$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa File: a7a900ce-23ee-33b0-85ce-32106cfd925c.roa (raw, json) Hash identifier: 0aOxR4gZAxXfmfU/5Zvp7VJWQXNId5hw0Jq7AhVkmlg= Subject key identifier: E1:AF:CF:D6:C7:E4:4E:00:ED:74:53:95:3F:A4:B0:30:A0:B5:3E:64 Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019 Certificate serial: 010D0C9F43285849C0A4E9DBAB95973101B8AC80 Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa Signing time: Mon 05 May 2025 13:01:00 +0000 ROA not before: Mon 05 May 2025 13:01:00 +0000 ROA not after: Sun 03 Aug 2025 13:01:00 +0000 asID: 22191 IP address blocks: 130.45.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c0:a4:e9:db:ab:95:97:31:01:b8:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019 Validity Not Before: May 5 13:01:00 2025 GMT Not After : Aug 3 13:01:00 2025 GMT Subject: CN=90ad4bf7-c9f9-48a1-b60c-f8f5fda8e68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a8:ef:4f:07:67:ff:4a:c7:da:ae:5d:78:15: 1c:7d:cb:a7:11:57:17:0f:6e:5d:14:1e:b0:76:18: 2f:6e:19:0b:7c:8d:d3:8f:d4:b5:5d:73:22:ff:18: 72:17:ca:ab:b2:4d:b2:cb:ad:65:1f:b0:74:65:f5: 2c:29:53:1d:d1:70:4d:d1:82:d1:cb:de:07:41:31: 65:f3:f2:90:06:ea:c4:dd:2c:cc:2a:17:69:c3:f2: f2:fc:20:49:87:b9:a9:b7:5d:91:7e:ef:0d:e4:6b: e0:16:51:2b:de:4f:d9:5b:b8:68:6d:e8:a6:99:d8: e1:9f:5c:a3:b1:da:aa:34:97:51:43:6a:40:63:ac: 58:34:ba:b0:a4:5c:4d:1f:5f:ca:7f:5b:b5:3a:64: 6c:be:43:b0:e7:51:82:1e:31:92:06:37:62:ce:2e: 58:17:36:af:c5:ad:36:6b:b1:d8:90:6e:3c:25:de: 95:5a:33:2b:80:4a:68:b5:83:21:8c:fa:c7:25:57: 0c:d2:49:ae:cb:83:7c:b8:fc:02:95:c6:93:be:50: 9d:f3:88:9c:20:c7:54:d0:29:3e:68:98:e2:76:8a: 95:3a:38:ba:db:58:c7:ea:f6:05:2e:d7:34:2f:c6: c1:0f:3f:db:47:a6:e6:2f:e3:bc:f0:39:6f:bb:45: 1d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AF:CF:D6:C7:E4:4E:00:ED:74:53:95:3F:A4:B0:30:A0:B5:3E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/a7a900ce-23ee-33b0-85ce-32106cfd925c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl X509v3 Authority Key Identifier: keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer sbgp-ipAddrBlock: critical IPv4: 130.45.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:56:3a:4e:8d:3d:0e:d5:fb:f1:71:a0:20:01:00:f2:cb:60: b3:0c:e2:fe:4f:e9:f8:70:75:10:46:70:1a:1e:9e:be:b6:ff: 96:b5:ce:70:e0:65:8d:44:74:61:ef:c6:21:1b:7a:d9:f2:63: 60:4b:8c:41:1c:d5:94:5d:2b:44:bb:7b:6e:dc:7a:f6:25:67: 81:9d:81:f8:93:53:86:8c:e0:fe:5c:a5:b0:50:82:68:fe:f0: 0c:a6:c1:01:3e:7c:cb:16:bf:a8:8c:e1:53:35:be:47:3a:77: 1b:ea:4b:e1:35:2e:18:19:40:7c:33:b9:8f:61:75:02:14:33: f4:da:ae:17:2c:87:63:f9:e9:f7:53:23:c5:64:6c:54:5f:8d: ce:c6:78:e7:5a:86:c1:79:1c:ba:4b:9c:eb:43:a7:ad:68:b6: c3:0d:b3:25:21:df:06:65:e9:9c:b0:19:6a:a2:5c:06:9d:bf: 38:a6:7f:1b:63:13:5a:ab:66:02:68:ce:fe:53:49:72:cf:03: a1:b7:bc:08:d4:80:38:53:03:d4:07:06:d3:97:af:ef:6f:33: e3:55:a6:d0:6b:f5:6e:ce:f5:fe:d9:8e:01:73:8f:59:c8:8d: 3c:02:33:35:ad:62:6c:5b:87:67:fa:e8:db:f2:50:1c:88:f1: d7:3d:87:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApOnbq5WXMQG4rIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMyMjE3ZTEtMjQ3My00OWE1LTkxOWUtMDhlMTg5NmM1 MDE5MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk OTBhZDRiZjctYzlmOS00OGExLWI2MGMtZjhmNWZkYThlNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKjvTwdn/0rH2q5deBUcfcunEVcXD25dFB6w dhgvbhkLfI3Tj9S1XXMi/xhyF8qrsk2yy61lH7B0ZfUsKVMd0XBN0YLRy94HQTFl 8/KQBurE3SzMKhdpw/Ly/CBJh7mpt12Rfu8N5GvgFlEr3k/ZW7hobeimmdjhn1yj sdqqNJdRQ2pAY6xYNLqwpFxNH1/Kf1u1OmRsvkOw51GCHjGSBjdizi5YFzavxa02 a7HYkG48Jd6VWjMrgEpotYMhjPrHJVcM0kmuy4N8uPwClcaTvlCd84icIMdU0Ck+ aJjidoqVOji621jH6vYFLtc0L8bBDz/bR6bmL+O88Dlvu0Ud0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGvz9bH5E4A7XRTlT+ksDCgtT5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIy MTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUxODk2YzUwMTkvYTdhOTAwY2UtMjNlZS0z M2IwLTg1Y2UtMzIxMDZjZmQ5MjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjMyMjE3ZTEtMjQ3My00OWE1LTkx OWUtMDhlMTg5NmM1MDE5L2IzMjIxN2UxLTI0NzMtNDlhNS05MTllLTA4ZTE4OTZj NTAxOS5jcmwwHwYDVR0jBBgwFoAUSK4N+KDXdJBYpFq1I6Zut7HAd7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9iMzIyMTdlMS0yNDczLTQ5YTUtOTE5ZS0wOGUx ODk2YzUwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHgi2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHBWOk6NPQ7V+/FxoCABAPLLYLMM4v5P6fhwdRBGcBoenr62/5a1znDg ZY1EdGHvxiEbetnyY2BLjEEc1ZRdK0S7e27cevYlZ4GdgfiTU4aM4P5cpbBQgmj+ 8AymwQE+fMsWv6iM4VM1vkc6dxvqS+E1LhgZQHwzuY9hdQIUM/Tarhcsh2P56fdT I8VkbFRfjc7GeOdahsF5HLpLnOtDp61otsMNsyUh3wZl6ZywGWqiXAadvzimfxtj E1qrZgJozv5TSXLPA6G3vAjUgDhTA9QHBtOXr+9vM+NVptBr9W7O9f7ZjgFzj1nI jTwCMzWtYmxbh2f66NvyUByI8dc9h7A= -----END CERTIFICATE-----Generated at Sun May 11 07:09:29 2025 by rpki-client