$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f6c045c-94dd-3340-bf2b-4a3618a9dc71.roa File: 1f6c045c-94dd-3340-bf2b-4a3618a9dc71.roa (raw, json) Hash identifier: qeNxpHBLt3hIEDYLNLF6mloy6FUtV+Q4EA3qsGWszDk= Subject key identifier: 42:6B:5D:67:7D:F9:76:D7:85:9A:0A:03:7C:7B:D9:38:34:7F:83:13 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B4ACC1124BBE12D4CE80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f6c045c-94dd-3340-bf2b-4a3618a9dc71.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b4:ac:c1:12:4b:be:12:d4:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=6d5bc41b-a38c-4dd0-bbf2-75851900adba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:27:d2:95:0c:ab:b7:55:f1:85:f0:76:37:52: f8:8c:c5:56:20:76:37:78:05:43:22:85:7f:f2:29: 53:ac:5f:96:63:12:c8:9f:38:0b:07:a9:c6:5e:1e: 26:f8:87:61:33:b1:7c:ef:80:92:4d:dd:9b:a4:0e: fa:26:e9:60:a8:b2:da:51:25:14:61:65:48:fd:43: 21:9f:82:fe:cd:11:17:b8:0b:d9:61:74:8b:8c:68: 77:35:61:26:f8:88:39:28:4b:2a:79:6f:31:4b:4d: d5:e1:ff:41:69:a6:c1:d3:f6:8b:ce:c1:62:58:38: 6c:0c:50:12:e4:ab:95:33:37:44:bd:31:2c:26:77: f2:0c:aa:53:e9:b7:7c:5b:b5:49:b1:79:02:e0:c7: 3c:fe:ee:14:55:f3:17:fa:1e:eb:bd:5c:47:0b:b9: 30:08:8d:5f:c1:cc:f1:6b:7d:2a:9c:b4:e6:34:a7: b1:2b:18:1d:6f:fb:9d:ad:d7:7b:d0:f5:f1:f1:64: 03:7e:47:69:bf:82:f1:40:6a:cf:24:68:0f:f6:c5: 6c:c1:4d:11:ce:39:8e:f5:ce:3d:2f:2f:77:a4:2f: 02:4f:ff:07:07:b6:dd:bb:13:cc:24:42:d6:02:9b: 0c:a1:47:bb:cf:a5:6e:e7:f2:82:14:82:85:4d:dc: 2e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6B:5D:67:7D:F9:76:D7:85:9A:0A:03:7C:7B:D9:38:34:7F:83:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1f6c045c-94dd-3340-bf2b-4a3618a9dc71.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:9a:e8:c2:70:9d:ba:d9:ee:5e:8a:2d:e9:60:f8:9e:f9:bf: 80:a8:ad:fa:b0:cb:0f:17:d3:3d:a0:7e:ee:96:36:36:b5:32: 09:22:b9:bd:83:5f:5d:8e:68:e8:08:4e:f0:b5:a6:e9:70:6a: 01:3c:17:d0:1b:56:7f:67:81:e8:56:6c:1e:c0:29:12:39:cb: af:24:aa:b1:d2:6e:c6:40:b8:33:62:b7:5a:a5:07:77:aa:41: 0e:94:f6:48:91:90:20:ea:88:13:11:4f:f6:7f:74:32:bc:51: d7:65:8e:ba:e3:a9:45:22:ba:57:fb:9b:38:c6:41:88:27:b1: 03:d1:96:65:0b:b8:5c:9e:c9:c4:28:f3:ab:04:45:ad:a6:2a: 42:ec:47:32:c4:f4:32:fe:85:a0:18:bf:73:3d:27:38:18:6f: f9:d7:89:7f:62:92:28:35:69:e9:a6:0c:4f:76:76:9c:27:a3: 30:1f:74:fd:4e:04:3f:61:4b:29:b5:8c:ae:5b:e2:14:5a:66: 1b:42:d0:69:f5:95:2f:84:3e:2b:47:42:16:f9:5c:3e:15:8f: cd:d9:c8:1e:af:5b:e2:92:06:00:cb:95:c8:83:1b:bf:e0:e5: c6:25:15:34:f0:ae:63:33:59:71:cf:db:32:62:5b:9b:9e:6d: c4:61:e2:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprSswRJLvhLUzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NmQ1YmM0MWItYTM4Yy00ZGQwLWJiZjItNzU4NTE5MDBhZGJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSfSlQyrt1XxhfB2N1L4jMVWIHY3eAVDIoV/ 8ilTrF+WYxLInzgLB6nGXh4m+IdhM7F874CSTd2bpA76JulgqLLaUSUUYWVI/UMh n4L+zREXuAvZYXSLjGh3NWEm+Ig5KEsqeW8xS03V4f9BaabB0/aLzsFiWDhsDFAS 5KuVMzdEvTEsJnfyDKpT6bd8W7VJsXkC4Mc8/u4UVfMX+h7rvVxHC7kwCI1fwczx a30qnLTmNKexKxgdb/udrdd70PXx8WQDfkdpv4LxQGrPJGgP9sVswU0RzjmO9c49 Ly93pC8CT/8HB7bduxPMJELWApsMoUe7z6Vu5/KCFIKFTdwugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJrXWd9+XbXhZoKA3x72Tg0f4MTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWY2YzA0NWMtOTRkZC0z MzQwLWJmMmItNGEzNjE4YTlkYzcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2a6MJwnbrZ7l6KLelg+J75v4Corfqwyw8X0z2gfu6WNja1Mgkiub2D X12OaOgITvC1pulwagE8F9AbVn9ngehWbB7AKRI5y68kqrHSbsZAuDNit1qlB3eq QQ6U9kiRkCDqiBMRT/Z/dDK8UddljrrjqUUiulf7mzjGQYgnsQPRlmULuFyeycQo 86sERa2mKkLsRzLE9DL+haAYv3M9JzgYb/nXiX9ikig1aemmDE92dpwnozAfdP1O BD9hSym1jK5b4hRaZhtC0Gn1lS+EPitHQhb5XD4Vj83ZyB6vW+KSBgDLlciDG7/g 5cYlFTTwrmMzWXHP2zJiW5uebcRh4u4= -----END CERTIFICATE-----Generated at Fri Mar 14 13:40:58 2025 by rpki-client