$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa File: 2289cf57-959f-3a84-8712-d7d38208f851.roa (raw, json) Hash identifier: 1rfA78/RoVORZaKSvUQsNGXPsmfEQXA6FAdgv4SWCkA= Subject key identifier: 12:89:BD:16:19:C4:6F:4F:BF:75:22:D4:0F:18:98:67:EB:5B:0C:9F Certificate issuer: /CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Certificate serial: 010D0C9F4328584913AC1D25D373ACC218585680 Authority key identifier: 3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 31775 IP address blocks: 130.44.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1d:25:d3:73:ac:c2:18:58:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cfb66bc-dcfd-4c7e-bd00-38e923719ab4 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=90fb890f-6c08-45f9-9c61-258e2ff66428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:00:59:bf:0b:f2:f5:10:68:23:87:c3:91:55: fa:07:e1:3e:67:b5:11:f2:d7:6e:f4:0c:97:e4:41: 13:dd:5f:a6:0e:40:83:4e:3a:79:a1:84:51:2d:15: f8:ad:d8:32:6b:fa:b9:32:36:d4:b2:8a:71:5b:07: f0:c9:64:a1:58:50:ec:fa:a8:52:ea:be:2f:f0:d6: 36:5e:df:3d:20:7b:0d:e1:ac:80:ee:36:15:3b:40: c9:36:84:48:66:64:95:10:2f:03:6e:77:82:12:21: 91:8c:ed:46:79:27:aa:57:59:87:56:fb:7f:3d:35: 01:62:e5:08:1e:f1:99:eb:27:8f:2f:da:ce:5a:11: a7:91:30:fb:12:c0:d8:65:03:5a:a6:1c:0f:4a:29: 46:4b:00:bb:5e:44:58:89:06:14:4d:8f:c4:b4:4d: 5b:57:4b:6a:e1:28:58:c8:cc:0f:db:20:67:bb:f6: f3:70:e2:b0:28:25:db:48:cf:3b:2f:e9:6e:81:f1: dd:8e:9a:63:f7:96:a7:e0:00:78:c1:c3:96:c2:50: 86:26:e6:53:77:ca:8f:91:56:bf:59:86:51:66:2e: 19:38:db:a7:17:1c:55:97:2a:42:91:bb:46:4f:81: 97:67:02:e8:4a:c6:db:4e:77:85:fa:f9:e4:18:0b: f2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:89:BD:16:19:C4:6F:4F:BF:75:22:D4:0F:18:98:67:EB:5B:0C:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/2289cf57-959f-3a84-8712-d7d38208f851.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.crl X509v3 Authority Key Identifier: keyid:3A:40:F3:76:43:CD:0A:7A:FA:BD:DA:79:7D:F1:84:CA:E8:00:4D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1cfb66bc-dcfd-4c7e-bd00-38e923719ab4.cer sbgp-ipAddrBlock: critical IPv4: 130.44.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:67:a9:04:43:28:c8:ba:31:23:ec:69:4f:21:28:67:95:6e: 8b:77:77:bf:7f:cb:24:29:44:55:be:06:61:58:89:56:c9:07: 08:73:86:dc:0b:b2:53:eb:0c:0e:7e:9e:bc:df:25:68:07:2e: ed:cf:67:cf:bf:9a:44:0f:cf:c8:75:8b:a1:f4:5c:70:4d:b8: 3d:0e:6f:18:42:2c:4b:9a:d1:e9:e1:71:31:c6:12:ab:a6:a3: 5a:47:c9:5e:50:d7:0d:98:10:14:5a:be:73:7a:ab:87:a6:d2: 5a:8f:a6:97:49:e7:c8:47:0c:c3:51:5f:01:02:f2:57:e9:2e: 84:53:81:9c:3c:a4:27:01:3e:be:72:48:57:07:be:bc:a8:61: 93:b6:d6:e7:2b:02:f6:1c:ba:9c:e7:e6:2c:9f:6e:86:f2:ce: e5:0c:1d:92:ca:9d:2b:8e:63:c2:bd:7b:4e:96:62:98:02:9b: bb:c7:62:60:d1:f1:54:59:d4:f3:f8:5c:50:7d:83:c7:e9:0d: 8c:9c:07:c9:97:ea:36:0d:f4:52:1e:86:65:22:66:ca:0d:fc: 21:ab:13:9a:54:54:ca:62:52:69:ff:fb:33:21:1c:ce:57:ec: fd:f9:09:d8:75:87:a4:d2:2a:e3:8f:47:d0:d2:0f:d1:ba:05: 79:63:85:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrB0l03OswhhYVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmYjY2YmMtZGNmZC00YzdlLWJkMDAtMzhlOTIzNzE5 YWI0MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk OTBmYjg5MGYtNmMwOC00NWY5LTljNjEtMjU4ZTJmZjY2NDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wBZvwvy9RBoI4fDkVX6B+E+Z7UR8tdu9AyX 5EET3V+mDkCDTjp5oYRRLRX4rdgya/q5MjbUsopxWwfwyWShWFDs+qhS6r4v8NY2 Xt89IHsN4ayA7jYVO0DJNoRIZmSVEC8DbneCEiGRjO1GeSeqV1mHVvt/PTUBYuUI HvGZ6yePL9rOWhGnkTD7EsDYZQNaphwPSilGSwC7XkRYiQYUTY/EtE1bV0tq4ShY yMwP2yBnu/bzcOKwKCXbSM87L+lugfHdjppj95an4AB4wcOWwlCGJuZTd8qPkVa/ WYZRZi4ZONunFxxVlypCkbtGT4GXZwLoSsbbTneF+vnkGAvygwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBKJvRYZxG9Pv3Ui1A8YmGfrWwyfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2Zi NjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5MjM3MTlhYjQvMjI4OWNmNTctOTU5Zi0z YTg0LTg3MTItZDdkMzgyMDhmODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWNmYjY2YmMtZGNmZC00YzdlLWJk MDAtMzhlOTIzNzE5YWI0LzFjZmI2NmJjLWRjZmQtNGM3ZS1iZDAwLTM4ZTkyMzcx OWFiNC5jcmwwHwYDVR0jBBgwFoAUOkDzdkPNCnr6vdp5ffGEyugATYwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xY2ZiNjZiYy1kY2ZkLTRjN2UtYmQwMC0zOGU5 MjM3MTlhYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgiwYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADVnqQRDKMi6MSPsaU8hKGeVbot3d79/yyQpRFW+BmFYiVbJBwhzhtwL slPrDA5+nrzfJWgHLu3PZ8+/mkQPz8h1i6H0XHBNuD0ObxhCLEua0enhcTHGEqum o1pHyV5Q1w2YEBRavnN6q4em0lqPppdJ58hHDMNRXwEC8lfpLoRTgZw8pCcBPr5y SFcHvryoYZO21ucrAvYcupzn5iyfbobyzuUMHZLKnSuOY8K9e06WYpgCm7vHYmDR 8VRZ1PP4XFB9g8fpDYycB8mX6jYN9FIehmUiZsoN/CGrE5pUVMpiUmn/+zMhHM5X 7P35Cdh1h6TSKuOPR9DSD9G6BXljhYs= -----END CERTIFICATE-----Generated at Mon Apr 28 18:45:06 2025 by rpki-client