$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa File: 1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json) Hash identifier: JQE8mtNxFB7BhV/4qbX4N36S2W1Y+EFusHU2+a5ku20= Subject key identifier: 98:AD:2E:9D:EE:8C:D3:6D:26:A8:45:68:B2:86:0B:16:E8:64:73:48 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B4C03FA239C1BCF660C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b4:c0:3f:a2:39:c1:bc:f6:60:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=e8f5f58d-db81-4460-91bc-69230bb83543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:84:43:41:33:72:f8:99:93:79:25:0a:70:ef: d8:e1:c4:12:9b:60:9d:40:05:13:f7:ff:5e:73:d2: f0:36:6a:37:cc:29:1e:41:4c:68:7a:1e:3e:18:04: fb:7c:fd:a8:53:33:27:82:a8:2e:fb:79:77:9c:3d: 4c:1f:64:e2:ab:7e:19:2d:af:18:e4:ed:35:b0:2b: 54:76:5d:cc:ef:b8:80:4c:b5:28:ba:d0:63:ab:26: ed:a6:fc:7c:87:c5:2b:38:10:ed:71:16:0e:3e:bb: e9:d2:c9:36:95:de:81:34:21:33:e5:ac:e9:a0:c9: 4e:3b:30:c2:94:6d:86:13:9c:d1:16:f2:88:22:d1: c0:e0:10:1c:cb:30:4c:76:e9:bf:94:10:4e:9c:55: ab:a2:6b:e7:62:0a:27:3b:5f:53:a9:6a:52:ea:4e: 81:50:dd:52:85:bd:78:f0:8f:07:82:d0:40:7a:09: ab:e5:5d:7f:d7:67:4d:b4:d3:71:e4:58:2d:44:62: 7e:1d:d5:74:60:0d:f6:51:82:40:93:9f:4b:a6:ba: e3:c2:4b:b2:94:bf:f3:e1:ee:db:3b:24:1d:92:14: 51:ab:a3:e3:26:31:32:e1:52:7c:ef:fe:34:33:90: 9a:68:20:fa:9c:c3:e5:75:3e:43:af:c4:db:67:50: b6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:AD:2E:9D:EE:8C:D3:6D:26:A8:45:68:B2:86:0B:16:E8:64:73:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:97:c7:0a:f4:49:75:76:de:7f:32:bc:6e:7e:e8:6a:38:27: 2e:13:9e:47:46:d5:4f:d5:f3:1e:81:25:21:c2:d2:46:dc:f2: ce:f7:76:c3:d2:92:79:a1:2b:ca:31:80:ab:6b:eb:36:aa:9e: 09:f4:54:3a:68:d0:e2:f3:92:ee:79:b4:40:8f:17:41:37:98: ce:8a:dc:59:a7:85:5c:cf:16:b8:f8:6c:aa:96:61:14:62:8b: a5:96:cd:50:c8:b4:0b:29:05:e6:19:0d:b7:e7:10:a9:fe:90: b3:f6:76:ae:89:9d:81:58:29:d2:e0:6c:7d:09:0f:99:ed:ac: 22:a2:1c:06:37:80:8d:8a:c3:85:08:39:2a:15:bd:ee:b9:a2: 45:e8:9b:b6:13:28:44:8a:61:5d:b6:b6:73:dc:03:6a:a2:a2: 9e:29:98:7f:34:6c:ee:b8:d9:0d:91:58:16:ac:d8:86:6b:96: a9:5a:70:3a:e4:3d:ff:c3:19:9c:3f:75:e0:c9:f2:a9:57:74: 8b:a0:e6:49:08:cc:35:1f:64:ba:55:71:e7:09:f0:02:98:14: e4:a2:e4:82:d8:df:23:42:c2:1f:7c:b2:1b:6d:4e:b7:40:59: 44:1b:65:cc:ce:f5:73:73:1f:19:75:c9:04:37:9d:60:85:50: 67:22:35:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprTAP6I5wbz2YMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZThmNWY1OGQtZGI4MS00NDYwLTkxYmMtNjkyMzBiYjgzNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIRDQTNy+JmTeSUKcO/Y4cQSm2CdQAUT9/9e c9LwNmo3zCkeQUxoeh4+GAT7fP2oUzMngqgu+3l3nD1MH2Tiq34ZLa8Y5O01sCtU dl3M77iATLUoutBjqybtpvx8h8UrOBDtcRYOPrvp0sk2ld6BNCEz5azpoMlOOzDC lG2GE5zRFvKIItHA4BAcyzBMdum/lBBOnFWromvnYgonO19TqWpS6k6BUN1Shb14 8I8HgtBAegmr5V1/12dNtNNx5FgtRGJ+HdV0YA32UYJAk59LprrjwkuylL/z4e7b OyQdkhRRq6PjJjEy4VJ87/40M5CaaCD6nMPldT5Dr8TbZ1C2WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJitLp3ujNNtJqhFaLKGCxboZHNIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWIxZjQzMWEtY2MyZC0z NDc2LTkwMTAtYTAxY2YxOGUzMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqXxwr0SXV23n8yvG5+6Go4Jy4TnkdG1U/V8x6BJSHC0kbc8s73dsPS knmhK8oxgKtr6zaqngn0VDpo0OLzku55tECPF0E3mM6K3FmnhVzPFrj4bKqWYRRi i6WWzVDItAspBeYZDbfnEKn+kLP2dq6JnYFYKdLgbH0JD5ntrCKiHAY3gI2Kw4UI OSoVve65okXom7YTKESKYV22tnPcA2qiop4pmH80bO642Q2RWBas2IZrlqlacDrk Pf/DGZw/deDJ8qlXdIug5kkIzDUfZLpVcecJ8AKYFOSi5ILY3yNCwh98shttTrdA WUQbZczO9XNzHxl1yQQ3nWCFUGciNT4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:02 2025 by rpki-client