$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa File: 2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa (raw, json) Hash identifier: a/Ek6v72xwMWAv6PzxQOGCPJ8Kf0k7uX/syEkJT7cb4= Subject key identifier: F3:62:DD:2F:47:D1:71:82:B9:F1:2F:81:26:84:45:08:68:58:7B:DF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584964844B5B699C8E2B29838580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa Signing time: Wed 02 Apr 2025 13:01:01 +0000 ROA not before: Wed 02 Apr 2025 13:01:01 +0000 ROA not after: Tue 01 Jul 2025 13:01:01 +0000 asID: 14618 IP address blocks: 130.137.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:64:84:4b:5b:69:9c:8e:2b:29:83:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 2 13:01:01 2025 GMT Not After : Jul 1 13:01:01 2025 GMT Subject: CN=3837e416-0c23-45fe-9132-d83ad28e5a56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:66:c7:df:f4:c4:ca:4f:15:ba:6b:83:a1:02: 6d:8f:18:2d:7b:7c:8a:36:61:2d:13:66:52:7e:64: 9d:49:e8:17:84:d2:06:db:6e:e9:48:7c:2b:f0:5e: 33:d7:01:29:59:46:18:0b:81:40:55:7a:8a:c8:46: 2d:fa:7e:bf:aa:a3:bd:aa:f3:d3:55:ee:7a:20:15: e3:8c:b7:20:93:f4:af:c6:a1:4d:0e:d4:5a:66:a3: 21:18:40:99:8a:62:49:a9:c1:bc:5d:ac:ae:20:3e: 41:17:aa:0c:8a:7c:21:17:f3:f6:50:ce:5f:e3:13: 93:4b:9a:0d:71:2a:77:29:7c:0a:ec:1d:44:b4:c5: 8c:2b:a7:56:b2:e0:01:fa:57:6d:7c:55:23:b7:ab: 45:d6:1f:7e:a1:6b:0f:35:86:2d:de:f0:8b:34:75: 26:41:6f:94:bd:af:2e:a7:6e:ca:8d:a6:f7:69:e8: 32:9b:bf:96:27:a2:ee:b0:c5:1a:d5:bd:ed:81:84: 6a:b9:4c:21:33:e7:01:85:2d:05:6f:87:08:73:6d: 35:55:ce:3f:b5:f8:46:36:3f:9f:15:5c:39:09:e8: 69:a9:be:d8:c8:e6:8a:af:b1:a0:57:47:43:c4:ad: ff:8f:ef:0f:2a:25:e8:a8:b7:f2:f1:db:94:90:43: 2e:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:62:DD:2F:47:D1:71:82:B9:F1:2F:81:26:84:45:08:68:58:7B:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2aae4305-3c25-337b-a1c2-8edbdf6fc987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:15:e0:b4:c4:68:81:d5:b4:ce:76:42:23:c1:df:78:63:2e: 95:52:c4:db:2b:6d:c0:b0:ab:63:3b:79:55:bc:51:27:c8:23: 56:05:69:df:d0:db:08:66:3a:b0:89:59:0b:7a:3f:69:19:e2: 2f:56:18:88:b9:61:1d:a5:e0:7d:b1:9c:8b:be:5d:45:19:c1: 31:8f:4e:e9:65:8d:f4:40:f9:ed:7b:30:e3:d0:f6:da:a6:e6: 09:ee:2b:0c:54:df:99:92:2d:b8:03:2b:7d:38:63:7d:2e:7f: 57:b5:ad:cd:ee:bd:ac:37:46:f3:a7:73:d1:e0:e6:e1:ff:7c: d7:47:f6:f0:2a:d6:4c:8d:7e:9d:4c:77:9e:d6:ad:f8:02:04: cc:ca:67:5e:d9:65:eb:72:8d:5d:01:63:fb:40:4e:60:f9:bc: a9:83:00:16:9b:e8:39:1b:b1:4a:a6:90:36:32:f2:a7:f4:18: e5:1f:b6:06:fb:7a:4b:c3:de:a7:90:50:7f:60:ea:c0:a8:cd: 2f:6f:b0:7d:30:f7:65:9d:93:9e:9b:68:a1:07:0a:41:cc:69: 7f:e0:11:e2:59:2a:88:4f:97:20:b1:87:5d:60:6f:64:79:ad: 1c:b2:aa:3e:e6:88:ff:39:bf:77:00:74:66:3a:fb:90:fc:9a: 89:1d:55:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElkhEtbaZyOKymDhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk MzgzN2U0MTYtMGMyMy00NWZlLTkxMzItZDgzYWQyOGU1YTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GbH3/TEyk8VumuDoQJtjxgte3yKNmEtE2ZS fmSdSegXhNIG227pSHwr8F4z1wEpWUYYC4FAVXqKyEYt+n6/qqO9qvPTVe56IBXj jLcgk/SvxqFNDtRaZqMhGECZimJJqcG8XayuID5BF6oMinwhF/P2UM5f4xOTS5oN cSp3KXwK7B1EtMWMK6dWsuAB+ldtfFUjt6tF1h9+oWsPNYYt3vCLNHUmQW+Uva8u p27Kjab3aegym7+WJ6LusMUa1b3tgYRquUwhM+cBhS0Fb4cIc201Vc4/tfhGNj+f FVw5Cehpqb7YyOaKr7GgV0dDxK3/j+8PKiXoqLfy8duUkEMu7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNi3S9H0XGCufEvgSaERQhoWHvfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmFhZTQzMDUtM2MyNS0z MzdiLWExYzItOGVkYmRmNmZjOTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0V4LTEaIHVtM52QiPB33hjLpVSxNsrbcCwq2M7eVW8USfII1YFad/Q 2whmOrCJWQt6P2kZ4i9WGIi5YR2l4H2xnIu+XUUZwTGPTulljfRA+e17MOPQ9tqm 5gnuKwxU35mSLbgDK304Y30uf1e1rc3uvaw3RvOnc9Hg5uH/fNdH9vAq1kyNfp1M d57WrfgCBMzKZ17ZZetyjV0BY/tATmD5vKmDABab6DkbsUqmkDYy8qf0GOUftgb7 ekvD3qeQUH9g6sCozS9vsH0w92Wdk56baKEHCkHMaX/gEeJZKohPlyCxh11gb2R5 rRyyqj7miP85v3cAdGY6+5D8mokdVak= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:44 2025 by rpki-client