$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa File: 11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa (raw, json) Hash identifier: pJKl69VSV4RLYpDd20k0fpkpla7ne6jgIuPdtLVy7bE= Subject key identifier: 9A:E1:0D:AA:1B:46:DB:1A:B2:CF:79:2C:FD:9A:50:7A:09:61:3E:60 Certificate issuer: /CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Certificate serial: 010D0C9F43285849244E690B45CCEB1BF1131480 Authority key identifier: B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa Signing time: Mon 10 Mar 2025 13:00:52 +0000 ROA not before: Mon 10 Mar 2025 13:00:52 +0000 ROA not after: Sun 08 Jun 2025 13:00:52 +0000 asID: 10967 IP address blocks: 165.130.64.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:24:4e:69:0b:45:cc:eb:1b:f1:13:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9981c1f-5b90-4ac4-bd3a-17c5452146c3 Validity Not Before: Mar 10 13:00:52 2025 GMT Not After : Jun 8 13:00:52 2025 GMT Subject: CN=78c10a68-d5bb-4441-b54c-b5c76997d4d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:08:18:5b:63:84:5b:80:5b:49:00:6a:10:15: f6:f7:7a:2f:c4:2d:bb:65:c0:9a:fc:d7:07:db:f5: 73:d9:7c:3a:79:43:1c:f3:d4:3a:b6:b4:23:d8:c1: 46:5b:1b:f2:ba:cc:bd:c2:45:b0:31:6d:c3:5b:42: 02:cb:df:ec:27:fc:62:87:2c:bf:89:5f:63:08:1a: 5c:8f:61:d3:06:c7:2b:ab:47:51:0e:49:9d:97:c7: ee:b3:02:93:fb:65:1f:42:97:46:2d:ab:17:44:a2: 47:52:78:62:22:a2:0c:66:87:9d:4c:9d:4b:99:ca: cd:5c:b9:36:6b:32:6d:bf:97:64:cf:5c:a1:a4:3d: b3:8e:21:19:07:09:8a:c1:96:23:ce:cb:b9:af:bd: a8:00:52:01:5b:b5:ce:90:0c:c2:97:b6:d8:06:e3: ce:9b:9d:cc:f7:0e:52:71:b1:38:5d:51:6f:46:af: a4:a7:25:f3:b9:e9:7d:51:a2:b4:fe:07:bb:ac:23: e4:bb:7e:3b:89:72:74:e7:af:c9:e0:25:c5:94:91: c1:f9:53:ec:7e:d2:cc:fd:6a:6e:35:2a:ff:a7:57: 33:d9:c8:41:66:9e:81:8a:c8:62:5c:b8:90:c3:1c: 1e:5d:61:ea:20:df:d9:e3:20:15:0f:b0:f5:29:d9: 09:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:E1:0D:AA:1B:46:DB:1A:B2:CF:79:2C:FD:9A:50:7A:09:61:3E:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/11ea29d3-7930-3fac-83d2-a8f0c9fba314.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.crl X509v3 Authority Key Identifier: keyid:B9:DE:27:16:CA:36:34:09:BD:0B:0C:F6:7D:A5:21:BC:76:80:A8:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9981c1f-5b90-4ac4-bd3a-17c5452146c3.cer sbgp-ipAddrBlock: critical IPv4: 165.130.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:c2:1e:4d:54:40:bc:2b:c0:06:40:0b:c1:9d:49:60:cc:03: 74:ff:57:c0:14:61:f4:45:b5:ce:5f:6d:12:a3:70:83:85:86: ba:04:43:8f:db:a1:0b:d4:f8:9d:e0:7b:e0:49:c3:76:88:be: fb:d8:2b:3c:7a:09:0b:26:8b:74:d6:65:2d:0a:44:c1:ef:13: 8e:6e:e8:d1:be:e2:66:b4:4d:6c:3a:ea:91:07:e1:7a:e3:f7: e4:e2:98:2d:8e:d2:65:f7:58:c2:aa:fe:77:90:d0:23:ad:4e: 20:f6:1a:8f:87:3b:64:ac:0a:c9:ce:f9:7c:77:cd:c1:0d:23: d4:a5:58:4c:ad:3e:d8:04:72:de:17:14:7d:2a:36:5e:b4:f0: 6d:02:7d:35:6c:16:c9:c5:80:c7:67:52:33:1f:7d:c1:a0:7d: ff:59:00:2b:77:7b:45:38:5c:0d:9a:79:8f:6c:00:52:64:c3: 3f:b9:dd:77:34:4f:b9:a2:8a:2a:6b:d5:76:cc:0d:b6:ea:ca: 78:3c:f6:98:f6:ee:0a:d7:54:50:db:86:e5:1e:21:8d:af:d4: 40:5c:61:65:ce:ee:e7:38:64:ea:ea:cf:21:fa:15:cd:bf:cc: b3:19:02:90:c4:b8:82:64:16:bc:d6:31:ef:9a:60:3b:a3:2e: 7b:6d:5c:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTmkLRczrG/ETFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk5ODFjMWYtNWI5MC00YWM0LWJkM2EtMTdjNTQ1MjE0 NmMzMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk NzhjMTBhNjgtZDViYi00NDQxLWI1NGMtYjVjNzY5OTdkNGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlggYW2OEW4BbSQBqEBX293ovxC27ZcCa/NcH 2/Vz2Xw6eUMc89Q6trQj2MFGWxvyusy9wkWwMW3DW0ICy9/sJ/xihyy/iV9jCBpc j2HTBscrq0dRDkmdl8fuswKT+2UfQpdGLasXRKJHUnhiIqIMZoedTJ1LmcrNXLk2 azJtv5dkz1yhpD2zjiEZBwmKwZYjzsu5r72oAFIBW7XOkAzCl7bYBuPOm53M9w5S cbE4XVFvRq+kpyXzuel9UaK0/ge7rCPku347iXJ056/J4CXFlJHB+VPsftLM/Wpu NSr/p1cz2chBZp6BishiXLiQwxweXWHqIN/Z4yAVD7D1KdkJgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrhDaobRtsass95LP2aUHoJYT5gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4 MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1NDUyMTQ2YzMvMTFlYTI5ZDMtNzkzMC0z ZmFjLTgzZDItYThmMGM5ZmJhMzE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzk5ODFjMWYtNWI5MC00YWM0LWJk M2EtMTdjNTQ1MjE0NmMzL2M5OTgxYzFmLTViOTAtNGFjNC1iZDNhLTE3YzU0NTIx NDZjMy5jcmwwHwYDVR0jBBgwFoAUud4nFso2NAm9Cwz2faUhvHaAqNUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9jOTk4MWMxZi01YjkwLTRhYzQtYmQzYS0xN2M1 NDUyMTQ2YzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEpYJAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/CHk1UQLwrwAZAC8GdSWDMA3T/V8AUYfRFtc5fbRKjcIOFhroEQ4/b oQvU+J3ge+BJw3aIvvvYKzx6CQsmi3TWZS0KRMHvE45u6NG+4ma0TWw66pEH4Xrj 9+TimC2O0mX3WMKq/neQ0COtTiD2Go+HO2SsCsnO+Xx3zcENI9SlWEytPtgEct4X FH0qNl608G0CfTVsFsnFgMdnUjMffcGgff9ZACt3e0U4XA2aeY9sAFJkwz+53Xc0 T7miiipr1XbMDbbqyng89pj27grXVFDbhuUeIY2v1EBcYWXO7uc4ZOrqzyH6Fc2/ zLMZApDEuIJkFrzWMe+aYDujLnttXHg= -----END CERTIFICATE-----Generated at Mon Apr 28 06:07:09 2025 by rpki-client