$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa File: 2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa (raw, json) Hash identifier: L0Xd/gBunU7LlkkU+k/9G5ZOS2hlpx8D/K7RNZjcrzs= Subject key identifier: FF:2F:CB:38:68:7C:84:7F:2D:E9:AC:9C:66:16:EF:10:24:C3:E8:F6 Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Certificate serial: 010D0C9F4328584A46A5B0A02EEA6521A9F7BB08 Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa Signing time: Sun 22 Jun 2025 13:01:03 +0000 ROA not before: Sun 22 Jun 2025 13:01:03 +0000 ROA not after: Sat 20 Sep 2025 13:01:03 +0000 asID: 7018 IP address blocks: 130.44.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:46:a5:b0:a0:2e:ea:65:21:a9:f7:bb:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67 Validity Not Before: Jun 22 13:01:03 2025 GMT Not After : Sep 20 13:01:03 2025 GMT Subject: CN=51e82d3d-a3e0-4332-89df-07e7fb568a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:9f:df:e9:0d:2b:c2:3c:45:1f:3d:b6:84: 39:6d:30:25:6d:f4:2b:56:e1:b5:fc:d3:64:61:9d: 30:ad:da:86:ec:84:0a:ed:03:6b:99:1b:aa:a2:b0: 88:1b:b0:ea:fb:2d:25:3f:77:90:35:f0:35:a7:da: fe:25:8d:67:7d:9b:95:38:9b:1c:e4:58:59:fb:34: 60:03:2d:75:21:ae:a3:29:d3:c0:1b:ae:70:51:8f: 5d:87:e3:23:97:c9:9c:20:ee:29:ec:c5:66:5b:36: 59:94:03:ef:0a:04:a5:6c:f6:e4:42:ec:72:98:b8: 90:8a:c8:b6:c3:04:85:a5:59:32:53:9e:68:fd:f7: 9a:42:72:ed:2f:67:73:8e:02:62:c0:c8:4b:04:36: ae:13:47:a2:a4:26:41:3c:6f:46:48:bd:c0:a4:08: 47:19:ea:0a:75:67:e6:06:fb:a5:14:d2:8a:2b:a0: 5a:ed:ff:c6:40:88:39:30:d0:1c:08:f0:21:1e:4e: cb:4f:88:f6:4b:29:82:08:7f:f9:4f:b7:19:4e:2a: d3:56:a4:9e:3c:f9:91:c7:ec:cd:a8:40:12:c8:86: fd:71:36:8a:f7:f7:0c:a6:1d:aa:4f:2c:fe:59:44: 93:c0:97:4c:9e:4a:93:b0:96:8d:bf:ab:7b:d3:89: 2e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2F:CB:38:68:7C:84:7F:2D:E9:AC:9C:66:16:EF:10:24:C3:E8:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/2a74c8bb-738b-37a6-a8c8-592e762d96b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl X509v3 Authority Key Identifier: keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer sbgp-ipAddrBlock: critical IPv4: 130.44.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:c9:00:da:36:ff:8b:a7:f4:30:e0:38:cc:84:53:16:26:45: 57:10:77:c2:4b:82:3e:69:ff:89:62:06:aa:73:99:e7:87:bb: ac:0c:13:92:57:ac:aa:22:f1:9e:2f:32:00:58:cc:a4:e3:1f: 9a:be:c9:9c:46:73:99:ad:31:0c:02:1c:03:52:e5:64:9f:6b: 68:72:16:df:4a:9b:06:ec:32:55:40:76:c3:ed:af:7e:8a:90: 61:9d:2e:50:13:8b:d7:1e:68:60:d9:51:c4:cd:0c:c1:08:dc: da:bb:f8:01:30:53:7a:e8:23:5f:37:92:36:2d:84:ac:fa:81: da:50:a5:83:17:f4:72:3a:a3:0b:90:01:f5:b1:2e:e6:ab:44: 5a:07:b6:bd:cd:64:93:a9:19:dc:6c:22:21:0b:46:a8:89:e2: a0:63:fb:81:d7:56:02:47:3a:84:57:24:f4:22:0c:fc:2a:5c: f8:f1:44:ad:78:84:06:10:62:e8:4a:60:e2:c7:40:7b:fb:a4: 19:d3:fc:3e:63:b3:97:26:5e:15:2c:16:32:4e:61:88:af:61: 2a:dd:61:d0:00:8a:7c:58:fa:e2:cc:bd:fa:e1:16:d2:a6:ed: e7:2d:22:36:40:e4:2e:f2:4c:25:c4:bc:6b:ba:6c:16:17:94: c2:28:d0:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpGpbCgLuplIan3uwgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0 YTY3MB4XDTI1MDYyMjEzMDEwM1oXDTI1MDkyMDEzMDEwM1owLzEtMCsGA1UEAxMk NTFlODJkM2QtYTNlMC00MzMyLTg5ZGYtMDdlN2ZiNTY4YTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPqf3+kNK8I8RR89toQ5bTAlbfQrVuG1/NNk YZ0wrdqG7IQK7QNrmRuqorCIG7Dq+y0lP3eQNfA1p9r+JY1nfZuVOJsc5FhZ+zRg Ay11Ia6jKdPAG65wUY9dh+Mjl8mcIO4p7MVmWzZZlAPvCgSlbPbkQuxymLiQisi2 wwSFpVkyU55o/feaQnLtL2dzjgJiwMhLBDauE0eipCZBPG9GSL3ApAhHGeoKdWfm BvulFNKKK6Ba7f/GQIg5MNAcCPAhHk7LT4j2SymCCH/5T7cZTirTVqSePPmRx+zN qEASyIb9cTaK9/cMph2qTyz+WUSTwJdMnkqTsJaNv6t704kukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8vyzhofIR/LemsnGYW7xAkw+j2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvMmE3NGM4YmItNzM4Yi0z N2E2LWE4YzgtNTkyZTc2MmQ5NmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgizIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzJANo2/4un9DDgOMyEUxYmRVcQd8JLgj5p/4liBqpzmeeHu6wME5JX rKoi8Z4vMgBYzKTjH5q+yZxGc5mtMQwCHANS5WSfa2hyFt9KmwbsMlVAdsPtr36K kGGdLlATi9ceaGDZUcTNDMEI3Nq7+AEwU3roI183kjYthKz6gdpQpYMX9HI6owuQ AfWxLuarRFoHtr3NZJOpGdxsIiELRqiJ4qBj+4HXVgJHOoRXJPQiDPwqXPjxRK14 hAYQYuhKYOLHQHv7pBnT/D5js5cmXhUsFjJOYYivYSrdYdAAinxY+uLMvfrhFtKm 7ectIjZA5C7yTCXEvGu6bBYXlMIo0Kc= -----END CERTIFICATE-----Generated at Tue Jul 1 10:30:11 2025 by rpki-client