$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/97d56046-cf12-32f2-948a-53b9605ab643.roa File: 97d56046-cf12-32f2-948a-53b9605ab643.roa (raw, json) Hash identifier: baNP+se61FibJB44iBi3oQChx9NAYe3WOxuumy2SzCY= Subject key identifier: 9F:58:3F:98:47:9B:51:C4:54:D3:D6:F9:4C:90:15:40:09:D2:CE:28 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F43285849C20A1C380A4BB6629E009C00 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/97d56046-cf12-32f2-948a-53b9605ab643.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 393591 IP address blocks: 130.45.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:1c:38:0a:4b:b6:62:9e:00:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=a0e980b2-96d8-40f5-9ac9-b552967a4d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:73:f0:e6:99:d6:49:b6:86:0b:c3:06:a6: 3f:a0:6e:21:fb:d9:03:9a:2b:5a:e5:67:8a:d4:a4: 81:f8:52:80:22:2a:b0:88:97:26:e1:c6:b2:32:d8: 38:91:a5:da:23:be:15:a8:66:7a:65:c7:f2:64:23: ca:73:7e:35:6d:a1:57:3d:95:e5:4b:52:7c:04:23: ed:a4:9c:37:d1:39:ac:88:d7:b2:f0:2c:11:80:2a: 4e:a8:8e:1b:e8:5e:40:2a:7b:d9:6c:42:51:34:92: 86:86:e0:e5:d2:dd:0e:93:24:30:68:c6:65:9b:2d: 11:aa:01:4b:ee:a5:66:2c:14:fd:4e:e1:0f:24:a0: 4a:27:7f:bc:e4:dd:d0:84:d0:51:04:29:58:b8:a8: 8b:67:02:5c:e2:5f:10:8d:90:2b:27:9a:a8:c0:eb: 9a:6b:5a:bd:73:c4:d5:83:6a:6b:bd:d9:45:b9:82: a8:ad:0b:d8:8a:71:82:61:89:a0:cd:ec:4d:81:46: 9d:7e:71:ed:1a:1c:5f:8f:49:95:a1:1d:a3:98:f6: 0a:bb:a1:5f:70:19:f4:e7:43:ee:02:bd:cf:96:f9: f5:0d:29:ed:3a:e7:27:63:45:42:f6:9f:d4:70:e5: c4:d3:e8:d2:d6:ea:e1:12:c1:29:64:6b:d6:36:1d: 00:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:58:3F:98:47:9B:51:C4:54:D3:D6:F9:4C:90:15:40:09:D2:CE:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/97d56046-cf12-32f2-948a-53b9605ab643.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv4: 130.45.148.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:24:82:6d:4e:62:54:48:24:5c:bd:06:4a:83:87:57:69:a7: a4:58:ec:41:40:ca:5a:86:3d:ae:62:74:78:f7:7e:72:11:d2: d0:47:ca:2c:d6:a2:c8:0c:18:e7:0b:bd:3e:d5:2b:c6:d0:bc: a0:7a:db:8e:f7:ad:34:e5:d0:dd:88:46:6d:22:91:58:73:49: 0b:92:34:b1:23:81:3a:8e:e5:0d:f1:52:01:5a:6b:d7:b7:89: 2f:af:a6:d3:94:0d:d2:7b:ce:db:7e:a7:af:3a:6f:7f:e2:8d: 4a:45:e1:5c:25:45:ec:33:8e:9d:f0:ee:b8:62:6c:c6:dd:c0: b7:27:2f:9b:69:0e:d0:16:23:cd:8b:0e:d1:e4:4c:fb:b4:56: a0:6f:f5:8c:a4:0c:52:35:ca:12:ce:b5:cf:d0:44:79:bb:82: 3c:09:6a:89:48:5a:1c:d1:d9:b3:c6:65:f1:c9:0c:b2:94:6f: fc:20:ba:d5:0c:d5:b2:c3:6b:67:af:70:f2:1c:9f:14:ce:13: 3c:73:72:7a:ea:5c:f9:75:d3:0f:40:1b:dc:dc:eb:59:34:91: 8f:cb:79:37:73:c0:f7:95:a8:5a:e8:34:68:5d:2e:ea:59:e6: ff:f3:b3:a4:bd:fe:4c:57:db:8c:a4:3c:96:46:bb:a4:73:4e: 36:66:ba:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChw4Cku2Yp4AnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk YTBlOTgwYjItOTZkOC00MGY1LTlhYzktYjU1Mjk2N2E0ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkftz8OaZ1km2hgvDBqY/oG4h+9kDmita5WeK 1KSB+FKAIiqwiJcm4cayMtg4kaXaI74VqGZ6ZcfyZCPKc341baFXPZXlS1J8BCPt pJw30TmsiNey8CwRgCpOqI4b6F5AKnvZbEJRNJKGhuDl0t0OkyQwaMZlmy0RqgFL 7qVmLBT9TuEPJKBKJ3+85N3QhNBRBClYuKiLZwJc4l8QjZArJ5qowOuaa1q9c8TV g2prvdlFuYKorQvYinGCYYmgzexNgUadfnHtGhxfj0mVoR2jmPYKu6FfcBn050Pu Ar3Plvn1DSntOucnY0VC9p/UcOXE0+jS1urhEsEpZGvWNh0AaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9YP5hHm1HEVNPW+UyQFUAJ0s4oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvOTdkNTYwNDYtY2YxMi0z MmYyLTk0OGEtNTNiOTYwNWFiNjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCgi2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwkgm1OYlRIJFy9BkqDh1dpp6RY7EFAylqGPa5idHj3fnIR0tBHyizW osgMGOcLvT7VK8bQvKB62473rTTl0N2IRm0ikVhzSQuSNLEjgTqO5Q3xUgFaa9e3 iS+vptOUDdJ7ztt+p686b3/ijUpF4VwlRewzjp3w7rhibMbdwLcnL5tpDtAWI82L DtHkTPu0VqBv9YykDFI1yhLOtc/QRHm7gjwJaolIWhzR2bPGZfHJDLKUb/wgutUM 1bLDa2evcPIcnxTOEzxzcnrqXPl10w9AG9zc61k0kY/LeTdzwPeVqFroNGhdLupZ 5v/zs6S9/kxX24ykPJZGu6RzTjZmum0= -----END CERTIFICATE-----Generated at Sun May 11 07:14:34 2025 by rpki-client