$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/280ec333-7994-3aa6-90df-9cb52ec6af9e.roa File: 280ec333-7994-3aa6-90df-9cb52ec6af9e.roa (raw, json) Hash identifier: j6Qf7iknujoysrkrutpH0LhDphwONk99ARJg6yyvCPM= Subject key identifier: 04:87:42:2C:D9:F9:FF:A5:65:78:F5:EA:DC:B3:51:03:61:95:FF:E7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858490881571CA93B114461046300 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/280ec333-7994-3aa6-90df-9cb52ec6af9e.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:57:1c:a9:3b:11:44:61:04:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=f4db8332-fa87-402c-b4bd-d76c1221e1a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fe:44:d4:a4:49:26:61:b7:fc:f0:49:44:59: 82:71:6a:23:89:15:0c:1b:70:ca:e8:96:9d:7f:5a: b1:ef:62:80:c8:1e:4e:62:97:df:8e:5d:f9:80:35: a4:08:5c:9e:c9:84:c8:2d:fe:49:8b:7b:a5:f2:53: e0:e3:d7:7b:89:ea:b1:49:b8:e0:86:19:22:00:0c: 4a:0e:6c:43:fd:dd:ed:bf:d8:7f:70:85:44:58:14: e3:4d:cc:f7:ac:fa:27:37:9a:49:7d:70:78:e9:43: 34:4f:cb:4e:aa:87:d7:6f:28:a5:08:40:30:c5:97: 1f:5b:f2:f4:a9:31:26:9d:bb:82:55:f3:2c:b1:58: a1:9a:45:ea:44:46:22:15:79:17:05:91:53:ad:c0: dd:da:02:e2:c6:5c:28:10:5a:46:4b:63:65:52:71: 2d:13:a6:c8:df:fd:42:6c:d3:6e:fe:a9:45:c6:4f: 0b:9b:d2:88:72:ef:50:db:6a:15:23:34:35:c0:8e: 0c:92:b4:14:0d:f1:b9:a3:0b:a5:11:c9:95:68:bf: 26:08:2b:4e:d6:3e:1a:20:95:62:12:ee:e6:9f:2e: 53:51:14:70:72:04:92:86:54:e4:c0:c8:d8:8b:41: b8:10:65:5b:d7:89:8e:e0:57:39:10:f4:5e:97:05: 62:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:87:42:2C:D9:F9:FF:A5:65:78:F5:EA:DC:B3:51:03:61:95:FF:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/280ec333-7994-3aa6-90df-9cb52ec6af9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:66:4f:4f:ca:a6:a0:44:de:7a:75:b6:98:dc:c8:d9:60:5d: 27:ab:44:74:bc:49:2b:b0:18:87:96:ca:e0:d3:68:7d:33:c2: 9f:1f:08:d1:8a:1c:c1:88:c1:48:b1:49:dd:68:6b:c5:a3:e5: 0b:d7:98:20:87:28:fc:5f:cc:c6:71:ba:eb:c7:11:75:72:4c: 0c:97:c8:43:a1:d7:ab:f5:a1:8b:ef:de:53:43:79:be:e6:50: 11:b3:88:bc:8d:32:4f:54:58:53:77:ae:b4:2b:47:a1:b5:1f: dc:7c:79:a2:37:a3:2f:35:73:e6:b5:bb:39:e0:c1:7a:e1:5e: 78:0b:12:e4:df:f5:74:f9:7f:9a:33:d1:c8:a5:fa:d4:19:03: ec:fb:99:8e:f2:e2:08:a8:9b:d8:c5:03:5e:c0:b9:17:df:da: f5:72:ad:9c:be:5f:1a:63:f3:d1:92:14:4c:ce:e2:c1:3e:a6: db:dd:71:3c:07:57:5c:51:86:31:7b:bd:b6:a6:3a:15:95:da: 44:ef:55:1f:e0:cb:f0:bb:7c:96:0b:97:1e:85:38:d5:08:2e: 4d:6f:4b:21:d9:2f:5b:15:d5:05:3b:9c:82:6f:90:86:b0:5f: 7e:38:f3:44:ea:36:00:b5:c3:ed:7c:d5:0e:f0:d7:a5:63:cd: df:6e:3a:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgVccqTsRRGEEYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk ZjRkYjgzMzItZmE4Ny00MDJjLWI0YmQtZDc2YzEyMjFlMWEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/5E1KRJJmG3/PBJRFmCcWojiRUMG3DK6Jad f1qx72KAyB5OYpffjl35gDWkCFyeyYTILf5Ji3ul8lPg49d7ieqxSbjghhkiAAxK DmxD/d3tv9h/cIVEWBTjTcz3rPonN5pJfXB46UM0T8tOqofXbyilCEAwxZcfW/L0 qTEmnbuCVfMssVihmkXqREYiFXkXBZFTrcDd2gLixlwoEFpGS2NlUnEtE6bI3/1C bNNu/qlFxk8Lm9KIcu9Q22oVIzQ1wI4MkrQUDfG5owulEcmVaL8mCCtO1j4aIJVi Eu7mny5TURRwcgSShlTkwMjYi0G4EGVb14mO4Fc5EPRelwVikwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFASHQizZ+f+lZXj16tyzUQNhlf/nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMjgwZWMzMzMtNzk5NC0z YWE2LTkwZGYtOWNiNTJlYzZhZjllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJmT0/KpqBE3np1tpjcyNlgXSerRHS8SSuwGIeWyuDTaH0zwp8fCNGK HMGIwUixSd1oa8Wj5QvXmCCHKPxfzMZxuuvHEXVyTAyXyEOh16v1oYvv3lNDeb7m UBGziLyNMk9UWFN3rrQrR6G1H9x8eaI3oy81c+a1uzngwXrhXngLEuTf9XT5f5oz 0cil+tQZA+z7mY7y4giom9jFA17AuRff2vVyrZy+Xxpj89GSFEzO4sE+ptvdcTwH V1xRhjF7vbamOhWV2kTvVR/gy/C7fJYLlx6FONUILk1vSyHZL1sV1QU7nIJvkIaw X34480TqNgC1w+181Q7w16Vjzd9uOko= -----END CERTIFICATE-----Generated at Fri Apr 4 23:34:01 2025 by rpki-client