$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fb66a96f-8123-3ecb-94b4-bed93ab4d39e.roa File: fb66a96f-8123-3ecb-94b4-bed93ab4d39e.roa (raw, json) Hash identifier: Jw6ies2hvQvtXA+x5kO4nlCfWvmYwBcgcjOi7EB/6tA= Subject key identifier: 3D:5A:5E:A6:C3:C8:3E:05:BD:9E:A0:59:5A:1D:3F:16:77:07:64:F3 Certificate issuer: /CN=d45613e1-c70f-4ce1-996e-e01d89469087 Certificate serial: 010D0C9F432858498CFEFE9E42AF5A9F776989C0 Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fb66a96f-8123-3ecb-94b4-bed93ab4d39e.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 29802 IP address blocks: 130.254.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:fe:fe:9e:42:af:5a:9f:77:69:89:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=949e17a3-7bd9-4577-80f0-342802b5c5f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b6:5b:1b:29:64:1c:89:dd:9b:5e:ad:e5:52: aa:fb:5a:95:98:8d:5c:a7:5a:c2:28:fd:f5:35:3c: 7d:51:34:03:6c:64:f5:a9:27:3f:bb:cf:42:31:0a: 49:ac:9a:4d:df:3a:8d:e0:11:37:93:f0:ed:38:e6: 1d:dd:7f:e2:54:6b:8e:4d:5b:46:0f:32:ea:48:90: 76:50:fd:81:1d:6d:10:9d:28:fe:d5:46:86:8f:27: 52:98:d4:5e:50:47:91:a7:62:96:31:c1:1f:4a:6f: bd:b4:32:cf:35:9f:a5:4f:62:e4:af:86:5a:70:c7: 62:6a:1c:bd:f0:83:60:ec:01:23:19:38:31:64:23: 7e:10:bc:13:38:4f:d7:0c:75:2b:d5:29:75:27:5b: 1e:c3:31:fc:80:d2:a5:1a:f1:22:c3:5a:cb:f3:b1: 19:51:eb:5b:24:df:ed:06:77:0f:77:7e:47:ef:0a: 94:a7:8d:c9:d3:02:2a:64:92:27:7b:73:1a:5a:dd: bf:9c:cd:28:fb:f5:97:fc:a3:a2:83:82:04:f9:71: 75:a3:55:b6:27:e8:e5:5e:eb:bd:cb:e0:f1:a3:3d: e5:b4:9c:dc:ad:09:bb:40:ae:d6:44:b1:18:dd:c1: 2d:90:05:bd:1d:17:e4:a3:9c:7a:ee:b6:33:70:d4: ea:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5A:5E:A6:C3:C8:3E:05:BD:9E:A0:59:5A:1D:3F:16:77:07:64:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/fb66a96f-8123-3ecb-94b4-bed93ab4d39e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl X509v3 Authority Key Identifier: keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer sbgp-ipAddrBlock: critical IPv4: 130.254.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:5f:c8:5d:e8:41:e7:b8:e2:28:af:0a:6e:5b:af:58:f5:17: 29:83:48:4f:0c:9f:68:29:cf:f8:6d:b4:aa:2c:0e:c3:b8:17: 93:cb:2c:d4:83:3b:26:32:1f:46:a1:83:53:c1:c2:fb:e7:7d: 9f:da:23:14:36:35:db:27:0d:ce:c0:6d:5c:0a:05:8d:8c:99: 4e:21:b9:56:64:69:97:cc:86:e8:4f:32:81:a4:b3:29:57:15: 54:f8:9b:66:ce:9d:c1:9f:aa:2d:26:74:85:e1:0c:df:95:fe: b2:70:ad:90:9a:e2:05:49:7f:8f:9c:97:ab:70:0d:2f:f8:eb: 73:58:fe:20:f6:fc:10:89:8c:bf:08:02:50:2e:e5:b6:71:c9: 67:5b:b7:9f:9f:fc:02:30:5d:0b:5b:be:f0:f1:df:03:12:ff: 18:ab:06:1c:c3:5f:f5:a7:8e:59:26:6b:e6:bb:11:75:4d:4a: 43:51:f3:7f:8f:a4:2f:1b:6e:48:52:a9:f1:ef:6e:63:13:97: c4:07:1c:81:40:99:fd:fa:09:19:12:f5:dd:06:b2:94:24:ad: 36:cc:b0:80:43:2c:b9:ff:5b:1a:9e:e0:46:27:8d:e3:1b:cb: 72:19:d5:9f:2e:fa:89:3a:7f:98:9a:2c:2e:4f:21:0e:b0:49: 50:b2:5c:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/v6eQq9an3dpicAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5 MDg3MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk OTQ5ZTE3YTMtN2JkOS00NTc3LTgwZjAtMzQyODAyYjVjNWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7ZbGylkHIndm16t5VKq+1qVmI1cp1rCKP31 NTx9UTQDbGT1qSc/u89CMQpJrJpN3zqN4BE3k/DtOOYd3X/iVGuOTVtGDzLqSJB2 UP2BHW0QnSj+1UaGjydSmNReUEeRp2KWMcEfSm+9tDLPNZ+lT2Lkr4ZacMdiahy9 8INg7AEjGTgxZCN+ELwTOE/XDHUr1Sl1J1sewzH8gNKlGvEiw1rL87EZUetbJN/t BncPd35H7wqUp43J0wIqZJIne3MaWt2/nM0o+/WX/KOig4IE+XF1o1W2J+jlXuu9 y+Dxoz3ltJzcrQm7QK7WRLEY3cEtkAW9HRfko5x67rYzcNTqEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1aXqbDyD4FvZ6gWVodPxZ3B2TzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2 MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvZmI2NmE5NmYtODEyMy0z ZWNiLTk0YjQtYmVkOTNhYjRkMzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5 NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2 OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgv4pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFfyF3oQee44iivCm5br1j1FymDSE8Mn2gpz/httKosDsO4F5PLLNSD OyYyH0ahg1PBwvvnfZ/aIxQ2NdsnDc7AbVwKBY2MmU4huVZkaZfMhuhPMoGksylX FVT4m2bOncGfqi0mdIXhDN+V/rJwrZCa4gVJf4+cl6twDS/463NY/iD2/BCJjL8I AlAu5bZxyWdbt5+f/AIwXQtbvvDx3wMS/xirBhzDX/Wnjlkma+a7EXVNSkNR83+P pC8bbkhSqfHvbmMTl8QHHIFAmf36CRkS9d0GspQkrTbMsIBDLLn/Wxqe4EYnjeMb y3IZ1Z8u+ok6f5iaLC5PIQ6wSVCyXH4= -----END CERTIFICATE-----Generated at Sat Apr 26 16:04:19 2025 by rpki-client