$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa File: 85b99b16-3c92-33b6-9ed8-133467e30af3.roa (raw, json) Hash identifier: g1Eh6c/ZoMyEsLtwYyFOw+sTmpyWxE9uM4SvooUUAJA= Subject key identifier: 03:79:10:A6:E1:57:59:0A:7E:F6:FB:AE:F2:1B:1A:DC:7E:08:D9:13 Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Certificate serial: 010D0C9F43285849CE9A7D8DF6E16E57863B3C80 Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa Signing time: Sat 10 May 2025 13:01:00 +0000 ROA not before: Sat 10 May 2025 13:01:00 +0000 ROA not after: Fri 08 Aug 2025 13:01:00 +0000 asID: 7342 IP address blocks: 209.131.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ce:9a:7d:8d:f6:e1:6e:57:86:3b:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2 Validity Not Before: May 10 13:01:00 2025 GMT Not After : Aug 8 13:01:00 2025 GMT Subject: CN=c4a2095a-e6be-4319-8760-2623dca3afe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:3c:00:86:10:06:6a:e7:49:68:ac:88:0d:fa: 46:1f:83:a1:ee:b9:97:7a:0f:d8:b9:55:82:9f:a2: f8:58:32:e0:7d:e8:b7:a3:0f:4f:22:c0:8a:3f:72: c5:14:62:f2:44:34:f8:7a:4a:37:c8:f8:5c:ca:aa: da:16:39:31:45:3d:7c:6c:bb:c3:1d:47:57:98:7c: cb:31:b3:98:85:ea:85:da:2b:f7:1a:f6:af:7d:c9: cf:dd:22:3d:57:f8:e6:6d:fa:0d:4b:57:b4:20:e3: 2e:98:8c:06:b8:06:9e:4f:e3:48:3f:3d:ba:39:0a: 75:1a:ae:1d:ee:e8:61:40:0b:14:b5:45:f8:e2:e9: 47:eb:9d:4b:cf:1e:36:b0:a9:20:f2:e9:bf:3e:66: fd:49:6c:bb:7e:5f:06:7c:3f:be:5f:d4:76:25:7d: b0:c2:fd:30:89:95:f8:b1:2a:7d:2c:6f:48:c9:70: 71:83:40:22:f5:e4:39:4e:7f:b3:28:1b:39:eb:ea: 54:20:7c:49:1d:d3:3c:8a:a9:9a:5d:59:3b:96:4f: f3:9f:8b:e4:1d:31:22:56:ef:66:7a:d5:27:28:bb: 33:19:40:06:3e:ab:9c:a0:b4:ae:64:95:c2:33:8d: cb:94:26:ff:96:7e:93:4a:02:d4:3b:c5:3f:3a:67: 52:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:79:10:A6:E1:57:59:0A:7E:F6:FB:AE:F2:1B:1A:DC:7E:08:D9:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/85b99b16-3c92-33b6-9ed8-133467e30af3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl X509v3 Authority Key Identifier: keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer sbgp-ipAddrBlock: critical IPv4: 209.131.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:43:2b:fa:c2:e3:75:f4:43:92:b5:d0:90:f7:dd:ba:f6:38: 70:05:3a:82:31:86:22:88:33:b8:75:9d:5f:7b:b2:f5:6b:b0: 0e:50:ef:b3:37:fb:a0:82:2c:1f:f1:d0:7a:20:cf:91:a3:40: 64:8b:92:4a:73:78:79:3f:45:cf:bc:fd:5c:ba:e2:cc:cf:43: c0:1b:4c:c2:df:0d:e2:4d:0d:e3:85:25:29:0b:96:f5:95:73: 2a:47:42:51:2a:47:a6:73:ad:84:f7:07:f8:21:3e:58:4e:d2: 47:63:a1:32:06:f3:40:00:37:2f:58:a1:39:3f:79:89:9f:1b: e1:13:8a:f3:09:fc:c9:8a:35:3c:f6:69:ab:06:be:b0:ca:77: 5f:3b:1c:6a:74:ae:41:07:69:65:d8:13:e3:48:b5:ca:7d:4b: b9:13:00:88:66:7a:5f:4c:79:fc:92:8d:24:f5:ab:0f:6f:fc: 10:d7:98:90:b2:fa:a7:7a:47:20:ea:8d:61:aa:1b:38:0d:68: 1a:c6:e8:ce:fb:ff:af:8a:82:b1:d6:b4:13:e4:42:63:be:96: 5e:8a:12:ee:a1:51:33:33:e0:38:70:9c:0e:6f:cc:c9:6e:5f: d0:1e:62:fc:dc:4f:6c:4f:d8:63:4d:15:b9:f7:7e:ba:03:97: cb:e4:b4:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmn2N9uFuV4Y7PIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz NmMyMB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk YzRhMjA5NWEtZTZiZS00MzE5LTg3NjAtMjYyM2RjYTNhZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zwAhhAGaudJaKyIDfpGH4Oh7rmXeg/YuVWC n6L4WDLgfei3ow9PIsCKP3LFFGLyRDT4eko3yPhcyqraFjkxRT18bLvDHUdXmHzL MbOYheqF2iv3GvavfcnP3SI9V/jmbfoNS1e0IOMumIwGuAaeT+NIPz26OQp1Gq4d 7uhhQAsUtUX44ulH651Lzx42sKkg8um/Pmb9SWy7fl8GfD++X9R2JX2wwv0wiZX4 sSp9LG9IyXBxg0Ai9eQ5Tn+zKBs56+pUIHxJHdM8iqmaXVk7lk/zn4vkHTEiVu9m etUnKLszGUAGPqucoLSuZJXCM43LlCb/ln6TSgLUO8U/OmdS8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAN5EKbhV1kKfvb7rvIbGtx+CNkTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4 ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvODViOTliMTYtM2M5Mi0z M2I2LTllZDgtMTMzNDY3ZTMwYWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4 YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0YOCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtDK/rC43X0Q5K10JD33br2OHAFOoIxhiKIM7h1nV97svVrsA5Q77M3 +6CCLB/x0Hogz5GjQGSLkkpzeHk/Rc+8/Vy64szPQ8AbTMLfDeJNDeOFJSkLlvWV cypHQlEqR6ZzrYT3B/ghPlhO0kdjoTIG80AANy9YoTk/eYmfG+ETivMJ/MmKNTz2 aasGvrDKd187HGp0rkEHaWXYE+NItcp9S7kTAIhmel9MefySjST1qw9v/BDXmJCy +qd6RyDqjWGqGzgNaBrG6M77/6+KgrHWtBPkQmO+ll6KEu6hUTMz4DhwnA5vzMlu X9AeYvzcT2xP2GNNFbn3froDl8vktF8= -----END CERTIFICATE-----Generated at Sun May 11 09:36:04 2025 by rpki-client