$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa File: 4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa (raw, json) Hash identifier: qFLjOOrZQfQqu/7W3i4gteCD0En4ssycYKRRJnFP2sk= Subject key identifier: 8A:50:02:C7:16:24:31:B4:21:B5:9F:77:41:78:8F:38:6E:E2:18:F2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B4393E8F8FC8F60838B0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b4:39:3e:8f:8f:c8:f6:08:38:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=1df5e11a-1f3c-425a-9d56-9c3191e870f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:38:7d:99:12:3a:5d:c5:52:9f:35:a3:65:0e: fe:bf:6c:4c:33:46:45:38:60:ca:9c:e7:eb:96:89: 83:49:c3:8e:63:20:52:71:55:b5:bf:c3:b5:88:2c: 18:0c:1a:ad:7b:04:22:f3:a9:7b:7e:cd:f3:6e:93: 3c:56:8d:c4:2a:5c:a9:62:89:95:8b:b7:66:00:23: 35:02:26:1a:55:80:24:43:8e:dd:90:7e:69:d1:f8: ed:1d:40:91:09:a8:c9:ac:09:3d:39:1f:c2:c7:0e: e2:84:b8:85:88:55:50:54:b8:34:c0:d6:fc:b0:ae: 9a:6c:c7:3f:7b:5e:8c:64:f1:6a:3f:14:ea:d0:e8: f7:17:eb:c6:c9:b4:93:88:bf:6a:06:16:ea:51:eb: 30:4c:ac:32:5e:20:8a:b7:3f:bc:61:98:53:b5:7b: 3e:2f:d5:b7:f3:f2:cd:75:6d:8e:85:13:5b:59:0e: 07:b3:dd:69:84:0b:fc:a4:0a:82:6e:36:22:50:bb: 28:ef:10:39:15:47:b5:8c:ea:72:63:11:f6:8a:3b: 37:a1:5d:80:88:3c:23:70:b2:44:85:35:ed:e4:de: c2:c1:44:86:70:05:98:6d:42:cc:66:4d:f3:e3:f9: 18:9c:0a:b0:a8:b8:3e:04:a8:e7:ae:b2:db:e6:aa: e5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:50:02:C7:16:24:31:B4:21:B5:9F:77:41:78:8F:38:6E:E2:18:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4361b23a-0b42-3078-9043-9ce57c5d8cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:a5:69:e2:f5:a2:1b:a0:02:78:ad:a3:d4:9b:b1:ab:e0:60: 3d:4b:18:b4:b8:4b:f0:07:af:93:58:db:4a:5d:bf:93:bc:77: 6b:f8:fb:76:f1:38:1a:68:25:64:ff:df:7e:7b:aa:76:7e:8e: 44:34:75:66:85:b7:6a:5f:30:bd:85:55:59:ad:ba:c9:c8:2c: 5d:7a:e8:26:d0:4d:bd:a3:e2:4d:82:a8:00:c1:ae:c7:a7:0b: 65:c6:fb:92:fa:eb:a2:6f:2b:17:95:d9:87:5c:53:51:2f:3f: 5b:c6:f8:b8:97:44:cd:c7:db:56:20:ac:a3:c2:02:75:b2:69: 0b:dd:cd:48:da:d3:e2:59:5f:46:61:b3:71:76:94:cf:1b:74: 73:31:9a:82:10:74:32:17:8a:21:6d:d2:a7:f2:72:12:02:13: 88:69:fc:8c:17:a8:cf:7d:bc:05:c9:f9:32:1a:c6:7d:87:d8: 03:93:be:05:be:25:34:0b:15:fb:b5:67:56:2e:2f:4e:f1:52: 6c:91:a1:0a:1b:ef:43:4f:04:e8:6b:33:6f:61:56:a6:44:2e: d1:74:33:1a:f1:33:56:ad:ce:11:e6:6c:cb:d6:4d:88:7c:4f: ec:b2:35:cc:d5:b4:aa:89:30:5e:60:dc:87:c6:32:71:c0:63: 0d:1e:30:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprQ5Po+PyPYIOLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MWRmNWUxMWEtMWYzYy00MjVhLTlkNTYtOWMzMTkxZTg3MGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTh9mRI6XcVSnzWjZQ7+v2xMM0ZFOGDKnOfr lomDScOOYyBScVW1v8O1iCwYDBqtewQi86l7fs3zbpM8Vo3EKlypYomVi7dmACM1 AiYaVYAkQ47dkH5p0fjtHUCRCajJrAk9OR/Cxw7ihLiFiFVQVLg0wNb8sK6abMc/ e16MZPFqPxTq0Oj3F+vGybSTiL9qBhbqUeswTKwyXiCKtz+8YZhTtXs+L9W38/LN dW2OhRNbWQ4Hs91phAv8pAqCbjYiULso7xA5FUe1jOpyYxH2ijs3oV2AiDwjcLJE hTXt5N7CwUSGcAWYbULMZk3z4/kYnAqwqLg+BKjnrrLb5qrl+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpQAscWJDG0IbWfd0F4jzhu4hjyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDM2MWIyM2EtMGI0Mi0z MDc4LTkwNDMtOWNlNTdjNWQ4Y2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+laeL1ohugAnito9SbsavgYD1LGLS4S/AHr5NY20pdv5O8d2v4+3bx OBpoJWT/3357qnZ+jkQ0dWaFt2pfML2FVVmtusnILF166CbQTb2j4k2CqADBrsen C2XG+5L666JvKxeV2YdcU1EvP1vG+LiXRM3H21YgrKPCAnWyaQvdzUja0+JZX0Zh s3F2lM8bdHMxmoIQdDIXiiFt0qfychICE4hp/IwXqM99vAXJ+TIaxn2H2AOTvgW+ JTQLFfu1Z1YuL07xUmyRoQob70NPBOhrM29hVqZELtF0MxrxM1atzhHmbMvWTYh8 T+yyNczVtKqJMF5g3IfGMnHAYw0eMCM= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:04 2025 by rpki-client