$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa File: 237ed539-e7c4-3afc-8222-c0b4292ef524.roa (raw, json) Hash identifier: heh7kQdWlo9XkHdeU+g4PSiqj/iDTwcOKOtet6jpp9k= Subject key identifier: 06:34:61:98:1F:E5:49:8C:3E:90:EF:36:F9:AA:33:5D:D1:F8:42:2C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC26A428334128D821F080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:26:a4:28:33:41:28:d8:21:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=17b073d8-547c-4f93-9d4c-079e19d0987f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:c1:35:a6:68:f0:9b:2a:57:fd:76:ec:4d:38: 55:b2:1d:9c:55:7d:06:aa:a5:bd:a7:7e:5c:48:73: d1:76:ce:d2:07:2b:2a:41:4d:e2:ef:67:02:73:40: 2c:93:c0:96:11:f9:ce:c2:ce:2e:be:29:de:9b:62: ab:96:4e:17:21:0d:dc:78:64:c4:77:bb:b8:2e:4e: 53:94:5d:85:09:72:b9:52:26:10:64:37:61:7b:06: 64:97:1a:b9:a0:50:6d:f0:80:2e:b4:2a:05:31:2a: cc:9e:e4:00:c0:88:1e:77:6c:8c:9f:b4:3b:c4:d9: 51:bb:07:ee:49:f7:00:59:99:25:30:b0:51:72:b6: 43:0e:98:24:c5:ff:ed:68:0f:5e:c3:a3:9c:0b:73: d1:d3:06:bb:c2:de:d3:40:60:fe:cc:68:cb:7d:fe: 0c:dc:84:ac:22:a3:6c:a4:52:6d:6c:21:f7:59:0c: 34:3a:3d:af:53:2f:c6:9d:d3:56:5e:64:69:79:73: be:74:a1:90:bd:c7:59:c0:52:1f:8c:64:6b:4f:2e: ba:11:0e:09:cf:95:67:9b:e3:45:58:99:e0:24:f2: 51:9d:f4:71:92:f4:37:08:d4:5a:50:99:04:af:54: 43:45:e0:4e:3b:d7:e9:67:8e:73:a4:1e:f0:14:c4: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:34:61:98:1F:E5:49:8C:3E:90:EF:36:F9:AA:33:5D:D1:F8:42:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/237ed539-e7c4-3afc-8222-c0b4292ef524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:66:4f:c5:38:4c:58:80:4b:79:0b:3b:3f:d7:0d:11:21:38: 6c:d2:1d:bd:e3:f0:20:27:a8:4c:70:0d:89:81:b1:b5:e9:b4: bf:8f:01:bc:2a:87:b5:5d:e6:36:07:de:57:d0:da:1d:59:c7: e1:4a:a5:e1:33:de:63:73:07:e1:11:2a:77:6e:25:1c:8c:fc: fe:81:3c:d7:cf:42:af:27:ed:21:67:50:a2:70:9f:67:57:71: bc:cd:bf:bb:3f:87:51:78:0e:00:31:b0:fb:a2:1a:25:03:cc: 6e:cf:49:22:43:de:9d:a9:59:d2:6d:95:b5:29:9f:42:2c:33: f4:9d:54:62:d0:e1:27:3b:5a:e6:61:59:8b:18:53:7e:20:8f: d6:55:ce:8e:a7:d6:23:e6:fb:03:e7:ea:d8:5f:4a:79:7d:05: 6c:2d:b6:a9:b2:ff:4b:05:56:2b:09:23:81:f5:24:48:21:d4: 1b:93:c2:68:fd:ff:ab:01:4a:c6:a1:41:eb:4f:05:df:a1:21: b1:58:e9:81:88:67:a9:d6:a3:6a:03:f5:87:d9:c8:5a:f9:2a: e7:45:1d:b4:92:6c:8e:c5:33:a2:0a:9a:8b:fb:1b:9c:ef:6b: 3f:05:04:b8:92:a6:e3:18:2b:20:a1:76:82:aa:19:22:85:33: b0:2b:7e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CakKDNBKNgh8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MTdiMDczZDgtNTQ3Yy00ZjkzLTlkNGMtMDc5ZTE5ZDA5ODdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8E1pmjwmypX/XbsTThVsh2cVX0GqqW9p35c SHPRds7SBysqQU3i72cCc0Ask8CWEfnOws4uvinem2Krlk4XIQ3ceGTEd7u4Lk5T lF2FCXK5UiYQZDdhewZklxq5oFBt8IAutCoFMSrMnuQAwIged2yMn7Q7xNlRuwfu SfcAWZklMLBRcrZDDpgkxf/taA9ew6OcC3PR0wa7wt7TQGD+zGjLff4M3ISsIqNs pFJtbCH3WQw0Oj2vUy/GndNWXmRpeXO+dKGQvcdZwFIfjGRrTy66EQ4Jz5Vnm+NF WJngJPJRnfRxkvQ3CNRaUJkEr1RDReBOO9fpZ45zpB7wFMRHpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAY0YZgf5UmMPpDvNvmqM13R+EIsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjM3ZWQ1MzktZTdjNC0z YWZjLTgyMjItYzBiNDI5MmVmNTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJmT8U4TFiAS3kLOz/XDREhOGzSHb3j8CAnqExwDYmBsbXptL+PAbwq h7Vd5jYH3lfQ2h1Zx+FKpeEz3mNzB+ERKnduJRyM/P6BPNfPQq8n7SFnUKJwn2dX cbzNv7s/h1F4DgAxsPuiGiUDzG7PSSJD3p2pWdJtlbUpn0IsM/SdVGLQ4Sc7WuZh WYsYU34gj9ZVzo6n1iPm+wPn6thfSnl9BWwttqmy/0sFVisJI4H1JEgh1BuTwmj9 /6sBSsahQetPBd+hIbFY6YGIZ6nWo2oD9YfZyFr5KudFHbSSbI7FM6IKmov7G5zv az8FBLiSpuMYKyChdoKqGSKFM7ArfsE= -----END CERTIFICATE-----Generated at Fri Mar 14 13:15:21 2025 by rpki-client