ROA not before: Mon 19 May 2025 13:01:01 +0000 ROA not after: Sun 17 Aug 2025 13:01:01 +0000 asID: 25656 IP address blocks: 130.74.0.0/16 maxlen: 16 130.74.0.0/17 maxlen: 17 130.74.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:e7:ba:6f:9f:f0:8f:8e:50:c6:5f:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1347cdae-54c7-4fcb-9019-0bee16977198 Validity Not Before: May 19 13:01:01 2025 GMT Not After : Aug 17 13:01:01 2025 GMT Subject: CN=ae30b9c8-f1b0-4fca-bccd-604ebc19e0fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:bd:fb:9e:be:3e:73:d1:74:e3:ed:e4:2f: 0a:ba:ab:0d:0d:e0:b6:2d:93:d2:8e:12:ed:a1:c6: c0:c4:bf:a2:9b:7b:d8:fb:7a:3e:40:79:0d:93:0b: f4:58:3a:9f:c8:0c:26:b3:33:81:95:c4:b7:b6:9e: 27:aa:d4:48:fa:dc:26:d1:d0:d9:5d:70:59:1b:84: fe:78:6c:02:db:14:16:a0:ff:5a:d7:33:02:6b:3e: 3c:c0:dc:6c:98:8c:9e:0e:65:16:69:b0:b0:a9:43: 6b:c9:5b:50:66:83:18:e9:ec:aa:98:33:17:fa:53: c6:96:f3:b6:96:2b:23:c4:98:dd:ce:10:64:9b:1c: 32:62:fe:ec:8a:37:6d:79:d7:17:77:8a:4f:48:c8: c0:22:e3:75:66:1a:6d:d8:38:87:78:3c:89:61:30: 49:4a:18:36:1c:6c:77:0e:79:b3:07:21:ff:52:7f: 7a:02:2c:85:ba:5f:b5:2b:e4:c3:6e:4e:61:cd:10: 20:3b:03:37:cd:72:1c:03:77:4a:f6:8a:b0:94:d5: 59:c3:79:cf:fb:2d:3b:e0:88:3d:b0:b4:93:b7:39: a5:95:47:67:7a:a1:ae:07:6e:5b:19:94:32:6c:d9: e6:d1:18:10:44:b2:10:48:bd:fa:5d:5d:9b:e4:5d: 06:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C2:64:D1:CF:B6:D6:39:8C:F2:41:64:5F:D0:4A:39:AA:B7:43:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/cad5ca65-956d-31bd-87ac-8299da4f56ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198/1347cdae-54c7-4fcb-9019-0bee16977198.crl X509v3 Authority Key Identifier: keyid:29:C9:3E:41:B6:86:FB:0B:EA:53:17:40:CB:91:D0:B1:34:B2:36:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1347cdae-54c7-4fcb-9019-0bee16977198.cer sbgp-ipAddrBlock: critical IPv4: 130.74.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:33:84:86:cf:ab:34:48:d0:ee:7c:50:eb:48:c9:87:0b:e5: ff:c6:69:64:5c:7e:b6:93:3b:2c:33:8e:c2:31:2e:dd:dd:df: 5a:16:e0:7e:2f:2e:b0:f5:8c:91:4f:61:d1:05:88:16:bf:15: 4d:00:3d:14:81:b5:08:1a:1b:74:de:3e:e9:77:86:e1:a1:e6: f6:9f:3d:3b:4d:36:4f:b1:9c:c5:f3:76:b1:3c:00:cf:a4:1c: 76:01:66:c3:06:ef:3b:bd:68:0d:7f:d1:aa:4f:bd:88:bc:d7: 34:7e:e7:b3:da:42:06:eb:ad:8f:b2:bd:65:05:ee:9a:eb:b2: bf:2d:92:98:24:14:74:ab:ee:65:21:b3:d7:09:f5:cb:63:a1: fe:f2:63:ec:df:1d:cf:29:51:33:2b:13:43:cc:6e:93:3f:a3: ca:5a:34:a0:1f:41:45:92:57:8a:df:2e:a4:ff:b0:e5:a4:74: 9f:1e:39:43:6d:04:22:bd:02:84:b9:50:75:51:4d:e1:5c:e6: 7d:86:50:25:cd:27:b5:4a:4f:7a:e9:8e:8f:67:18:7b:5a:50: f5:c5:f9:7a:d0:ff:8e:24:f3:36:e2:95:9e:73:0c:03:dd:89: d5:b9:56:9f:78:98:bd:a6:70:6b:62:91:1d:1b:c0:58:13:73: 2c:cf:13:ea -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnnum+f8I+OUMZfNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM0N2NkYWUtNTRjNy00ZmNiLTkwMTktMGJlZTE2OTc3 MTk4MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk YWUzMGI5YzgtZjFiMC00ZmNhLWJjY2QtNjA0ZWJjMTllMGZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG29+56+PnPRdOPt5C8KuqsNDeC2LZPSjhLt ocbAxL+im3vY+3o+QHkNkwv0WDqfyAwmszOBlcS3tp4nqtRI+twm0dDZXXBZG4T+ eGwC2xQWoP9a1zMCaz48wNxsmIyeDmUWabCwqUNryVtQZoMY6eyqmDMX+lPGlvO2 lisjxJjdzhBkmxwyYv7sijdtedcXd4pPSMjAIuN1Zhpt2DiHeDyJYTBJShg2HGx3 DnmzByH/Un96AiyFul+1K+TDbk5hzRAgOwM3zXIcA3dK9oqwlNVZw3nP+y074Ig9 sLSTtzmllUdneqGuB25bGZQybNnm0RgQRLIQSL36XV2b5F0G4QIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFGHCZNHPttY5jPJBZF/QSjmqt0PwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3 Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVlMTY5NzcxOTgvY2FkNWNhNjUtOTU2ZC0z MWJkLTg3YWMtODI5OWRhNGY1NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMTM0N2NkYWUtNTRjNy00ZmNiLTkw MTktMGJlZTE2OTc3MTk4LzEzNDdjZGFlLTU0YzctNGZjYi05MDE5LTBiZWUxNjk3 NzE5OC5jcmwwHwYDVR0jBBgwFoAUKck+QbaG+wvqUxdAy5HQsTSyNvAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xMzQ3Y2RhZS01NGM3LTRmY2ItOTAxOS0wYmVl MTY5NzcxOTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgkowVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEADjOEhs+rNEjQ7nxQ60jJhwvl/8ZpZFx+tpM7LDOOwjEu3d3fWhbgfi8u sPWMkU9h0QWIFr8VTQA9FIG1CBobdN4+6XeG4aHm9p89O002T7GcxfN2sTwAz6Qc dgFmwwbvO71oDX/Rqk+9iLzXNH7ns9pCBuutj7K9ZQXumuuyvy2SmCQUdKvuZSGz 1wn1y2Oh/vJj7N8dzylRMysTQ8xukz+jylo0oB9BRZJXit8upP+w5aR0nx45Q20E Ir0ChLlQdVFN4VzmfYZQJc0ntUpPeumOj2cYe1pQ9cX5etD/jiTzNuKVnnMMA92J 1blWn3iYvaZwa2KRHRvAWBNzLM8T6g== -----END CERTIFICATE-----Generated at Mon Jun 16 14:46:49 2025 by rpki-client