$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa File: 9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa (raw, json) Hash identifier: ERpbWnPOSTG2cTCXSFaCU0dsKXp3PPu8M13TJkgcuzk= Subject key identifier: 79:8B:7C:90:BE:3C:F8:AD:E4:E2:39:52:8A:F9:3A:71:52:45:5D:C7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B5F174754951E6B8B1C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b5:f1:74:75:49:51:e6:b8:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=68dec3f4-57d0-42be-8a65-60a506cd01d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6d:af:5d:e5:60:ca:e0:3d:36:36:49:14:f8: 3f:ec:f9:aa:6d:e0:67:35:ef:9d:4d:88:90:86:56: 0c:b6:d2:3f:b3:65:4a:41:29:ef:bd:fb:c3:8a:15: 1a:ce:6e:93:d8:7d:a0:6e:f9:1a:cf:4c:bc:a4:12: d0:82:eb:64:f8:63:32:09:0d:22:64:c9:73:c3:4c: 36:6f:6e:4d:fa:94:b8:40:8e:71:a7:0e:e7:d2:de: 6d:e0:30:56:57:36:77:5d:b5:84:1b:f3:56:86:5a: dc:4a:41:61:52:b9:99:5d:43:32:67:95:0a:2f:50: 12:82:fc:6e:da:52:22:a0:a5:17:68:7b:a9:e3:d2: 97:71:b5:b3:80:81:43:9e:79:32:26:76:7e:f6:2f: 1e:08:19:d1:d1:c9:e9:7b:68:21:c6:63:f7:77:84: 3f:b5:89:bc:d8:ed:15:85:2b:0a:f1:f9:6e:a7:e2: c6:0c:8c:31:d7:a8:28:f5:b9:ff:94:64:cb:99:99: 59:31:bc:a4:ef:cf:2c:af:b7:1f:f4:5f:a9:62:a6: 1f:8c:8d:1e:fc:f6:80:af:69:37:31:41:92:1e:e2: ff:1e:d9:33:da:e7:66:eb:4b:9b:2f:3f:38:a0:97: 7f:72:44:aa:1f:98:9f:b3:8d:05:b2:93:ec:c2:3d: f8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:8B:7C:90:BE:3C:F8:AD:E4:E2:39:52:8A:F9:3A:71:52:45:5D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9c329b1d-d459-3d69-8be1-18dc1b2837d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:6e:59:32:e9:a7:b7:48:90:f8:de:c3:a0:d7:92:67:fd:ca: f6:7e:5b:c0:98:78:4c:76:25:90:1c:9b:a1:18:c7:80:0f:e4: db:f1:f4:7b:0d:91:fe:2b:35:5a:e1:91:95:5b:f1:79:b0:f1: 5f:c0:37:5e:e8:3c:28:bf:07:8e:5d:8d:18:0a:2b:ed:d3:fd: 1d:34:bc:d3:e3:f5:be:5d:06:26:ea:12:ff:2a:d7:f5:10:c3: bf:bf:6d:64:a3:b9:c6:42:c0:85:d1:7a:69:ee:ca:55:48:1d: 41:47:c5:da:e7:44:45:61:5f:ec:ce:f7:5c:cd:4e:ce:68:a4: 51:3e:90:62:50:ea:cc:ad:ff:b3:a3:0b:b1:a1:54:90:93:1a: 8f:1b:b4:4f:05:46:f5:80:41:eb:92:69:3c:ec:5c:d5:3b:f7: ec:04:8b:b7:e1:eb:07:26:59:db:e5:2f:44:3a:04:32:f2:6f: a4:f3:f0:e7:0c:50:b5:95:8f:4f:2f:10:6c:df:2d:8e:6c:78: ab:e7:f1:ba:c4:62:05:75:11:72:b5:f9:6e:ce:2a:58:44:4f: 0c:0b:62:8c:d3:6a:b1:dc:dd:57:08:e3:73:ff:1c:cd:ef:d3: 5b:df:3b:2f:2f:77:5c:f5:cc:7d:8a:9c:61:5e:bf:99:43:b8: 0d:27:2c:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprXxdHVJUea4scAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NjhkZWMzZjQtNTdkMC00MmJlLThhNjUtNjBhNTA2Y2QwMWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi22vXeVgyuA9NjZJFPg/7PmqbeBnNe+dTYiQ hlYMttI/s2VKQSnvvfvDihUazm6T2H2gbvkaz0y8pBLQgutk+GMyCQ0iZMlzw0w2 b25N+pS4QI5xpw7n0t5t4DBWVzZ3XbWEG/NWhlrcSkFhUrmZXUMyZ5UKL1ASgvxu 2lIioKUXaHup49KXcbWzgIFDnnkyJnZ+9i8eCBnR0cnpe2ghxmP3d4Q/tYm82O0V hSsK8flup+LGDIwx16go9bn/lGTLmZlZMbyk788sr7cf9F+pYqYfjI0e/PaAr2k3 MUGSHuL/Htkz2udm60ubLz84oJd/ckSqH5ifs40FspPswj34kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHmLfJC+PPit5OI5Uor5OnFSRV3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWMzMjliMWQtZDQ1OS0z ZDY5LThiZTEtMThkYzFiMjgzN2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBuWTLpp7dIkPjew6DXkmf9yvZ+W8CYeEx2JZAcm6EYx4AP5Nvx9HsN kf4rNVrhkZVb8Xmw8V/AN17oPCi/B45djRgKK+3T/R00vNPj9b5dBibqEv8q1/UQ w7+/bWSjucZCwIXRemnuylVIHUFHxdrnREVhX+zO91zNTs5opFE+kGJQ6syt/7Oj C7GhVJCTGo8btE8FRvWAQeuSaTzsXNU79+wEi7fh6wcmWdvlL0Q6BDLyb6Tz8OcM ULWVj08vEGzfLY5seKvn8brEYgV1EXK1+W7OKlhETwwLYozTarHc3VcI43P/HM3v 01vfOy8vd1z1zH2KnGFev5lDuA0nLBY= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:10 2025 by rpki-client