$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8dd6539b-1f67-3a9a-908f-3ca1548d928c.roa File: 8dd6539b-1f67-3a9a-908f-3ca1548d928c.roa (raw, json) Hash identifier: 27UGnCF0enojm0rN6/B4TQYoUvr3kG1UIdmj4Zi4Lqw= Subject key identifier: BC:EA:67:DD:E8:7B:87:63:E2:03:47:DC:31:1C:FD:1A:A1:8A:1F:93 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D717A6473E57767272CF580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8dd6539b-1f67-3a9a-908f-3ca1548d928c.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7a:64:73:e5:77:67:27:2c:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=80432604-e94e-4fd7-a19e-534210e12835 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:9c:83:3b:2a:e5:a6:35:02:73:39:e6:d9: d3:f3:60:30:d5:20:81:de:64:96:26:68:0e:cf:4e: f3:37:d7:dd:6c:07:7a:e9:16:e0:7c:d7:0f:aa:b9: 2b:49:35:95:d7:26:9a:1b:c1:7c:0d:b0:a9:0e:b6: 4f:7a:37:7b:f8:f3:60:7a:50:cd:28:67:67:9d:32: 50:1d:b5:70:57:a7:91:37:4f:77:f9:8d:0c:80:7c: c3:33:a6:80:d9:1d:ac:10:93:d9:7e:90:0c:68:e8: 97:1f:15:13:13:6c:aa:2a:9a:9d:d3:dc:1d:91:95: f1:01:23:ea:60:0a:c5:85:c2:e7:c4:9f:48:02:c1: d7:35:5f:24:ca:7b:5d:8e:58:f8:c9:bd:cc:cb:eb: 4c:a4:ad:e1:4e:b4:79:7c:87:05:c4:b7:6c:42:d5: b3:34:fd:ca:3a:65:28:9b:20:f8:ff:6b:d9:97:90: 18:51:0d:57:ee:78:6b:b9:cf:51:75:a0:45:15:95: a1:0d:59:33:2b:c6:0f:bb:cd:5a:67:24:e3:b2:c7: 39:3d:b0:5d:94:25:60:5d:42:87:a7:5d:0e:d2:86: 0a:74:ca:c0:26:68:99:30:23:9b:11:5f:e9:f4:42: 3a:fd:0b:41:3e:bf:08:90:55:72:85:05:92:93:5d: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:EA:67:DD:E8:7B:87:63:E2:03:47:DC:31:1C:FD:1A:A1:8A:1F:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8dd6539b-1f67-3a9a-908f-3ca1548d928c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:71:a7:9d:57:6e:5c:41:2f:77:ee:3f:c7:97:54:1c:94:22: a0:ed:20:a6:84:b4:48:6a:1c:90:23:9e:58:7a:b4:d7:a8:f8: 18:36:18:7a:d5:1e:b8:1f:de:5c:40:c3:06:7c:e9:88:c7:a4: 8f:44:0b:f9:f4:87:de:4d:de:2c:22:a7:f8:dd:48:1a:d7:8e: 2e:27:33:aa:31:33:3b:44:7d:e1:e3:6b:92:54:25:9d:f7:87: ec:85:e8:c3:6b:c3:b9:bd:f4:78:7d:0c:00:5d:25:72:01:4f: 67:72:38:d5:6a:3d:30:5a:0e:a5:fa:35:14:27:b2:ff:c8:f5: 5d:6c:e3:33:26:a6:49:87:c4:02:9f:7e:7b:bf:b5:4d:f3:fb: 87:7a:56:a1:1e:a7:f9:39:37:92:a3:28:ef:d6:f0:fe:73:0f: 74:ef:c1:8e:8c:a0:a1:3d:cc:16:06:84:be:d4:01:94:5e:ef: 9b:d6:7e:b7:fd:62:35:66:32:04:9d:f7:36:fb:b0:95:c5:60: 4d:58:72:df:5e:b6:58:f7:3f:1d:5a:3e:d3:7b:70:2f:33:cf: 05:45:d4:ed:5a:5d:b8:4f:b4:e0:b7:23:85:9f:33:7b:c9:42: 7d:e7:c6:11:c5:3a:47:61:e4:8d:4e:a6:b5:3e:bf:25:c9:8e: 5e:be:e6:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXpkc+V3Zycs9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ODA0MzI2MDQtZTk0ZS00ZmQ3LWExOWUtNTM0MjEwZTEyODM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiycgzsq5aY1AnM55tnT82Aw1SCB3mSWJmgO z07zN9fdbAd66RbgfNcPqrkrSTWV1yaaG8F8DbCpDrZPejd7+PNgelDNKGdnnTJQ HbVwV6eRN093+Y0MgHzDM6aA2R2sEJPZfpAMaOiXHxUTE2yqKpqd09wdkZXxASPq YArFhcLnxJ9IAsHXNV8kyntdjlj4yb3My+tMpK3hTrR5fIcFxLdsQtWzNP3KOmUo myD4/2vZl5AYUQ1X7nhruc9RdaBFFZWhDVkzK8YPu81aZyTjssc5PbBdlCVgXUKH p10O0oYKdMrAJmiZMCObEV/p9EI6/QtBPr8IkFVyhQWSk13R4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLzqZ93oe4dj4gNH3DEc/Rqhih+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGRkNjUzOWItMWY2Ny0z YTlhLTkwOGYtM2NhMTU0OGQ5MjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZxp51XblxBL3fuP8eXVByUIqDtIKaEtEhqHJAjnlh6tNeo+Bg2GHrV Hrgf3lxAwwZ86YjHpI9EC/n0h95N3iwip/jdSBrXji4nM6oxMztEfeHja5JUJZ33 h+yF6MNrw7m99Hh9DABdJXIBT2dyONVqPTBaDqX6NRQnsv/I9V1s4zMmpkmHxAKf fnu/tU3z+4d6VqEep/k5N5KjKO/W8P5zD3TvwY6MoKE9zBYGhL7UAZRe75vWfrf9 YjVmMgSd9zb7sJXFYE1Yct9etlj3Px1aPtN7cC8zzwVF1O1aXbhPtOC3I4WfM3vJ Qn3nxhHFOkdh5I1OprU+vyXJjl6+5pk= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:12 2025 by rpki-client