$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1724b5be-729d-3151-82e3-eb3235fd57c5.roa File: 1724b5be-729d-3151-82e3-eb3235fd57c5.roa (raw, json) Hash identifier: gwYPvxNdgxUs6jVS2P0paoC1wGew2yJJUkHUaAJZFbY= Subject key identifier: 23:05:B1:AD:EE:68:6A:0F:9C:C4:E0:53:EC:DD:A2:E7:28:3F:89:E4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848D641066C9F7A737057980780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1724b5be-729d-3151-82e3-eb3235fd57c5.roa Signing time: Mon 10 Feb 2025 14:00:52 +0000 ROA not before: Mon 10 Feb 2025 14:00:52 +0000 ROA not after: Sun 11 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d6:41:06:6c:9f:7a:73:70:57:98:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 10 14:00:52 2025 GMT Not After : May 11 13:00:52 2025 GMT Subject: CN=4341b9b8-c0d9-4732-a183-9937af3a9b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:87:0a:a1:bf:85:a5:f3:d9:98:b7:c9:3c:04: 17:78:e8:1e:08:86:bd:dd:a4:df:5a:7f:eb:14:ae: 39:78:86:a7:6e:b5:76:34:8e:0a:ac:05:69:8e:4d: 70:04:ea:70:50:d3:2f:42:c8:3e:12:9c:cd:5c:87: fa:0c:7c:16:95:1e:98:ba:ef:5c:84:68:2a:b3:30: f7:99:67:90:6d:db:78:97:c0:60:7e:ed:a2:db:2e: ec:ed:be:49:45:97:2e:7e:f7:93:99:b3:87:85:55: e9:d3:29:fa:5c:ce:a7:03:b0:53:91:03:00:f3:c1: 07:86:c6:05:c3:d5:7e:35:4e:ac:14:c5:95:d3:51: 40:47:1e:92:de:42:f7:a1:d2:e8:58:9b:b3:5d:9d: c0:98:10:dd:0e:f0:f0:1f:77:6b:1f:f2:7e:7d:16: 01:8e:bc:7b:cc:4d:42:51:e5:8a:98:f6:3f:54:4e: 42:b2:59:e1:32:9e:ab:ce:1b:fd:77:78:13:3e:69: 9f:b6:e8:c6:b0:97:60:06:73:37:ab:c4:c7:65:81: 76:9c:1f:78:22:86:ea:43:74:a3:b9:60:64:5d:8c: 61:31:56:1c:4e:de:8d:9d:19:45:80:db:4f:bb:b3: 5e:47:0b:08:fb:41:21:26:74:52:06:b3:19:bb:3d: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:05:B1:AD:EE:68:6A:0F:9C:C4:E0:53:EC:DD:A2:E7:28:3F:89:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1724b5be-729d-3151-82e3-eb3235fd57c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:30:54:1f:db:21:8f:0e:a3:69:52:cb:bf:ab:a7:e7:d3:39: 8f:51:6a:52:e5:f4:b9:94:cd:a8:6d:e9:a9:3e:0c:c8:a8:72: 9d:c5:56:8b:8c:8f:ea:e4:62:d5:17:03:64:55:24:67:2f:1a: d5:a1:54:06:64:da:c7:37:03:79:9c:7d:a2:5b:0d:24:c3:13: 16:13:6a:49:82:bd:85:6a:c9:26:07:06:d0:cd:10:d4:a4:b7: 42:38:a1:2f:c8:7e:56:32:e9:6a:3a:43:af:cb:f0:bb:83:3d: 2b:0f:69:25:20:db:a3:1c:ae:14:b2:4d:d3:71:2f:5b:1c:17: 63:6c:bf:19:ae:1d:de:1e:03:7d:04:5c:87:4d:1b:75:df:95: fb:42:bc:66:06:9c:70:a4:c8:cc:b5:76:ce:c2:7e:4e:e6:f0: 4d:4d:e7:f6:5a:d7:40:ab:3f:01:2b:52:76:61:86:37:ee:f9: fd:81:8e:34:0e:1f:9f:d2:0f:a0:89:c8:8d:13:95:2f:54:32: 5d:64:a9:1c:1d:47:a9:f4:29:39:75:d6:66:14:a2:ae:f4:b3: ba:84:a3:57:d8:34:b8:b7:62:55:db:32:8f:66:c5:81:e0:57: bf:e2:b9:67:66:c4:73:e4:6b:e9:c1:0b:01:93:36:21:25:34: 11:9f:2f:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjWQQZsn3pzcFeYB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxMDE0MDA1MloXDTI1MDUxMTEzMDA1MlowLzEtMCsGA1UEAxMk NDM0MWI5YjgtYzBkOS00NzMyLWExODMtOTkzN2FmM2E5YjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlocKob+FpfPZmLfJPAQXeOgeCIa93aTfWn/r FK45eIanbrV2NI4KrAVpjk1wBOpwUNMvQsg+EpzNXIf6DHwWlR6Yuu9chGgqszD3 mWeQbdt4l8Bgfu2i2y7s7b5JRZcufveTmbOHhVXp0yn6XM6nA7BTkQMA88EHhsYF w9V+NU6sFMWV01FARx6S3kL3odLoWJuzXZ3AmBDdDvDwH3drH/J+fRYBjrx7zE1C UeWKmPY/VE5CslnhMp6rzhv9d3gTPmmftujGsJdgBnM3q8THZYF2nB94IobqQ3Sj uWBkXYxhMVYcTt6NnRlFgNtPu7NeRwsI+0EhJnRSBrMZuz0ckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMFsa3uaGoPnMTgU+zdoucoP4nkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTcyNGI1YmUtNzI5ZC0z MTUxLTgyZTMtZWIzMjM1ZmQ1N2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQwVB/bIY8Oo2lSy7+rp+fTOY9RalLl9LmUzaht6ak+DMiocp3FVouM j+rkYtUXA2RVJGcvGtWhVAZk2sc3A3mcfaJbDSTDExYTakmCvYVqySYHBtDNENSk t0I4oS/IflYy6Wo6Q6/L8LuDPSsPaSUg26McrhSyTdNxL1scF2NsvxmuHd4eA30E XIdNG3XflftCvGYGnHCkyMy1ds7Cfk7m8E1N5/Za10CrPwErUnZhhjfu+f2BjjQO H5/SD6CJyI0TlS9UMl1kqRwdR6n0KTl11mYUoq70s7qEo1fYNLi3YlXbMo9mxYHg V7/iuWdmxHPka+nBCwGTNiElNBGfLyY= -----END CERTIFICATE-----Generated at Sat Apr 5 12:26:33 2025 by rpki-client