$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa File: cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa (raw, json) Hash identifier: q1vV+hQU8R+JG0b44Rtg6V6imilv0i+9GZmULExqGbI= Subject key identifier: 56:A0:C3:FA:F4:31:98:44:1C:90:04:84:59:0F:67:72:63:F5:73:81 Certificate issuer: /CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Certificate serial: 010D0C9F4328584A03A5483A88188ED50D46D300 Authority key identifier: 3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa Signing time: Thu 29 May 2025 13:01:03 +0000 ROA not before: Thu 29 May 2025 13:01:03 +0000 ROA not after: Wed 27 Aug 2025 13:01:03 +0000 asID: 40948 IP address blocks: 130.51.132.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:03:a5:48:3a:88:18:8e:d5:0d:46:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5597247f-2d88-4c51-805a-7ab2a9af9dc5 Validity Not Before: May 29 13:01:03 2025 GMT Not After : Aug 27 13:01:03 2025 GMT Subject: CN=fb0f5338-7ba6-4b68-9cec-dd8e4363f4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f8:45:d8:86:7e:5a:bc:5b:1e:b2:45:6c:83: 32:8d:5f:57:a9:a9:c8:07:a2:55:33:fa:4a:87:46: f0:07:fe:b1:82:64:3b:09:03:84:f3:59:34:0b:3f: e0:2f:f7:dd:87:ca:b7:9e:b9:f7:42:d3:0d:c1:98: 0e:16:fd:8b:e5:14:0c:ba:36:5c:a5:e3:67:65:a2: cd:99:56:e0:56:27:64:38:bf:99:44:a4:66:55:4c: 0b:db:ec:cc:78:7d:3a:34:89:a5:4f:67:4b:bd:51: f5:1f:e2:6b:d6:cf:ff:5c:9b:76:14:25:c9:85:fb: c8:77:f1:90:e8:18:87:f2:de:b6:7d:b0:24:83:0c: 5d:04:c1:0c:1a:cf:d6:cb:1d:01:46:b6:a7:b2:7d: bd:75:0d:a0:20:12:bd:40:e0:52:24:8d:5f:16:97: e1:17:96:7c:19:31:4a:65:68:03:3d:97:88:d5:ec: fe:bf:cf:f6:01:65:5c:a0:db:94:9c:33:1b:a7:e5: 21:08:e5:e0:1a:26:05:72:79:77:1f:c5:0b:13:43: 59:90:11:8c:1d:9f:44:4f:1b:27:e0:b2:e1:24:9f: d5:8b:38:9f:6f:a4:a3:cc:f5:71:72:15:ff:09:64: db:3c:75:6e:e0:5e:96:ba:af:e8:50:07:8f:c3:df: 12:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A0:C3:FA:F4:31:98:44:1C:90:04:84:59:0F:67:72:63:F5:73:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/cf9fd58f-ca9a-3d2f-a422-a2924475a7f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5/5597247f-2d88-4c51-805a-7ab2a9af9dc5.crl X509v3 Authority Key Identifier: keyid:3C:73:2A:DD:04:B3:6B:02:2D:46:03:FE:E9:87:D2:83:58:1C:8B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5597247f-2d88-4c51-805a-7ab2a9af9dc5.cer sbgp-ipAddrBlock: critical IPv4: 130.51.132.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:ce:99:25:f6:56:c7:99:ce:bb:ba:25:40:48:8d:19:b1:f8: 0c:50:70:80:60:db:21:62:cc:42:6f:73:68:ee:9d:16:21:42: 17:dc:b5:98:c7:25:bf:18:d3:94:eb:a6:43:04:aa:61:59:57: 45:3a:c9:b7:bb:7d:85:7c:3b:1e:a2:6d:88:20:b8:a4:9c:80: f1:af:1a:c0:7c:55:0e:90:6f:01:47:bd:d1:d3:5d:48:3a:40: 2b:4e:04:c4:fb:db:b0:51:ad:e0:8c:fe:0c:df:55:e4:bb:7e: 31:62:6e:dc:68:ce:48:c5:33:76:7c:8b:39:1f:e0:44:a8:37: 55:2f:92:cd:1c:df:11:44:13:4b:20:dd:0a:7c:09:eb:82:76: e6:cb:1a:ae:63:b5:da:2e:27:b8:34:37:c8:51:e4:cf:29:40: 13:f6:4b:81:eb:40:93:e7:f4:07:88:08:65:dd:fe:17:b8:3e: 63:cd:df:69:50:36:b4:08:7a:32:8c:41:e9:02:d1:bd:96:cc: f8:0d:dc:ed:e8:1b:c1:c5:b8:eb:9e:2e:7f:6e:13:80:92:3e: 2b:be:79:65:5a:58:f9:e4:10:d3:1c:2a:8f:34:72:a2:2d:d4: e3:88:20:39:06:8d:50:93:0b:e9:96:bc:66:b5:ca:52:4e:c5: c4:5f:b3:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpUg6iBiO1Q1G0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTU5NzI0N2YtMmQ4OC00YzUxLTgwNWEtN2FiMmE5YWY5 ZGM1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk ZmIwZjUzMzgtN2JhNi00YjY4LTljZWMtZGQ4ZTQzNjNmNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPhF2IZ+WrxbHrJFbIMyjV9XqanIB6JVM/pK h0bwB/6xgmQ7CQOE81k0Cz/gL/fdh8q3nrn3QtMNwZgOFv2L5RQMujZcpeNnZaLN mVbgVidkOL+ZRKRmVUwL2+zMeH06NImlT2dLvVH1H+Jr1s//XJt2FCXJhfvId/GQ 6BiH8t62fbAkgwxdBMEMGs/Wyx0BRransn29dQ2gIBK9QOBSJI1fFpfhF5Z8GTFK ZWgDPZeI1ez+v8/2AWVcoNuUnDMbp+UhCOXgGiYFcnl3H8ULE0NZkBGMHZ9ETxsn 4LLhJJ/Vizifb6SjzPVxchX/CWTbPHVu4F6Wuq/oUAePw98SfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFagw/r0MZhEHJAEhFkPZ3Jj9XOBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3 MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIyYTlhZjlkYzUvY2Y5ZmQ1OGYtY2E5YS0z ZDJmLWE0MjItYTI5MjQ0NzVhN2Y5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU5NzI0N2YtMmQ4OC00YzUxLTgw NWEtN2FiMmE5YWY5ZGM1LzU1OTcyNDdmLTJkODgtNGM1MS04MDVhLTdhYjJhOWFm OWRjNS5jcmwwHwYDVR0jBBgwFoAUPHMq3QSzawItRgP+6YfSg1gci6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81NTk3MjQ3Zi0yZDg4LTRjNTEtODA1YS03YWIy YTlhZjlkYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgjOEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnOmSX2VseZzru6JUBIjRmx+AxQcIBg2yFizEJvc2junRYhQhfctZjH Jb8Y05TrpkMEqmFZV0U6ybe7fYV8Ox6ibYgguKScgPGvGsB8VQ6QbwFHvdHTXUg6 QCtOBMT727BRreCM/gzfVeS7fjFibtxozkjFM3Z8izkf4ESoN1Uvks0c3xFEE0sg 3Qp8CeuCdubLGq5jtdouJ7g0N8hR5M8pQBP2S4HrQJPn9AeICGXd/he4PmPN32lQ NrQIejKMQekC0b2WzPgN3O3oG8HFuOueLn9uE4CSPiu+eWVaWPnkENMcKo80cqIt 1OOIIDkGjVCTC+mWvGa1ylJOxcRfs9w= -----END CERTIFICATE-----Generated at Mon Jun 16 03:28:21 2025 by rpki-client