$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa File: 3094e6fa-20e4-3ece-ac65-374371d73b15.roa (raw, json) Hash identifier: Nklm7YTiMy+UxSWwFpqpM7OKfwSRXABMywnY9cyR+do= Subject key identifier: EC:43:53:40:74:FB:9B:D2:62:19:5C:37:6D:40:A9:19:B3:09:CE:14 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B77AFEC7EC49CC384D1C Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b7:7a:fe:c7:ec:49:cc:38:4d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=61ff11e5-9f08-4d79-9412-8cdd584df88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:5d:32:aa:00:d1:73:66:32:fa:f7:4e:ee:1c: 40:20:83:a9:d7:83:cd:59:52:34:ca:4e:06:ae:6a: 21:04:bb:65:99:22:e6:c0:0a:a8:d4:d8:a5:cf:ed: 71:b3:71:87:35:19:cc:1c:89:91:12:f8:8f:8a:ab: f6:18:59:79:9f:6e:b7:10:60:09:a9:2b:29:49:ca: 93:f3:c1:db:da:67:8d:33:d0:01:4e:c6:ab:89:01: fa:83:79:d2:ca:77:42:4d:6f:bf:d1:e8:26:73:8d: 72:a1:5b:e5:5f:44:5c:61:06:6b:9a:4f:bb:be:59: 00:b7:c2:89:ec:d1:43:ab:c1:ad:15:15:89:86:78: 36:cb:45:97:a2:9e:27:5b:77:c9:2d:6c:58:e9:9b: 60:d4:46:40:1a:3c:5c:8a:a9:b0:55:c2:35:aa:96: 18:41:a4:63:c8:da:9f:7d:43:df:40:b7:88:4a:5d: 61:23:f4:51:94:38:a4:ee:1f:c2:b1:33:59:f7:dd: 8c:20:53:cc:5d:a1:f5:e9:ff:8f:68:ca:78:3f:17: 95:02:66:e3:95:8e:c4:a2:6a:69:dd:7b:85:0c:0a: db:98:07:7f:90:dd:5a:04:39:c2:2c:65:ba:44:5b: 34:52:86:0f:f8:c0:82:7a:e2:20:03:c7:bf:d5:e9: 79:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:43:53:40:74:FB:9B:D2:62:19:5C:37:6D:40:A9:19:B3:09:CE:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3094e6fa-20e4-3ece-ac65-374371d73b15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:a0:a6:71:d2:ba:32:84:1e:a6:ea:8d:53:5a:d7:b2:1c:b3: 38:f7:8d:0f:c0:18:61:48:4a:ea:da:be:70:b0:b2:58:8b:f1: 24:9c:99:a7:1d:09:24:78:6a:4a:e1:df:78:f0:13:d1:cb:69: fa:8c:fe:b5:2d:dc:cb:f0:35:8f:31:fb:76:6e:8e:94:bb:18: 47:69:43:ce:0a:64:6d:48:a5:5b:67:7b:bb:65:fb:78:11:78: 40:31:14:0a:af:25:7b:57:57:ff:6c:15:f8:b0:31:fc:85:55: ac:89:cc:f3:f2:30:15:5e:b2:ea:c4:63:9d:53:7d:e3:45:16: f1:c3:fd:87:65:7a:6c:b5:04:65:a9:9a:fa:c1:69:65:09:92: 91:a6:90:c9:59:26:44:95:15:b3:6d:ff:73:32:78:0e:53:61: 22:fd:44:aa:a4:78:e7:09:a0:ca:e3:ee:83:9e:37:57:51:4b: 26:a6:b4:ce:c5:64:a6:76:43:15:0e:4f:19:07:e4:2c:47:c1: 0b:a8:92:b0:b8:84:38:19:94:ea:5a:6f:ef:d2:c4:94:84:61: c6:34:f2:77:6b:b8:00:25:e4:56:08:c5:93:d7:d2:5e:91:8f: c3:1e:af:1b:a9:6c:f4:f2:e5:37:8e:e6:ff:f0:f0:48:a1:9d: 7f:ff:50:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprd6/sfsScw4TRwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NjFmZjExZTUtOWYwOC00ZDc5LTk0MTItOGNkZDU4NGRmODhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8F0yqgDRc2Yy+vdO7hxAIIOp14PNWVI0yk4G rmohBLtlmSLmwAqo1Nilz+1xs3GHNRnMHImREviPiqv2GFl5n263EGAJqSspScqT 88Hb2meNM9ABTsariQH6g3nSyndCTW+/0egmc41yoVvlX0RcYQZrmk+7vlkAt8KJ 7NFDq8GtFRWJhng2y0WXop4nW3fJLWxY6Ztg1EZAGjxciqmwVcI1qpYYQaRjyNqf fUPfQLeISl1hI/RRlDik7h/CsTNZ992MIFPMXaH16f+PaMp4PxeVAmbjlY7Eompp 3XuFDArbmAd/kN1aBDnCLGW6RFs0UoYP+MCCeuIgA8e/1el51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxDU0B0+5vSYhlcN21AqRmzCc4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzA5NGU2ZmEtMjBlNC0z ZWNlLWFjNjUtMzc0MzcxZDczYjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACagpnHSujKEHqbqjVNa17Icszj3jQ/AGGFISuravnCwsliL8SScmacd CSR4akrh33jwE9HLafqM/rUt3MvwNY8x+3ZujpS7GEdpQ84KZG1IpVtne7tl+3gR eEAxFAqvJXtXV/9sFfiwMfyFVayJzPPyMBVesurEY51TfeNFFvHD/Ydlemy1BGWp mvrBaWUJkpGmkMlZJkSVFbNt/3MyeA5TYSL9RKqkeOcJoMrj7oOeN1dRSyamtM7F ZKZ2QxUOTxkH5CxHwQuokrC4hDgZlOpab+/SxJSEYcY08ndruAAl5FYIxZPX0l6R j8MerxupbPTy5TeO5v/w8EihnX//UKw= -----END CERTIFICATE-----Generated at Fri Mar 14 13:49:23 2025 by rpki-client