$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa File: 8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa (raw, json) Hash identifier: 3SsAS6SM6R2En/qB0vrprsi6TIlM5NjiaJiZyQpcn14= Subject key identifier: 32:A9:9A:7B:4E:C7:91:98:1F:9C:1F:01:4C:14:5D:9A:0E:AE:FF:B1 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584953C40E2D3B9C61F65004E23C Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:0e:2d:3b:9c:61:f6:50:04:e2:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=34632691-debb-48af-88e9-fe1a89bea939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:79:b7:cc:de:88:98:fd:9a:f3:ff:3a:3e:aa: b0:5b:71:f0:46:db:39:7e:76:a8:c1:d4:71:6f:3d: 91:e6:d4:c8:0a:40:76:2d:4b:a9:8e:c6:07:58:c5: 1c:e1:51:11:3d:82:44:34:76:04:6a:ac:94:42:6b: e7:5c:59:1f:37:a0:d5:90:99:3c:3d:4e:e1:4a:ff: 2f:fc:f2:21:5d:51:6d:f0:5a:6f:19:a2:1d:f7:16: 1f:40:0e:91:1a:68:3f:c9:84:87:38:87:84:1c:95: d0:1c:3c:1d:8c:23:03:c7:55:9d:7c:28:5d:28:3b: 12:41:99:36:59:74:d2:68:aa:8c:44:7e:ec:f1:08: 89:2d:7a:fa:0a:ee:e4:e1:e6:fc:da:a3:e0:49:1a: 5f:e2:9a:09:35:b9:59:88:3f:42:f0:e8:92:4f:c5: e2:99:47:0f:16:7c:63:37:1c:47:a5:57:1a:3e:a8: ad:72:cf:51:54:da:3f:05:8d:e8:61:18:92:6d:83: 2e:86:f1:01:e4:d1:22:4b:a8:a2:23:63:44:3e:b8: e5:5a:83:4c:67:ab:30:9f:e9:9f:d7:72:eb:44:2c: 82:9c:3c:1c:d9:8e:2f:ea:6d:90:cf:dc:8a:bf:20: 19:d5:81:e4:77:78:04:a5:f9:1f:ef:2c:eb:bf:8c: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A9:9A:7B:4E:C7:91:98:1F:9C:1F:01:4C:14:5D:9A:0E:AE:FF:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8afe9ef4-a028-3ce3-9909-e7456dbc8602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ec:26:2a:36:fe:f1:cf:44:13:cf:04:9b:f4:8b:b9:ee:61: 92:71:3c:c5:f4:3b:77:92:7d:79:ef:59:25:48:91:b6:00:68: 98:c2:19:70:77:f3:ca:df:35:37:b6:98:ff:de:5c:aa:c5:17: bb:c7:ed:f6:c1:0b:1c:bb:9c:28:f0:ba:77:18:39:5c:47:bd: 72:d8:43:4b:60:c5:81:97:23:73:d9:84:56:33:dd:05:89:59: 37:b5:2f:9b:e5:99:ff:fc:c9:39:bd:7e:ba:84:29:37:3a:55: 77:56:c1:d1:ca:bb:14:63:8b:89:1a:28:c7:4c:02:69:e6:3e: 7a:15:c4:17:37:55:10:93:1b:05:0e:7b:c0:9f:45:b3:9c:2f: 1a:b1:3b:43:9b:88:5e:e6:c8:d2:6a:ee:3e:8f:b1:5b:5c:ff: 92:46:c3:e5:38:3e:a1:fc:da:52:83:26:02:6c:cc:7f:c9:fc: f7:a1:e5:65:de:8f:6c:5f:b4:bc:c8:6a:24:ff:19:44:cf:96: ff:dc:5b:53:e9:03:d1:15:ea:a5:4f:56:a0:32:d3:bc:65:68: 2e:d8:a7:59:4d:c5:98:70:c8:73:bc:41:6e:0b:9a:c2:cb:e8: 3c:d6:20:df:e0:61:f7:79:87:bd:b0:98:8e:2a:15:a0:c7:3b: 40:39:86:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxA4tO5xh9lAE4jwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk MzQ2MzI2OTEtZGViYi00OGFmLTg4ZTktZmUxYTg5YmVhOTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3m3zN6ImP2a8/86PqqwW3HwRts5fnaowdRx bz2R5tTICkB2LUupjsYHWMUc4VERPYJENHYEaqyUQmvnXFkfN6DVkJk8PU7hSv8v /PIhXVFt8FpvGaId9xYfQA6RGmg/yYSHOIeEHJXQHDwdjCMDx1WdfChdKDsSQZk2 WXTSaKqMRH7s8QiJLXr6Cu7k4eb82qPgSRpf4poJNblZiD9C8OiST8XimUcPFnxj NxxHpVcaPqitcs9RVNo/BY3oYRiSbYMuhvEB5NEiS6iiI2NEPrjlWoNMZ6swn+mf 13LrRCyCnDwc2Y4v6m2Qz9yKvyAZ1YHkd3gEpfkf7yzrv4xIswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKpmntOx5GYH5wfAUwUXZoOrv+xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGFmZTllZjQtYTAyOC0z Y2UzLTk5MDktZTc0NTZkYmM4NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrsJio2/vHPRBPPBJv0i7nuYZJxPMX0O3eSfXnvWSVIkbYAaJjCGXB3 88rfNTe2mP/eXKrFF7vH7fbBCxy7nCjwuncYOVxHvXLYQ0tgxYGXI3PZhFYz3QWJ WTe1L5vlmf/8yTm9frqEKTc6VXdWwdHKuxRji4kaKMdMAmnmPnoVxBc3VRCTGwUO e8CfRbOcLxqxO0ObiF7myNJq7j6PsVtc/5JGw+U4PqH82lKDJgJszH/J/Peh5WXe j2xftLzIaiT/GUTPlv/cW1PpA9EV6qVPVqAy07xlaC7Yp1lNxZhwyHO8QW4LmsLL 6DzWIN/gYfd5h72wmI4qFaDHO0A5htA= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:10 2025 by rpki-client