$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa File: 40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa (raw, json) Hash identifier: tCEv99WiD0Mvp/DB/GMRlTdUbeLmPJy0IofGgnta67k= Subject key identifier: 60:52:C7:F3:97:E6:36:5A:76:AA:16:4E:CB:64:ED:04:FB:EE:17:94 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC2C5E81E2604CAA0C2B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2c:5e:81:e2:60:4c:aa:0c:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=73b8c9ab-26bf-4893-a2c6-abbe984f5d0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:04:e0:e0:71:06:bb:69:94:52:da:70:3d:d0: 91:16:63:d2:4b:7d:35:5f:4d:d1:ca:7e:7a:44:df: cb:24:5d:0f:f7:48:97:79:8a:56:86:f5:ec:13:ab: 76:bc:f9:e5:44:ee:5e:d2:86:77:4e:7b:d3:8a:9d: bf:1d:97:51:10:c7:44:f0:35:e7:10:29:ed:65:df: 58:85:f6:6c:5c:7d:8e:28:99:f8:fb:d0:bc:d1:99: bf:78:4f:b4:95:87:31:a7:76:f0:0b:73:c1:6f:20: 4c:3c:d2:4e:45:f1:20:e1:3e:36:6f:b4:78:08:0d: 4d:1c:7b:62:53:8e:73:0a:23:8d:a2:14:97:b0:46: c9:74:38:22:3e:2e:96:9a:3c:7f:29:46:6e:8f:c4: d6:47:eb:fd:b2:9a:af:93:52:a9:6e:aa:ad:f8:89: fa:72:57:bc:73:06:0b:6b:5d:da:b3:8b:bb:e1:dc: 7a:66:8c:39:94:b8:a5:ed:8a:75:53:80:1c:ef:a7: be:7e:1c:27:42:23:a1:77:e4:4a:07:93:7b:dc:1b: 6a:dd:9d:3e:9b:28:04:d0:33:52:36:b5:08:1a:22: dd:9c:43:70:5f:22:b0:0a:d4:68:6d:e0:c9:f5:3d: 40:da:68:b4:7a:e4:03:21:46:4a:cb:4d:8b:7b:b1: ec:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:52:C7:F3:97:E6:36:5A:76:AA:16:4E:CB:64:ED:04:FB:EE:17:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:43:5f:76:25:2e:c7:97:a1:33:69:ca:4b:ef:77:ef:a7:fd: 69:6b:b8:9b:d0:38:11:21:a8:0a:cf:27:93:5a:d3:b6:3f:1a: cb:99:0a:8d:c7:c1:cf:0f:21:92:53:e3:4d:d8:27:f3:60:06: 32:b3:d9:c6:4c:85:21:1c:93:38:b7:76:97:0a:9d:c1:5f:f3: 93:93:ca:d2:4e:12:91:12:cf:8f:fe:75:56:fb:74:d4:15:92: d2:6c:ba:fa:67:2b:4b:1e:6d:a3:e3:ba:5e:f2:39:7d:5c:a0: d7:f1:0a:e8:f2:4e:b2:a8:f8:d6:8f:87:0c:87:a4:fb:8b:00: b9:21:9e:cc:53:a2:17:ca:b9:87:5d:1f:d3:5e:06:b0:42:cd: f1:56:24:4d:fc:81:d7:12:af:d7:05:c7:69:8a:18:48:2e:80: 82:44:9f:d4:39:c1:9d:2b:db:84:16:eb:2e:2d:11:ae:2a:03: ed:64:cf:eb:65:0c:9a:70:44:36:ec:54:3e:8d:82:e8:a8:38: e4:1b:30:1f:61:f5:f1:f0:a6:06:e9:4d:04:72:b2:c3:25:4c: 71:d9:18:c8:3b:0e:b7:b1:48:a7:e5:1f:8a:c1:d3:46:f9:1f: 7c:a1:af:b0:28:d5:ed:c6:10:d8:1a:78:f2:76:bb:26:99:10: 2e:e2:e4:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CxegeJgTKoMKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NzNiOGM5YWItMjZiZi00ODkzLWEyYzYtYWJiZTk4NGY1ZDBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTg4HEGu2mUUtpwPdCRFmPSS301X03Ryn56 RN/LJF0P90iXeYpWhvXsE6t2vPnlRO5e0oZ3TnvTip2/HZdREMdE8DXnECntZd9Y hfZsXH2OKJn4+9C80Zm/eE+0lYcxp3bwC3PBbyBMPNJORfEg4T42b7R4CA1NHHti U45zCiONohSXsEbJdDgiPi6Wmjx/KUZuj8TWR+v9spqvk1Kpbqqt+In6cle8cwYL a13as4u74dx6Zow5lLil7Yp1U4Ac76e+fhwnQiOhd+RKB5N73Btq3Z0+mygE0DNS NrUIGiLdnENwXyKwCtRobeDJ9T1A2mi0euQDIUZKy02Le7HshwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGBSx/OX5jZadqoWTstk7QT77heUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDBjZTNhNWYtMjFjZi0z ZTM3LTllYTQtOWQ5YTg0ZmY5ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZDX3YlLseXoTNpykvvd++n/WlruJvQOBEhqArPJ5Na07Y/GsuZCo3H wc8PIZJT403YJ/NgBjKz2cZMhSEckzi3dpcKncFf85OTytJOEpESz4/+dVb7dNQV ktJsuvpnK0sebaPjul7yOX1coNfxCujyTrKo+NaPhwyHpPuLALkhnsxTohfKuYdd H9NeBrBCzfFWJE38gdcSr9cFx2mKGEgugIJEn9Q5wZ0r24QW6y4tEa4qA+1kz+tl DJpwRDbsVD6NguioOOQbMB9h9fHwpgbpTQRyssMlTHHZGMg7DrexSKflH4rB00b5 H3yhr7Ao1e3GENgaePJ2uyaZEC7i5PU= -----END CERTIFICATE-----Generated at Fri Apr 4 23:28:08 2025 by rpki-client