$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa File: b8996c67-d2a0-38e3-a110-eaf29f117b40.roa (raw, json) Hash identifier: nSNkv64T4b4HT3xa9Di1r5qafcbeW9p94LwZt20VavQ= Subject key identifier: 63:46:25:91:2B:C3:42:C9:A2:B5:74:12:BC:00:F7:91:7B:6C:E2:E0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D717563FC95EB7CFCCA9C00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:75:63:fc:95:eb:7c:fc:ca:9c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=af6937d7-8933-490c-b184-0eaa491d65e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a2:ec:0b:3d:9e:82:3b:61:1b:31:77:cf:0e: 1b:35:68:1d:32:ab:aa:7f:a3:72:e3:9c:f1:ef:0a: a8:fe:ca:15:7d:43:55:b3:94:10:48:56:87:eb:05: ea:5e:45:d1:52:ce:11:af:fc:ea:0f:d7:b1:4f:b8: 65:fb:b5:6a:fd:48:f3:33:a0:db:fe:78:bf:40:28: 21:c0:04:40:5b:35:f7:d6:0e:85:a7:1d:68:c1:1d: a4:37:27:a6:f4:6d:80:d6:61:09:d4:e6:c5:29:6a: e0:09:8c:8c:22:b9:a0:14:17:b6:07:df:94:59:35: 8b:87:72:74:b2:56:ca:3e:7e:c4:e0:c9:58:fe:b8: 88:72:d5:31:4e:cb:be:21:22:a1:c8:17:70:c1:ad: e7:06:2e:42:be:32:07:c4:e1:d1:60:48:71:4c:e6: 2f:94:8f:23:ec:6e:07:e9:87:9f:f8:57:9c:95:c5: 78:8c:71:a9:07:9e:a4:f2:7d:4f:b6:41:40:80:21: 4e:f2:59:14:e7:15:ff:bf:4f:cb:59:93:2a:61:fe: 2d:d1:45:84:0e:e8:ea:9c:6f:4e:1d:0a:e2:d1:f8: 49:99:a8:84:aa:13:ac:61:a6:55:01:e4:40:6e:63: 32:b1:e6:10:2b:b9:69:c5:93:de:2e:bc:9c:1e:9a: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:46:25:91:2B:C3:42:C9:A2:B5:74:12:BC:00:F7:91:7B:6C:E2:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:26:35:be:c6:20:ff:a0:fb:0c:dc:32:0e:6b:7e:c0:c7:b9: 25:84:ca:e1:99:a6:f9:05:6e:bb:fd:39:0f:56:92:10:a3:73: ba:c1:4f:9a:0e:48:21:7c:60:ef:8b:71:75:dd:56:02:86:15: b3:81:7e:ef:9d:da:fe:8e:50:92:93:1a:45:22:be:a6:86:91: 28:c2:37:ec:67:55:03:cd:45:4f:71:be:3e:bb:43:c2:15:0c: c5:1a:56:d3:6d:36:b0:5d:9c:c2:b8:43:c2:81:50:21:e4:84: 67:e2:fb:83:86:8d:65:b4:ae:68:2e:44:cb:93:df:a5:e1:17: 50:7c:f4:c0:9f:74:dc:9c:dd:64:6f:a1:e0:34:56:09:03:1c: 35:95:1b:c1:f0:1b:b5:9b:85:3d:04:05:ee:91:ef:40:44:62: 0a:7d:a9:0a:dd:2a:41:ae:c1:f6:d1:42:d8:4d:77:26:0c:58: 4c:61:7d:47:d9:c1:ba:e5:48:0f:e2:12:f9:e8:9a:c8:53:61: d3:07:60:61:34:10:c4:86:38:16:01:10:2d:8c:9f:f9:ce:d4: 10:32:95:2e:ef:c8:37:a1:24:13:b1:5c:25:2d:4b:48:a9:5e: ab:5a:e5:c7:cd:d9:d6:f5:1b:35:81:7a:46:66:28:98:27:f6: ce:47:11:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXVj/JXrfPzKnAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YWY2OTM3ZDctODkzMy00OTBjLWIxODQtMGVhYTQ5MWQ2NWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KLsCz2egjthGzF3zw4bNWgdMquqf6Ny45zx 7wqo/soVfUNVs5QQSFaH6wXqXkXRUs4Rr/zqD9exT7hl+7Vq/UjzM6Db/ni/QCgh wARAWzX31g6Fpx1owR2kNyem9G2A1mEJ1ObFKWrgCYyMIrmgFBe2B9+UWTWLh3J0 slbKPn7E4MlY/riIctUxTsu+ISKhyBdwwa3nBi5CvjIHxOHRYEhxTOYvlI8j7G4H 6Yef+FeclcV4jHGpB56k8n1PtkFAgCFO8lkU5xX/v0/LWZMqYf4t0UWEDujqnG9O HQri0fhJmaiEqhOsYaZVAeRAbmMyseYQK7lpxZPeLrycHppukQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGNGJZErw0LJorV0ErwA95F7bOLgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg5OTZjNjctZDJhMC0z OGUzLWExMTAtZWFmMjlmMTE3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGMmNb7GIP+g+wzcMg5rfsDHuSWEyuGZpvkFbrv9OQ9WkhCjc7rBT5oO SCF8YO+LcXXdVgKGFbOBfu+d2v6OUJKTGkUivqaGkSjCN+xnVQPNRU9xvj67Q8IV DMUaVtNtNrBdnMK4Q8KBUCHkhGfi+4OGjWW0rmguRMuT36XhF1B89MCfdNyc3WRv oeA0VgkDHDWVG8HwG7WbhT0EBe6R70BEYgp9qQrdKkGuwfbRQthNdyYMWExhfUfZ wbrlSA/iEvnomshTYdMHYGE0EMSGOBYBEC2Mn/nO1BAylS7vyDehJBOxXCUtS0ip Xqta5cfN2db1GzWBekZmKJgn9s5HEdw= -----END CERTIFICATE-----Generated at Sat Apr 5 07:26:12 2025 by rpki-client