$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c49a0dd9-5984-3939-bb45-6ce8335da97a.roa File: c49a0dd9-5984-3939-bb45-6ce8335da97a.roa (raw, json) Hash identifier: s/OKiI3IkaDR4QB2p6F5XuTraOpBrH/HGiQt7OFWRLc= Subject key identifier: 9F:52:CD:58:A3:D4:D1:CE:FC:2A:0F:EB:06:73:78:C3:29:23:A6:C3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858492E13B8F9B75AF620C33B1800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c49a0dd9-5984-3939-bb45-6ce8335da97a.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:b8:f9:b7:5a:f6:20:c3:3b:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=3b1b8db6-0fac-4db3-82eb-2a7dd713b7cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:79:28:bf:89:5f:e5:81:f0:c3:0c:45:71:b9: 65:4f:51:be:fc:37:53:dd:39:87:10:dc:d5:21:9a: d7:36:44:e2:3d:67:50:a5:d9:27:bd:11:ff:48:70: 40:bb:56:e7:0d:f2:89:da:61:c0:ac:b3:76:19:6a: f6:1d:96:f7:c1:b3:a5:a0:ab:4e:be:49:03:0b:a8: d9:0a:5f:c4:0b:3a:19:8a:ea:a9:9f:45:4c:22:dc: 07:91:5e:22:18:0b:72:62:15:b3:2c:4b:42:8c:60: 8b:b7:40:65:80:21:a4:56:8e:13:74:bf:75:76:ab: 62:39:72:d8:ac:cc:ff:bf:de:d6:01:21:ce:00:3a: 17:9f:58:87:43:ce:8c:48:18:36:ea:14:f6:1b:e7: 51:00:18:75:66:d6:da:18:78:e8:2a:e6:ea:50:fd: 3d:73:93:0f:7d:ab:27:8e:bd:71:c8:4f:cd:ed:98: f6:d3:86:ef:39:72:83:40:0d:f6:ec:82:31:24:da: 08:0d:1b:d1:3c:fd:ea:98:13:21:0c:57:9d:31:88: 85:3a:3d:23:b4:37:01:6b:43:cc:07:1d:ca:ef:f2: 29:a2:55:aa:c7:f0:69:54:07:82:82:17:28:80:80: 79:f5:fb:60:82:d5:d4:2e:06:14:c0:b1:15:6d:b6: e4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:52:CD:58:A3:D4:D1:CE:FC:2A:0F:EB:06:73:78:C3:29:23:A6:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/c49a0dd9-5984-3939-bb45-6ce8335da97a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:b5:09:f1:8c:b2:75:48:e0:54:ee:1b:95:e1:45:da:1d:13: 84:6e:7e:39:0a:12:43:d2:01:a8:4f:92:68:71:db:45:d6:47: 91:e5:d9:82:3f:44:7d:53:98:17:25:16:bf:9f:52:53:54:1b: be:87:54:13:a3:06:11:8d:8c:70:9b:fc:81:d8:52:01:da:6a: 77:61:59:34:64:bc:3d:3d:57:fc:be:98:3e:6e:c4:d5:1f:4c: ce:c7:82:ef:10:c1:04:05:64:62:4c:f2:51:e2:02:20:88:da: 6d:ee:8b:1c:ab:48:8b:de:22:97:9f:77:b3:55:a9:80:01:b1: 72:49:93:a2:13:9c:76:aa:21:29:47:15:ec:f8:06:7e:98:ff: 01:e4:de:da:b1:1d:32:1e:08:5e:41:b0:24:a8:06:78:12:ae: a8:3a:ab:33:ca:41:6d:45:50:86:e4:2e:b9:0a:79:2f:81:3e: 3b:3b:25:2b:f4:35:40:b6:14:8a:9a:0c:46:14:0d:01:23:77: 26:83:b6:7c:a7:40:db:a9:83:bc:6e:d0:57:8c:c7:a7:bf:72: cb:34:e7:99:57:ab:64:4c:95:70:18:2a:19:84:31:bb:7e:4f: 50:32:f8:0f:f9:e4:96:d5:2c:fa:8e:c5:0b:3c:35:d5:47:2d: c0:f9:7c:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7j5t1r2IMM7GAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk M2IxYjhkYjYtMGZhYy00ZGIzLTgyZWItMmE3ZGQ3MTNiN2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXkov4lf5YHwwwxFcbllT1G+/DdT3TmHENzV IZrXNkTiPWdQpdknvRH/SHBAu1bnDfKJ2mHArLN2GWr2HZb3wbOloKtOvkkDC6jZ Cl/ECzoZiuqpn0VMItwHkV4iGAtyYhWzLEtCjGCLt0BlgCGkVo4TdL91dqtiOXLY rMz/v97WASHOADoXn1iHQ86MSBg26hT2G+dRABh1ZtbaGHjoKubqUP09c5MPfasn jr1xyE/N7Zj204bvOXKDQA327IIxJNoIDRvRPP3qmBMhDFedMYiFOj0jtDcBa0PM Bx3K7/IpolWqx/BpVAeCghcogIB59ftggtXULgYUwLEVbbbk9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ9SzVij1NHO/CoP6wZzeMMpI6bDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYzQ5YTBkZDktNTk4NC0z OTM5LWJiNDUtNmNlODMzNWRhOTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAu1CfGMsnVI4FTuG5XhRdodE4RufjkKEkPSAahPkmhx20XWR5Hl2YI/ RH1TmBclFr+fUlNUG76HVBOjBhGNjHCb/IHYUgHaandhWTRkvD09V/y+mD5uxNUf TM7Hgu8QwQQFZGJM8lHiAiCI2m3uixyrSIveIpefd7NVqYABsXJJk6ITnHaqISlH Fez4Bn6Y/wHk3tqxHTIeCF5BsCSoBngSrqg6qzPKQW1FUIbkLrkKeS+BPjs7JSv0 NUC2FIqaDEYUDQEjdyaDtnynQNupg7xu0FeMx6e/css055lXq2RMlXAYKhmEMbt+ T1Ay+A/55JbVLPqOxQs8NdVHLcD5fGM= -----END CERTIFICATE-----Generated at Sat Apr 5 07:29:09 2025 by rpki-client