$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa File: af81503f-94d7-3c4a-82d3-477d600d79fc.roa (raw, json) Hash identifier: 4Bl1pjvBG8BXvMn/HMaM2SufcW8MgoKvHmI0k7As/R4= Subject key identifier: 02:18:4E:92:2E:F8:92:31:EB:AC:17:39:AE:4E:9D:DC:99:2C:B2:70 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858493243DA7576038717304CCB80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:da:75:76:03:87:17:30:4c:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=474faefb-86e2-4655-bd4d-7822ecd2a499 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:13:b7:f8:d7:55:21:77:ed:84:46:33:10:6a: dc:8e:79:0d:cf:ca:a9:32:fd:a3:6d:63:00:d5:9b: d5:0b:ca:0d:64:79:06:c3:ff:54:58:9e:bd:4d:01: 43:6d:ce:57:12:cc:f9:fc:d7:7c:7b:65:58:c0:c2: 05:bd:2d:b8:dd:8c:81:6e:1a:fb:43:1a:1e:f7:ae: 65:c1:0b:80:83:db:95:a2:d3:47:38:e9:79:75:da: 97:58:ee:fb:48:f3:76:25:ed:8c:21:8a:f6:64:e4: 78:e2:90:5b:32:1a:5b:97:b1:0b:fc:a3:09:27:62: 87:80:d6:29:25:2a:14:0c:36:51:20:fc:bc:5c:8c: 4a:00:06:ba:da:70:89:b8:3f:fc:3d:81:01:e9:5e: 71:39:a8:5e:10:d7:b4:b6:e4:f9:6a:7a:2b:53:b0: 46:e2:06:6d:28:67:45:36:b6:fe:5c:b9:cf:39:68: cc:c1:71:d9:7f:71:49:4b:51:7b:f8:03:74:89:62: a5:fd:aa:b1:a1:05:48:73:5a:b2:51:f4:35:cc:54: 68:b9:60:da:62:7d:03:0e:b5:0a:7e:f3:79:6c:ab: d8:a9:28:74:97:55:05:07:0c:05:cf:a2:f7:17:b0: 51:3d:98:c9:0b:a0:d2:81:4e:96:a1:48:b2:29:bb: 89:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:18:4E:92:2E:F8:92:31:EB:AC:17:39:AE:4E:9D:DC:99:2C:B2:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/af81503f-94d7-3c4a-82d3-477d600d79fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:0e:7a:db:cc:17:d7:1f:af:6d:26:3d:30:c6:e4:59:34:1e: 8b:90:29:40:11:22:60:17:b9:c1:5a:17:6d:91:36:a0:1c:11: c2:21:de:2b:f8:70:31:c8:a1:05:cc:02:40:b7:36:d8:02:44: 55:d5:b6:de:29:11:a5:98:09:5f:4b:b5:b8:6f:59:7f:a2:d5: 95:61:a3:d2:9f:48:51:0e:d3:72:1a:81:95:c7:88:56:21:90: 25:8e:a0:a8:bb:d6:4c:b1:2c:1f:9d:07:d3:6d:58:ed:fd:11: 3c:19:f0:80:db:e6:a2:50:54:db:a9:f4:57:05:1a:cf:f1:72: 8b:5e:46:0b:ca:14:7a:4d:a7:34:03:1f:61:4b:d6:84:3d:03: a3:1a:54:79:a6:a7:88:11:34:9b:b1:ea:9f:40:91:83:5c:e4: 5f:1e:50:7e:43:6c:64:ce:11:09:34:a5:ab:8c:cf:aa:46:ca: b1:7f:6d:b1:b3:e0:6b:11:a3:23:42:d1:1d:8f:e5:a0:d2:d9: 3b:67:03:5b:7b:d5:24:a6:36:57:1a:b5:f6:9f:e3:a1:0d:c8: 4a:7e:7b:ed:9b:ab:c9:4a:ea:79:ca:af:4b:85:ee:08:d4:bb: 2c:8d:ad:5b:97:10:27:01:0c:d8:33:bd:4d:d4:dd:92:2c:9e: a8:b1:11:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9p1dgOHFzBMy4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NDc0ZmFlZmItODZlMi00NjU1LWJkNGQtNzgyMmVjZDJhNDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhO3+NdVIXfthEYzEGrcjnkNz8qpMv2jbWMA 1ZvVC8oNZHkGw/9UWJ69TQFDbc5XEsz5/Nd8e2VYwMIFvS243YyBbhr7Qxoe965l wQuAg9uVotNHOOl5ddqXWO77SPN2Je2MIYr2ZOR44pBbMhpbl7EL/KMJJ2KHgNYp JSoUDDZRIPy8XIxKAAa62nCJuD/8PYEB6V5xOaheENe0tuT5anorU7BG4gZtKGdF Nrb+XLnPOWjMwXHZf3FJS1F7+AN0iWKl/aqxoQVIc1qyUfQ1zFRouWDaYn0DDrUK fvN5bKvYqSh0l1UFBwwFz6L3F7BRPZjJC6DSgU6WoUiyKbuJRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIYTpIu+JIx66wXOa5OndyZLLJwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWY4MTUwM2YtOTRkNy0z YzRhLTgyZDMtNDc3ZDYwMGQ3OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHEOetvMF9cfr20mPTDG5Fk0HouQKUARImAXucFaF22RNqAcEcIh3iv4 cDHIoQXMAkC3NtgCRFXVtt4pEaWYCV9LtbhvWX+i1ZVho9KfSFEO03IagZXHiFYh kCWOoKi71kyxLB+dB9NtWO39ETwZ8IDb5qJQVNup9FcFGs/xcoteRgvKFHpNpzQD H2FL1oQ9A6MaVHmmp4gRNJux6p9AkYNc5F8eUH5DbGTOEQk0pauMz6pGyrF/bbGz 4GsRoyNC0R2P5aDS2TtnA1t71SSmNlcatfaf46ENyEp+e+2bq8lK6nnKr0uF7gjU uyyNrVuXECcBDNgzvU3U3ZIsnqixEXk= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:04 2025 by rpki-client