$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/966885e5-7c9c-3c0d-b507-43771e03a19f.roa File: 966885e5-7c9c-3c0d-b507-43771e03a19f.roa (raw, json) Hash identifier: vGPPXcxRhqvnDwsUlZajghPJv6vZfRaN7kGdKy4VeXo= Subject key identifier: 8A:E3:B5:3F:75:B9:A0:77:30:E8:7C:8E:61:EB:6D:3E:B5:4C:B5:59 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858492E13B89799201AF9771D4C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/966885e5-7c9c-3c0d-b507-43771e03a19f.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:b8:97:99:20:1a:f9:77:1d:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=d51535f1-4b9e-4018-9a16-0fd24d0d3919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:df:1d:7d:d4:f2:a2:f9:27:92:70:a1:dd:9e: a1:7d:ca:dd:c7:a9:26:34:34:21:0c:b3:67:59:d1: bb:f4:b1:41:86:09:9a:b8:52:15:c6:22:5d:43:81: 33:4c:61:0d:17:a3:0c:e0:68:19:54:ca:7b:61:a1: 82:99:1c:6f:9f:4a:d3:c8:3a:de:ee:e5:45:fe:eb: 05:e0:c6:bd:b8:70:14:8c:28:39:f8:c5:4e:30:1a: 71:08:c1:64:9f:02:18:18:2f:02:82:08:76:bc:a0: 8f:79:ea:00:74:72:36:e9:ce:b3:2f:3a:81:58:cc: 08:51:cd:4f:6d:e7:08:17:2b:bf:d2:8d:2d:02:a8: e5:cd:a8:e5:9f:cd:03:3b:4f:80:db:48:de:75:f2: a8:33:a1:51:ee:f0:96:be:03:17:72:fb:1a:aa:ce: 2e:6e:83:8d:3b:80:ce:21:35:18:e9:4a:7b:71:b6: 2a:85:f1:a0:65:1f:42:64:f7:10:4a:c0:52:e7:e8: 17:28:e3:ef:35:b4:92:a1:71:f6:34:42:eb:36:13: bc:30:ef:91:0a:86:12:3a:b9:2e:6f:39:dc:79:47: 10:8a:d9:b7:8b:f0:48:84:f5:a3:02:d2:fd:fe:0f: 3a:55:af:23:2d:b5:36:a7:d9:e6:59:8d:ff:90:a5: 48:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:E3:B5:3F:75:B9:A0:77:30:E8:7C:8E:61:EB:6D:3E:B5:4C:B5:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/966885e5-7c9c-3c0d-b507-43771e03a19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:8d:bc:d4:da:0f:07:7a:10:26:07:26:09:3c:8f:50:a9:b3: 35:9e:1d:ef:64:00:77:ff:d5:40:91:f6:90:a7:83:1d:57:53: fe:3f:2f:d9:28:78:ce:8c:d6:8a:77:44:59:09:8f:ff:d9:ea: b5:f1:11:24:0d:e5:87:b6:9f:0d:5d:34:12:75:44:37:56:e2: 79:b3:20:a9:1d:0d:3e:02:be:7b:f5:c2:9a:ed:a1:2d:13:3c: ad:f0:d5:f5:d4:bb:98:31:6f:9f:16:a8:91:9c:96:84:0f:75: da:33:b2:53:02:56:2d:75:89:4b:ec:e3:e9:fc:bc:cc:36:65: 64:dc:b0:14:00:d1:3b:78:25:e0:ee:86:0f:0d:7f:0e:6e:65: a8:d2:5f:ee:86:0d:ae:40:d1:ba:23:35:86:0c:4e:e2:2f:45: 65:2e:e3:e6:c8:3d:a7:42:72:69:71:ac:7b:0d:10:33:3b:f9: d4:fe:d7:3c:e5:3f:b9:bc:84:54:88:9a:e8:83:19:aa:7c:66: 77:30:b4:59:ca:33:1e:98:f2:19:da:11:bf:e4:11:63:6d:a7: 81:84:74:b8:79:ea:d3:da:ba:01:6e:ee:8f:6d:b0:fd:bc:c2: 5d:c8:76:d6:5b:7b:f0:f1:6f:af:aa:24:7f:15:30:24:a5:3c: 39:26:d7:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7iXmSAa+XcdTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk ZDUxNTM1ZjEtNGI5ZS00MDE4LTlhMTYtMGZkMjRkMGQzOTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhd8dfdTyovknknCh3Z6hfcrdx6kmNDQhDLNn WdG79LFBhgmauFIVxiJdQ4EzTGENF6MM4GgZVMp7YaGCmRxvn0rTyDre7uVF/usF 4Ma9uHAUjCg5+MVOMBpxCMFknwIYGC8Cggh2vKCPeeoAdHI26c6zLzqBWMwIUc1P becIFyu/0o0tAqjlzajln80DO0+A20jedfKoM6FR7vCWvgMXcvsaqs4uboONO4DO ITUY6Up7cbYqhfGgZR9CZPcQSsBS5+gXKOPvNbSSoXH2NELrNhO8MO+RCoYSOrku bznceUcQitm3i/BIhPWjAtL9/g86Va8jLbU2p9nmWY3/kKVI+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIrjtT91uaB3MOh8jmHrbT61TLVZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTY2ODg1ZTUtN2M5Yy0z YzBkLWI1MDctNDM3NzFlMDNhMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuNvNTaDwd6ECYHJgk8j1CpszWeHe9kAHf/1UCR9pCngx1XU/4/L9ko eM6M1op3RFkJj//Z6rXxESQN5Ye2nw1dNBJ1RDdW4nmzIKkdDT4Cvnv1wprtoS0T PK3w1fXUu5gxb58WqJGcloQPddozslMCVi11iUvs4+n8vMw2ZWTcsBQA0Tt4JeDu hg8Nfw5uZajSX+6GDa5A0bojNYYMTuIvRWUu4+bIPadCcmlxrHsNEDM7+dT+1zzl P7m8hFSImuiDGap8ZncwtFnKMx6Y8hnaEb/kEWNtp4GEdLh56tPaugFu7o9tsP28 wl3IdtZbe/Dxb6+qJH8VMCSlPDkm1+4= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:12 2025 by rpki-client