$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a323a67-087d-31c3-b437-dffaf70a9750.roa File: 9a323a67-087d-31c3-b437-dffaf70a9750.roa (raw, json) Hash identifier: VcNfQivVrl6stFdxLOEHmGLXek2PY6LfLNzqz8YAhTc= Subject key identifier: F2:3B:3C:EF:58:1B:25:FA:4A:9A:68:AB:B5:81:1C:DB:B0:6A:AB:42 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B83C86F1699B74B34728 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a323a67-087d-31c3-b437-dffaf70a9750.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b8:3c:86:f1:69:9b:74:b3:47:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=ed77fb6c-5231-4f8c-a545-d7eddb48ca31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7a:da:c0:87:96:35:b7:3e:bd:57:13:5d:4c: 6c:4a:78:2f:b8:4c:1b:77:be:a0:e2:cd:6c:fd:fc: fa:90:6e:a6:0b:89:63:96:ed:c3:39:b5:56:b7:97: c1:31:07:92:9e:fc:c1:f5:ec:68:24:dc:23:0d:77: c2:fa:2f:80:cd:ec:28:45:fa:c9:ea:b4:ed:91:7a: 92:b4:67:b9:f3:09:e6:f2:c8:1a:db:e2:6c:f8:cb: 85:28:5a:0b:27:69:17:84:94:a9:a3:11:cd:61:63: a5:52:d4:77:14:b0:e2:da:06:de:f3:48:14:b9:55: 9e:6e:d9:a7:e6:e2:70:e0:21:88:00:3a:03:22:ce: 7e:77:12:6f:33:e1:8d:2f:8d:33:ec:e3:39:46:f7: 63:5d:ff:8f:e9:62:67:11:22:73:d3:a8:97:7f:c8: 6c:a0:9b:ae:19:8e:bf:e7:1b:0f:e1:02:4b:8c:a4: 42:df:cf:42:c2:b7:3e:92:ab:c1:ad:21:9e:ff:ff: 16:22:75:b3:f2:b9:0d:a9:ed:00:eb:47:1e:eb:64: 45:04:ca:95:3d:03:b3:1f:a8:06:a3:97:0c:42:b5: d2:99:d7:71:21:1d:4b:72:29:25:cf:e5:46:64:de: c6:fb:05:88:c7:40:9e:1c:01:e6:b6:4f:7f:a3:8e: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:3B:3C:EF:58:1B:25:FA:4A:9A:68:AB:B5:81:1C:DB:B0:6A:AB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9a323a67-087d-31c3-b437-dffaf70a9750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9a:93:bb:6d:5b:c9:ae:25:c4:94:4e:fb:8d:ea:4f:aa:53: e2:a3:fc:a6:fb:b3:ff:24:4d:b1:fc:3b:21:e2:d1:4e:7f:6b: 0f:5f:9e:96:d2:e5:39:30:58:99:7f:3f:d9:c4:3d:de:d7:6d: 4d:74:06:4e:7c:33:6c:ea:8e:a3:54:91:11:cf:4c:55:d7:57: 90:e7:19:fa:a9:f3:2e:14:42:2f:d8:b6:a8:ab:50:87:54:28: c7:c1:c6:88:67:33:9e:2b:ad:7c:21:22:82:04:17:f1:ab:08: ca:d9:54:fe:59:db:4d:83:e8:0c:a3:a6:41:88:52:e7:58:5d: 30:6a:15:77:27:0f:d3:42:ee:39:b3:1f:a3:0d:97:96:39:c6: 7a:2b:3f:2a:72:d6:35:e5:f9:bb:ae:5f:b4:2b:39:b2:91:8b: 01:51:d4:55:e4:c8:9a:1b:f2:6c:28:52:cc:d8:3a:00:74:af: cd:11:76:97:91:2f:5e:2e:37:05:09:bd:0c:d1:91:34:a4:9f: 5c:2f:cb:d9:c9:41:ce:87:4a:fa:77:46:e5:55:a9:be:12:61: 8a:d2:0f:2f:97:eb:de:65:38:66:77:22:7a:c4:d2:3d:6a:69: 85:0e:c6:51:9d:7b:4e:e8:40:4e:bc:0d:04:e4:74:43:34:38: 5a:63:e6:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprg8hvFpm3SzRygwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZWQ3N2ZiNmMtNTIzMS00ZjhjLWE1NDUtZDdlZGRiNDhjYTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXrawIeWNbc+vVcTXUxsSngvuEwbd76g4s1s /fz6kG6mC4ljlu3DObVWt5fBMQeSnvzB9exoJNwjDXfC+i+AzewoRfrJ6rTtkXqS tGe58wnm8sga2+Js+MuFKFoLJ2kXhJSpoxHNYWOlUtR3FLDi2gbe80gUuVWebtmn 5uJw4CGIADoDIs5+dxJvM+GNL40z7OM5RvdjXf+P6WJnESJz06iXf8hsoJuuGY6/ 5xsP4QJLjKRC389Cwrc+kqvBrSGe//8WInWz8rkNqe0A60ce62RFBMqVPQOzH6gG o5cMQrXSmddxIR1Lciklz+VGZN7G+wWIx0CeHAHmtk9/o45dGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPI7PO9YGyX6Sppoq7WBHNuwaqtCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWEzMjNhNjctMDg3ZC0z MWMzLWI0MzctZGZmYWY3MGE5NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByak7ttW8muJcSUTvuN6k+qU+Kj/Kb7s/8kTbH8OyHi0U5/aw9fnpbS 5TkwWJl/P9nEPd7XbU10Bk58M2zqjqNUkRHPTFXXV5DnGfqp8y4UQi/YtqirUIdU KMfBxohnM54rrXwhIoIEF/GrCMrZVP5Z202D6AyjpkGIUudYXTBqFXcnD9NC7jmz H6MNl5Y5xnorPypy1jXl+buuX7QrObKRiwFR1FXkyJob8mwoUszYOgB0r80RdpeR L14uNwUJvQzRkTSkn1wvy9nJQc6HSvp3RuVVqb4SYYrSDy+X695lOGZ3InrE0j1q aYUOxlGde07oQE68DQTkdEM0OFpj5p0= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:08 2025 by rpki-client