$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa File: 6420c580-fa73-384a-87f8-f301e863e9de.roa (raw, json) Hash identifier: CE3/qoPzy9Sj3KLNyLSZQzWnX9BK3t1L1zEvk2+ADXI= Subject key identifier: D3:9C:CB:38:0E:2D:62:BB:8E:52:50:6B:17:3E:CC:A2:87:0A:21:B0 Certificate issuer: /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Certificate serial: 010D0C9F43285849ED2F688865570C445EF5BC00 Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa Signing time: Wed 21 May 2025 11:55:56 +0000 ROA not before: Wed 21 May 2025 11:55:56 +0000 ROA not after: Tue 19 Aug 2025 11:55:56 +0000 asID: 198949 IP address blocks: 130.132.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ed:2f:68:88:65:57:0c:44:5e:f5:bc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e Validity Not Before: May 21 11:55:56 2025 GMT Not After : Aug 19 11:55:56 2025 GMT Subject: CN=c6baf6e4-ce72-4db1-a163-5bd157d8454c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:27:31:6e:79:db:68:8d:71:ca:f8:b4:6a:8f: df:d7:b5:e2:da:8a:60:d0:ed:20:0d:e8:7d:79:b3: 0a:6e:4f:5f:ec:e4:f8:99:eb:50:e2:9d:67:52:d0: 71:ff:25:33:d8:f9:f2:42:6e:f1:21:0c:d0:8b:ee: 78:35:b0:91:45:e9:c0:89:f7:3b:98:e8:ec:b5:23: 47:56:00:8d:8e:18:d7:b5:4b:17:98:8e:84:8c:75: 77:b1:10:e7:51:28:d5:fd:76:de:f1:46:d2:2b:12: ac:a1:ad:24:45:44:2a:b8:c8:34:34:e2:84:3f:a8: e1:8c:7a:72:ea:d9:24:6a:b2:38:af:10:ca:e3:f1: 65:47:21:71:26:95:e3:9e:40:e3:43:5a:14:3e:69: f7:0b:2e:ec:ec:96:2a:bd:d2:d0:e1:0b:b2:21:41: c1:16:f6:06:35:d4:24:a8:b2:f9:03:e7:ba:7b:0f: 9a:31:80:bd:1b:2e:01:b8:56:d5:f9:98:4e:56:79: 00:2f:2d:50:50:b1:d2:3f:e9:14:21:73:63:18:af: 6d:da:20:cb:3b:7e:1c:8d:7b:8f:93:18:10:b5:fa: bd:12:ac:14:1b:49:ae:a8:cc:2e:75:78:61:a0:98: 45:c7:ba:2c:69:1b:86:d0:5e:c5:0e:6e:fa:12:cf: 57:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9C:CB:38:0E:2D:62:BB:8E:52:50:6B:17:3E:CC:A2:87:0A:21:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/6420c580-fa73-384a-87f8-f301e863e9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl X509v3 Authority Key Identifier: keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer sbgp-ipAddrBlock: critical IPv4: 130.132.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:f7:98:49:a2:f6:a1:0e:d1:87:76:82:26:74:33:05:9d:19: a8:86:ec:a8:85:d2:c1:98:ff:16:15:e5:18:fc:47:16:75:9f: 7b:f8:27:85:80:1c:62:cf:68:39:62:7a:55:c8:3b:aa:17:a3: 77:08:87:04:a0:02:65:47:2c:a6:65:d5:c5:7b:fc:59:34:5d: 50:6f:46:3d:8e:d6:a3:b6:df:51:51:11:4f:0e:df:f8:e5:c3: f4:8e:de:31:88:94:01:c4:32:6d:62:2b:a4:44:42:d3:6d:0c: c4:5f:ce:2c:4e:d9:07:79:88:9e:68:a2:a8:2b:56:da:f8:a5: 96:f2:8b:b9:36:04:72:65:25:d2:be:e4:cc:f6:18:27:03:44: 73:ff:0f:86:3b:b5:eb:47:50:72:98:61:32:04:11:5d:6a:50: 47:42:45:13:7c:ac:2a:86:49:53:d8:14:3b:4c:cd:d7:33:ef: e3:00:a4:39:f8:cc:b9:4e:82:3e:61:3d:a3:9e:41:e2:9c:50: 1d:47:38:1c:09:d1:e1:74:28:4a:db:bb:50:fb:a5:e9:9b:be: 87:12:6e:9b:b3:83:85:00:b1:7d:d4:9f:54:1e:62:f8:c5:a0: ea:16:b6:f7:e1:17:c6:e7:64:c6:17:1c:e9:e5:1a:6b:dc:1b: c0:c0:a6:7d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEntL2iIZVcMRF71vAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz MDdlMB4XDTI1MDUyMTExNTU1NloXDTI1MDgxOTExNTU1NlowLzEtMCsGA1UEAxMk YzZiYWY2ZTQtY2U3Mi00ZGIxLWExNjMtNWJkMTU3ZDg0NTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ScxbnnbaI1xyvi0ao/f17Xi2opg0O0gDeh9 ebMKbk9f7OT4metQ4p1nUtBx/yUz2PnyQm7xIQzQi+54NbCRRenAifc7mOjstSNH VgCNjhjXtUsXmI6EjHV3sRDnUSjV/Xbe8UbSKxKsoa0kRUQquMg0NOKEP6jhjHpy 6tkkarI4rxDK4/FlRyFxJpXjnkDjQ1oUPmn3Cy7s7JYqvdLQ4QuyIUHBFvYGNdQk qLL5A+e6ew+aMYC9Gy4BuFbV+ZhOVnkALy1QULHSP+kUIXNjGK9t2iDLO34cjXuP kxgQtfq9EqwUG0muqMwudXhhoJhFx7osaRuG0F7FDm76Es9XDQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFNOcyzgOLWK7jlJQaxc+zKKHCiGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvNjQyMGM1ODAtZmE3My0z ODRhLTg3ZjgtZjMwMWU4NjNlOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0 MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx NjY2NDMwN2UuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAgoQwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAMveYSaL2oQ7Rh3aCJnQzBZ0ZqIbsqIXSwZj/FhXlGPxHFnWfe/gnhYAc Ys9oOWJ6Vcg7qhejdwiHBKACZUcspmXVxXv8WTRdUG9GPY7Wo7bfUVERTw7f+OXD 9I7eMYiUAcQybWIrpERC020MxF/OLE7ZB3mInmiiqCtW2villvKLuTYEcmUl0r7k zPYYJwNEc/8Phju160dQcphhMgQRXWpQR0JFE3ysKoZJU9gUO0zN1zPv4wCkOfjM uU6CPmE9o55B4pxQHUc4HAnR4XQoStu7UPul6Zu+hxJum7ODhQCxfdSfVB5i+MWg 6ha29+EXxudkxhcc6eUaa9wbwMCmfQ== -----END CERTIFICATE-----Generated at Mon Jun 30 15:04:02 2025 by rpki-client