$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa File: 0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json) Hash identifier: D0SwTPige3dk1zbiu8PeG38ls9JyDGnGzPQldKbogFQ= Subject key identifier: B1:E3:07:78:9C:FF:4F:D3:72:61:7B:D3:DE:64:47:12:99:C3:C7:82 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC2C51867D6524058CD600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2c:51:86:7d:65:24:05:8c:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=ced68dc1-ae5e-46ce-8f52-8772bee2136e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:f8:f4:c0:63:14:03:b7:48:dd:95:17:a2: ea:e4:5d:65:08:46:ae:f0:71:97:1b:25:f1:63:e9: ec:ab:32:22:59:0a:3e:32:22:d2:cc:57:c2:2c:50: fe:08:dd:4f:cd:29:21:b7:bb:3e:45:e9:d7:c3:47: 6e:ca:a4:ca:2c:86:e6:4e:5d:20:00:a6:63:4c:a5: ed:62:63:46:7b:87:7b:60:5a:de:c9:27:88:27:6a: 80:6a:97:e0:75:db:45:e4:d1:66:f1:41:1c:d2:36: 80:e5:94:99:de:ce:b5:73:95:49:69:bf:61:13:4d: a3:56:62:1e:ec:02:c3:f0:e5:be:7e:a0:af:80:b8: e1:bc:bd:62:63:8c:0e:f8:bb:73:81:b9:f4:52:ec: 08:23:42:30:75:2a:8e:28:ae:04:f2:60:4d:81:ee: 8b:72:06:e9:57:6c:71:d6:0d:58:1c:d5:e2:d3:1d: b8:02:c2:0d:c8:06:28:47:45:64:09:e2:f4:b1:d1: 07:07:e1:b2:b7:af:c9:52:1c:c6:73:fe:9e:81:07: 1b:db:05:a9:27:33:64:dc:91:ab:28:80:bd:7f:14: ac:37:25:3f:60:f2:4e:93:c8:68:4a:73:82:64:16: 5b:2d:c6:47:5c:02:45:2e:b3:74:d5:36:a5:b7:1e: 8f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E3:07:78:9C:FF:4F:D3:72:61:7B:D3:DE:64:47:12:99:C3:C7:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ad:af:f9:9e:84:66:2c:0b:15:3a:e9:6b:9f:9d:ca:48:5c: f9:32:f4:45:7d:43:9c:91:cf:4b:1a:27:f5:62:49:1b:f1:5c: 71:b7:88:ff:af:96:41:fa:04:d4:45:65:c1:f8:d8:14:61:63: e0:ee:fe:3d:cf:55:d0:85:44:35:9a:e3:7a:f0:fd:41:43:dd: d1:c1:96:ab:d7:18:88:f8:31:06:d2:ed:8e:3f:96:b2:20:00: d3:ec:a6:bb:75:09:9d:f0:a2:18:b4:48:76:e5:ad:aa:d3:91: 75:b2:76:f7:83:bf:09:35:19:9f:76:bd:33:11:bc:72:e9:7a: 45:0a:70:a1:23:3b:91:cc:f5:4f:29:ce:07:0f:03:2b:95:48: 8f:e8:d1:ec:4d:c4:24:3e:c1:85:2f:45:73:16:7a:40:26:dc: dc:d6:d1:fe:9b:70:57:4e:d9:36:e0:5e:02:de:cb:99:64:99: fa:3c:22:75:57:10:76:6c:aa:1f:94:a7:d0:b9:f1:54:c7:b9: c9:80:31:c6:40:35:6f:70:ce:68:d2:0e:77:fa:a2:4e:5b:41: e6:b6:00:b4:90:b9:25:ed:78:e8:81:54:15:72:1a:59:99:e6: bf:53:fb:89:7b:ea:f8:a1:d3:3d:f9:fa:ad:9b:0e:1e:aa:d7: 85:ed:f5:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CxRhn1lJAWM1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk Y2VkNjhkYzEtYWU1ZS00NmNlLThmNTItODc3MmJlZTIxMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UP49MBjFAO3SN2VF6Lq5F1lCEau8HGXGyXx Y+nsqzIiWQo+MiLSzFfCLFD+CN1PzSkht7s+RenXw0duyqTKLIbmTl0gAKZjTKXt YmNGe4d7YFreySeIJ2qAapfgddtF5NFm8UEc0jaA5ZSZ3s61c5VJab9hE02jVmIe 7ALD8OW+fqCvgLjhvL1iY4wO+Ltzgbn0UuwII0IwdSqOKK4E8mBNge6LcgbpV2xx 1g1YHNXi0x24AsINyAYoR0VkCeL0sdEHB+Gyt6/JUhzGc/6egQcb2wWpJzNk3JGr KIC9fxSsNyU/YPJOk8hoSnOCZBZbLcZHXAJFLrN01Taltx6PEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLHjB3ic/0/TcmF7095kRxKZw8eCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGY4ODcxYjQtYjdjOS0z OTE2LThlMzYtNGRlYWJhYjRjMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2tr/mehGYsCxU66WufncpIXPky9EV9Q5yRz0saJ/ViSRvxXHG3iP+v lkH6BNRFZcH42BRhY+Du/j3PVdCFRDWa43rw/UFD3dHBlqvXGIj4MQbS7Y4/lrIg ANPsprt1CZ3wohi0SHblrarTkXWydveDvwk1GZ92vTMRvHLpekUKcKEjO5HM9U8p zgcPAyuVSI/o0exNxCQ+wYUvRXMWekAm3NzW0f6bcFdO2TbgXgLey5lkmfo8InVX EHZsqh+Up9C58VTHucmAMcZANW9wzmjSDnf6ok5bQea2ALSQuSXteOiBVBVyGlmZ 5r9T+4l76vih0z35+q2bDh6q14Xt9VI= -----END CERTIFICATE-----Generated at Sat Apr 5 11:04:44 2025 by rpki-client