$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa File: ff77217b-f2ff-3766-b392-b4fd31895d99.roa (raw, json) Hash identifier: m91waWEFKw7ELVuTUJQW9x9tMis2+ela+0LyaQJor3g= Subject key identifier: 9D:7E:87:AA:49:26:17:33:52:68:A9:F8:83:13:BE:12:7E:65:3E:83 Certificate issuer: /CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a Certificate serial: 010D0C9F43285849AD1A10075806D14726ED3D00 Authority key identifier: C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa Signing time: Mon 28 Apr 2025 13:01:00 +0000 ROA not before: Mon 28 Apr 2025 13:01:00 +0000 ROA not after: Sun 27 Jul 2025 13:01:00 +0000 asID: 40676 IP address blocks: 130.51.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ad:1a:10:07:58:06:d1:47:26:ed:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ae65634-ea60-4e81-b4f1-309c9aa6bc2a Validity Not Before: Apr 28 13:01:00 2025 GMT Not After : Jul 27 13:01:00 2025 GMT Subject: CN=570b7e27-1988-4f9a-bc77-b8ff446521f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:00:d0:2e:9c:d3:11:cf:e5:86:95:9a:f1:b1: 78:2e:77:c7:b1:5b:6e:5a:d6:0d:aa:e1:9c:1c:3a: 3c:35:f8:2c:81:de:35:cb:95:f6:a4:5b:db:97:5f: 8e:39:a4:12:05:37:54:45:06:ee:c0:60:5f:ce:6c: 14:2b:cb:2d:da:d4:f5:93:8f:cc:c8:16:a6:03:eb: 4b:7a:cb:4d:3f:3d:bd:91:20:23:ab:e4:42:67:9b: 86:47:a1:b5:28:e2:09:d4:5e:e8:e7:8a:39:22:34: df:e0:98:80:6b:d3:2e:0e:09:73:7d:e3:d0:d7:00: 4f:d8:eb:ce:b5:1b:20:1d:e4:e3:23:cc:35:0d:b7: ab:a8:25:41:ff:a3:26:49:77:e8:5a:6d:47:44:f4: 2c:0b:85:b4:1d:a0:e2:a1:b4:21:e2:38:bf:d3:bf: d4:7c:60:77:ce:10:27:e6:2b:14:18:91:f6:e6:f2: d9:4c:71:f8:93:fe:ec:66:83:8f:1c:71:6d:b0:48: 8e:eb:79:21:c6:58:8f:b0:34:ac:f5:58:3a:6f:a0: 27:7b:d0:b8:fc:7c:89:74:9d:5e:a1:75:26:05:45: 34:26:87:41:99:92:68:e4:9f:6e:34:de:f4:2b:87: 5e:9d:2c:6e:5c:c5:f5:48:49:9a:16:cd:32:dd:f4: 0e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7E:87:AA:49:26:17:33:52:68:A9:F8:83:13:BE:12:7E:65:3E:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/ff77217b-f2ff-3766-b392-b4fd31895d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.crl X509v3 Authority Key Identifier: keyid:C1:29:7B:36:8E:A8:37:B2:9C:C0:02:2D:37:41:46:E4:A4:B6:07:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7ae65634-ea60-4e81-b4f1-309c9aa6bc2a.cer sbgp-ipAddrBlock: critical IPv4: 130.51.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:47:91:a7:93:52:64:c3:b9:82:87:6e:70:a6:55:f3:1b:26: f9:c6:18:bd:23:4d:27:7b:ff:ab:43:df:f2:b6:b1:be:f4:3c: d4:85:c8:65:48:1e:d0:ef:82:64:58:87:41:e7:6b:b3:1d:95: bd:4a:1d:ea:43:9b:85:e8:d7:65:9d:ef:01:5e:73:81:b0:29: c5:41:04:77:e5:25:c7:86:97:40:88:f0:d1:19:e3:d3:b0:c3: df:35:12:39:82:1b:1d:ae:46:7a:0c:5e:d9:98:2c:a3:30:82: ba:a0:41:72:e2:7d:59:c0:94:f6:33:51:1e:e8:0b:23:bf:47: cb:5a:37:37:54:c1:25:ed:7a:5c:52:0e:18:0e:cb:a1:af:fd: 84:b1:27:ec:f3:b1:0a:49:80:d3:87:91:68:5c:81:71:55:37: 9f:62:ff:b3:69:22:51:0f:3e:a3:80:70:15:d9:75:23:15:39: 78:a5:cf:9d:f0:3f:41:c2:6d:ed:5e:ef:8b:e6:91:99:f6:b8: 3b:eb:aa:81:17:d3:b3:fb:22:ee:5d:9e:48:bf:da:8e:5f:bf: bb:d2:5a:9a:10:31:09:7b:42:07:5b:17:d1:0e:f7:44:59:4b: ae:2e:53:d1:6b:04:9f:b4:b4:92:3d:9a:1b:56:66:9c:6f:c5: fc:cf:a0:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmtGhAHWAbRRybtPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2FlNjU2MzQtZWE2MC00ZTgxLWI0ZjEtMzA5YzlhYTZi YzJhMB4XDTI1MDQyODEzMDEwMFoXDTI1MDcyNzEzMDEwMFowLzEtMCsGA1UEAxMk NTcwYjdlMjctMTk4OC00ZjlhLWJjNzctYjhmZjQ0NjUyMWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgDQLpzTEc/lhpWa8bF4LnfHsVtuWtYNquGc HDo8Nfgsgd41y5X2pFvbl1+OOaQSBTdURQbuwGBfzmwUK8st2tT1k4/MyBamA+tL estNPz29kSAjq+RCZ5uGR6G1KOIJ1F7o54o5IjTf4JiAa9MuDglzfePQ1wBP2OvO tRsgHeTjI8w1DberqCVB/6MmSXfoWm1HRPQsC4W0HaDiobQh4ji/07/UfGB3zhAn 5isUGJH25vLZTHH4k/7sZoOPHHFtsEiO63khxliPsDSs9Vg6b6Ane9C4/HyJdJ1e oXUmBUU0JodBmZJo5J9uNN70K4denSxuXMX1SEmaFs0y3fQOUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1+h6pJJhczUmip+IMTvhJ+ZT6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83YWU2 NTYzNC1lYTYwLTRlODEtYjRmMS0zMDljOWFhNmJjMmEvZmY3NzIxN2ItZjJmZi0z NzY2LWIzOTItYjRmZDMxODk1ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2FlNjU2MzQtZWE2MC00ZTgxLWI0 ZjEtMzA5YzlhYTZiYzJhLzdhZTY1NjM0LWVhNjAtNGU4MS1iNGYxLTMwOWM5YWE2 YmMyYS5jcmwwHwYDVR0jBBgwFoAUwSl7No6oN7KcwAItN0FG5KS2BxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS83YWU2NTYzNC1lYTYwLTRlODEtYjRmMS0zMDlj OWFhNmJjMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9HkaeTUmTDuYKHbnCmVfMbJvnGGL0jTSd7/6tD3/K2sb70PNSFyGVI HtDvgmRYh0Hna7Mdlb1KHepDm4Xo12Wd7wFec4GwKcVBBHflJceGl0CI8NEZ49Ow w981EjmCGx2uRnoMXtmYLKMwgrqgQXLifVnAlPYzUR7oCyO/R8taNzdUwSXtelxS DhgOy6Gv/YSxJ+zzsQpJgNOHkWhcgXFVN59i/7NpIlEPPqOAcBXZdSMVOXilz53w P0HCbe1e74vmkZn2uDvrqoEX07P7Iu5dnki/2o5fv7vSWpoQMQl7QgdbF9EO90RZ S64uU9FrBJ+0tJI9mhtWZpxvxfzPoMU= -----END CERTIFICATE-----Generated at Tue Jul 1 18:19:49 2025 by rpki-client