$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa File: 7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa (raw, json) Hash identifier: L/uqCnE+jUFxPqBzKsQUFILjc1DK4ftnpKW++zQTRP8= Subject key identifier: 86:2E:32:04:08:DE:51:E0:00:20:91:59:AA:09:C8:08:9D:D2:A7:37 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D717A9B292C77B7B9F4FAC8 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7a:9b:29:2c:77:b7:b9:f4:fa:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=2b99e07c-859b-4d73-ba72-0072e328251e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:0d:49:e3:bb:ef:d0:cb:b2:03:41:68:6b:3a: 62:25:97:fb:b9:e5:e9:c7:d4:4e:9f:60:bd:d0:bb: 3e:aa:13:2e:68:91:c3:71:44:4e:f0:2b:71:6f:85: b4:9d:42:e6:34:4f:ff:b4:7e:93:95:e2:13:55:0b: 01:e0:8d:f1:42:6c:47:97:71:6a:d1:8e:0d:cb:b9: 0d:f6:2e:06:2c:9e:c5:d8:5a:73:e8:bc:06:24:ec: 45:26:97:fe:aa:c9:e0:e4:e5:ee:90:93:ce:e9:2c: 4d:aa:c2:60:4a:da:1f:de:4f:13:38:3f:be:86:02: 67:0e:8e:88:d9:69:6c:a6:75:df:c7:42:f4:e5:d8: 48:a1:e9:8c:81:73:88:89:c3:e6:34:90:6e:49:da: 86:83:7c:d0:0b:63:3c:37:21:ef:6e:82:66:e0:22: 79:b2:6d:6b:00:33:f0:d9:cc:69:06:38:66:5f:27: b7:78:56:59:3c:bd:32:2d:6e:91:4b:d9:de:ec:6f: 35:ca:d2:09:60:34:40:e7:94:eb:da:2a:1d:c1:03: 25:94:41:97:56:09:b2:63:45:62:43:e6:80:8b:9d: ff:93:23:6e:e6:2f:c4:84:48:89:a9:c1:84:b5:f9: 93:52:f1:82:93:8d:d8:b1:68:a8:e9:46:17:0a:da: ac:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:32:04:08:DE:51:E0:00:20:91:59:AA:09:C8:08:9D:D2:A7:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7553ddeb-c6fa-3785-9b18-2b20f6914a37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:91:72:97:4c:9d:04:1b:98:46:6a:fe:ad:4f:71:d7:74:9d: 67:68:e8:90:c3:19:78:1a:fe:fe:cc:45:b5:03:7e:ce:8c:af: 20:10:fc:09:d5:d9:1e:a9:89:8d:0b:8c:6f:5b:44:66:0e:29: ed:cd:75:e7:64:ef:16:69:ef:48:47:6c:1a:e2:95:af:b1:14: 8e:53:ca:5f:04:aa:68:1d:b0:cc:f2:3e:ca:cb:53:70:b3:37: 36:d3:b0:46:32:3b:96:b4:fd:b7:75:2f:69:53:80:cc:86:30: a7:b4:02:36:ad:66:d2:61:55:64:5d:f6:f9:6d:4e:42:2b:8e: fa:3f:1b:38:60:46:3e:f7:34:73:6f:e1:7e:74:62:35:2a:02: 40:59:b6:1d:97:d1:36:16:73:3b:ca:83:16:d6:db:b0:3c:9e: e0:0b:dc:62:d9:9e:7a:4d:90:a5:4d:a6:8f:49:fc:04:47:31: 21:6d:fe:28:91:7c:5d:4b:97:c5:c5:11:b9:69:3a:0e:cb:30: fa:a1:04:26:6a:64:c6:df:84:84:46:de:a8:d6:12:52:0c:c1: 95:77:4b:3d:fc:c1:c9:8e:22:9f:2d:e3:d7:1f:c9:3d:8a:0a: 1a:38:cf:d0:78:e5:78:ff:e4:e3:74:7b:e9:1f:37:d5:b0:75: 47:5b:93:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXqbKSx3t7n0+sgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MmI5OWUwN2MtODU5Yi00ZDczLWJhNzItMDA3MmUzMjgyNTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlA1J47vv0MuyA0FoazpiJZf7ueXpx9ROn2C9 0Ls+qhMuaJHDcURO8Ctxb4W0nULmNE//tH6TleITVQsB4I3xQmxHl3Fq0Y4Ny7kN 9i4GLJ7F2Fpz6LwGJOxFJpf+qsng5OXukJPO6SxNqsJgStof3k8TOD++hgJnDo6I 2WlspnXfx0L05dhIoemMgXOIicPmNJBuSdqGg3zQC2M8NyHvboJm4CJ5sm1rADPw 2cxpBjhmXye3eFZZPL0yLW6RS9ne7G81ytIJYDRA55Tr2iodwQMllEGXVgmyY0Vi Q+aAi53/kyNu5i/EhEiJqcGEtfmTUvGCk43YsWio6UYXCtqskQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYuMgQI3lHgACCRWaoJyAid0qc3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzU1M2RkZWItYzZmYS0z Nzg1LTliMTgtMmIyMGY2OTE0YTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeRcpdMnQQbmEZq/q1Pcdd0nWdo6JDDGXga/v7MRbUDfs6MryAQ/AnV 2R6piY0LjG9bRGYOKe3Ndedk7xZp70hHbBrila+xFI5Tyl8EqmgdsMzyPsrLU3Cz NzbTsEYyO5a0/bd1L2lTgMyGMKe0AjatZtJhVWRd9vltTkIrjvo/GzhgRj73NHNv 4X50YjUqAkBZth2X0TYWczvKgxbW27A8nuAL3GLZnnpNkKVNpo9J/ARHMSFt/iiR fF1Ll8XFEblpOg7LMPqhBCZqZMbfhIRG3qjWElIMwZV3Sz38wcmOIp8t49cfyT2K Cho4z9B45Xj/5ON0e+kfN9WwdUdbk/E= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:04 2025 by rpki-client