$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/32fd1baa-7aad-3e2d-af8f-b24203b6f3c3.roa File: 32fd1baa-7aad-3e2d-af8f-b24203b6f3c3.roa (raw, json) Hash identifier: yI59miwOPthd/aMbyvn2+H7t/5qUmxjzlKlBza5WIxQ= Subject key identifier: 3F:05:74:B2:22:84:68:56:1A:D7:69:6F:93:1A:F4:08:C5:81:7B:C3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D7176D0D911AD224EF9E900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/32fd1baa-7aad-3e2d-af8f-b24203b6f3c3.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:76:d0:d9:11:ad:22:4e:f9:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=dffcbca5-7bb3-4dc9-a8f7-21fb66252696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:e1:02:7f:6c:36:50:c7:1a:58:73:61:db:67: 1e:eb:a6:75:a8:88:7e:6a:16:bd:a6:76:34:47:00: 6b:3e:73:7a:81:fe:e0:2a:21:0e:f1:ec:bd:98:0c: 06:9e:80:59:92:c5:e1:20:27:f6:07:98:75:14:f9: 0b:a6:94:de:40:a1:28:16:59:62:a3:f2:5e:fe:04: 14:cf:6f:81:9c:3e:23:51:ca:eb:59:79:49:58:1b: c1:4b:86:0b:f4:bc:91:3d:f6:09:b4:0c:39:55:54: bf:e4:9c:79:32:17:87:e9:d8:0d:25:48:d7:71:35: 62:1c:ab:24:49:fd:b1:28:aa:eb:54:73:78:ea:95: 95:24:7e:85:2d:89:32:06:84:76:00:a8:87:1e:fa: 9a:25:e5:9d:25:da:ce:ac:a1:d3:b4:dc:e8:f6:b7: e8:97:0e:84:ba:2c:2c:a2:ad:bd:d9:d0:08:08:d4: 35:e5:1c:e4:c3:b0:48:34:a0:f3:bc:b9:7e:fa:3a: 78:03:08:17:29:ee:0d:c6:4d:c7:60:71:dc:03:15: 94:ba:45:43:fa:05:9a:93:db:f2:48:cb:38:f2:38: 63:1d:d6:23:74:22:e0:cf:72:85:e4:67:39:c1:62: 8f:e8:5e:56:11:8b:f2:66:66:3b:06:a4:ea:b5:8d: e5:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:05:74:B2:22:84:68:56:1A:D7:69:6F:93:1A:F4:08:C5:81:7B:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/32fd1baa-7aad-3e2d-af8f-b24203b6f3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:44:5e:6a:c9:45:e2:82:71:b3:45:30:44:5d:1d:84:b7:d3: 1c:72:70:dd:98:0a:1b:18:e7:e9:3c:70:58:f0:4c:5f:5a:a5: b8:d2:99:69:03:25:49:9c:86:90:3f:ea:39:03:35:85:a2:33: da:ee:e1:8b:ac:f3:fb:e4:36:b5:95:54:22:1f:ff:0c:a5:ed: 8f:a7:76:3f:79:ae:93:f2:11:c4:12:7e:94:11:ad:e0:e8:e5: 94:b0:76:53:6f:a6:07:ab:21:5e:05:63:52:ec:37:0b:61:fd: 8f:56:18:87:2a:4a:11:07:07:13:6c:7f:96:5d:98:02:53:cf: aa:4d:4f:d6:82:38:43:62:8f:ef:22:d8:fd:c4:90:2c:75:43: ec:8d:db:30:c6:78:f1:bc:4d:a5:54:36:92:01:ee:94:aa:53: 66:a8:bc:03:d6:88:e3:c5:10:ab:cd:b4:74:ed:f2:37:0d:3b: f5:81:02:54:9e:35:e1:21:d9:a1:94:86:6e:aa:93:0a:dd:a2: 07:69:b6:96:13:a6:c8:48:2d:ba:93:81:3c:c4:18:35:cc:88: 6c:5a:e9:99:13:d1:f9:25:ca:21:95:ef:5c:9f:60:21:83:a1: 6f:6e:df:9f:02:7d:4c:95:40:6f:e3:b1:4f:46:f9:26:ee:52: 97:89:b3:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXbQ2RGtIk756QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZGZmY2JjYTUtN2JiMy00ZGM5LWE4ZjctMjFmYjY2MjUyNjk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOECf2w2UMcaWHNh22ce66Z1qIh+aha9pnY0 RwBrPnN6gf7gKiEO8ey9mAwGnoBZksXhICf2B5h1FPkLppTeQKEoFllio/Je/gQU z2+BnD4jUcrrWXlJWBvBS4YL9LyRPfYJtAw5VVS/5Jx5MheH6dgNJUjXcTViHKsk Sf2xKKrrVHN46pWVJH6FLYkyBoR2AKiHHvqaJeWdJdrOrKHTtNzo9rfolw6Euiws oq292dAICNQ15Rzkw7BINKDzvLl++jp4AwgXKe4Nxk3HYHHcAxWUukVD+gWak9vy SMs48jhjHdYjdCLgz3KF5Gc5wWKP6F5WEYvyZmY7BqTqtY3lRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8FdLIihGhWGtdpb5Ma9AjFgXvDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMzJmZDFiYWEtN2FhZC0z ZTJkLWFmOGYtYjI0MjAzYjZmM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpEXmrJReKCcbNFMERdHYS30xxycN2YChsY5+k8cFjwTF9apbjSmWkD JUmchpA/6jkDNYWiM9ru4Yus8/vkNrWVVCIf/wyl7Y+ndj95rpPyEcQSfpQRreDo 5ZSwdlNvpgerIV4FY1LsNwth/Y9WGIcqShEHBxNsf5ZdmAJTz6pNT9aCOENij+8i 2P3EkCx1Q+yN2zDGePG8TaVUNpIB7pSqU2aovAPWiOPFEKvNtHTt8jcNO/WBAlSe NeEh2aGUhm6qkwrdogdptpYTpshILbqTgTzEGDXMiGxa6ZkT0fklyiGV71yfYCGD oW9u358CfUyVQG/jsU9G+SbuUpeJsyU= -----END CERTIFICATE-----Generated at Fri Mar 14 09:57:53 2025 by rpki-client