$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa File: 4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa (raw, json) Hash identifier: D9rgJQA+v4LiHkjAM3CjbSwGeDYZPD7TuVrVwbwD5wM= Subject key identifier: 30:C7:1D:91:52:F6:71:2B:51:5E:C2:37:6A:73:E4:50:89:FD:4D:45 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849350EA55E67CB28E2D0F78000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa Signing time: Sun 16 Mar 2025 13:00:52 +0000 ROA not before: Sun 16 Mar 2025 13:00:52 +0000 ROA not after: Sat 14 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:35:0e:a5:5e:67:cb:28:e2:d0:f7:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 16 13:00:52 2025 GMT Not After : Jun 14 13:00:52 2025 GMT Subject: CN=280fdec1-8e8e-44e3-81bf-a1f86675af43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:6b:6c:23:fe:5e:fa:35:0b:62:54:2f:5a: bc:e6:9a:34:32:e9:ee:58:4c:53:e5:df:cf:dd:8c: 79:ad:75:90:8a:71:95:6b:85:d2:7d:22:57:6b:e3: 75:0c:c2:4b:b6:9f:2e:80:18:01:10:e0:d4:f8:a9: 75:2d:8b:6f:d0:26:17:82:9d:7c:ab:45:3c:ff:66: bf:c8:ee:14:4e:24:ef:37:09:52:31:8a:99:e3:f4: d0:e8:62:dc:67:9b:ce:3b:fd:13:88:2f:3b:c2:6d: 99:06:41:74:0a:9f:59:ff:79:ca:04:30:41:16:d9: 05:27:df:e9:51:99:29:ba:d7:45:3b:24:bf:8e:30: 68:07:ec:00:01:2a:ab:6d:bb:1e:67:e1:40:c9:b9: e4:88:eb:2c:71:3d:55:72:e9:28:d4:7b:16:90:97: b7:58:50:e7:c9:e8:54:5f:b3:9b:d8:eb:31:b6:35: ab:06:5e:12:f0:7b:46:97:d6:f2:ac:78:01:b2:b9: 00:d8:d1:14:02:09:e9:92:0f:29:ce:a6:38:4a:a6: c8:94:e9:ff:9e:4b:2f:40:d1:0a:48:6f:9b:2d:31: 09:a4:53:0e:3b:bb:5d:1c:b5:10:92:59:19:de:20: 59:75:0e:22:a6:b3:22:79:d2:52:ef:a0:a3:53:d3: 1b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C7:1D:91:52:F6:71:2B:51:5E:C2:37:6A:73:E4:50:89:FD:4D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4dc20166-e7b6-342b-8899-b8aa8b6e9796.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:3f:e8:18:d1:67:8f:9e:51:6e:fe:0e:5a:ed:71:ff:36:e1: 41:94:c7:20:c2:03:34:2e:b2:99:13:7e:3e:e2:3c:0e:25:8f: 41:70:74:8d:9a:5b:85:74:3c:e4:3e:36:9f:6e:ed:5e:47:71: c1:4d:36:2f:5d:f6:72:65:89:c3:a6:c3:c0:52:95:45:32:e0: 90:49:e2:f8:39:b6:8e:d3:b7:a1:d9:85:b0:b0:1a:f5:11:1c: f2:55:24:6c:c9:d7:07:5b:4d:0e:44:43:11:f5:4b:e5:36:8e: f2:49:a9:84:57:42:a1:89:8a:20:78:55:29:22:c8:38:6d:23: 89:ab:67:36:0b:2e:1e:39:28:b7:7c:6d:04:63:3c:cb:80:8b: fe:93:1d:23:a0:2e:17:ca:4d:95:3b:61:43:b1:a8:ab:38:04: 55:6c:a8:7a:5c:71:4c:ab:54:5f:f2:14:89:a4:b9:b4:76:a4: 87:36:da:db:dd:ac:b6:e6:4c:97:1b:e8:85:af:5e:ec:e2:c1: ce:aa:62:4d:41:f2:66:a2:2b:49:7f:5d:20:84:15:cf:57:cb: 42:b7:a8:ea:8b:c0:a6:8a:83:12:bf:c8:8d:03:89:3f:9b:ff: de:0f:c5:19:20:17:eb:82:2c:5a:d1:0c:76:a3:bb:c7:61:c6: 97:9e:31:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DqVeZ8so4tD3gAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk MjgwZmRlYzEtOGU4ZS00NGUzLTgxYmYtYTFmODY2NzVhZjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBtrbCP+Xvo1C2JUL1q85po0MunuWExT5d/P 3Yx5rXWQinGVa4XSfSJXa+N1DMJLtp8ugBgBEODU+Kl1LYtv0CYXgp18q0U8/2a/ yO4UTiTvNwlSMYqZ4/TQ6GLcZ5vOO/0TiC87wm2ZBkF0Cp9Z/3nKBDBBFtkFJ9/p UZkputdFOyS/jjBoB+wAASqrbbseZ+FAybnkiOsscT1Vcuko1HsWkJe3WFDnyehU X7Ob2OsxtjWrBl4S8HtGl9byrHgBsrkA2NEUAgnpkg8pzqY4SqbIlOn/nksvQNEK SG+bLTEJpFMOO7tdHLUQklkZ3iBZdQ4iprMiedJS76CjU9MbmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDHHZFS9nErUV7CN2pz5FCJ/U1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGRjMjAxNjYtZTdiNi0z NDJiLTg4OTktYjhhYThiNmU5Nzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0/6BjRZ4+eUW7+Dlrtcf824UGUxyDCAzQuspkTfj7iPA4lj0FwdI2a W4V0POQ+Np9u7V5HccFNNi9d9nJlicOmw8BSlUUy4JBJ4vg5to7Tt6HZhbCwGvUR HPJVJGzJ1wdbTQ5EQxH1S+U2jvJJqYRXQqGJiiB4VSkiyDhtI4mrZzYLLh45KLd8 bQRjPMuAi/6THSOgLhfKTZU7YUOxqKs4BFVsqHpccUyrVF/yFImkubR2pIc22tvd rLbmTJcb6IWvXuziwc6qYk1B8maiK0l/XSCEFc9Xy0K3qOqLwKaKgxK/yI0DiT+b /94PxRkgF+uCLFrRDHaju8dhxpeeMdc= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:09 2025 by rpki-client