$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/43ea77a7-6f08-3adb-a385-f80b189b4be5.roa File: 43ea77a7-6f08-3adb-a385-f80b189b4be5.roa (raw, json) Hash identifier: L4IReCEObgGkP+2aBKV1Knd4rpikG2LD600meIf8TGU= Subject key identifier: D7:D3:72:DE:30:36:2B:C7:60:A2:D3:DC:17:26:56:0A:CF:7D:A8:A7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848E9CBDBDB097777003B4B9D00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/43ea77a7-6f08-3adb-a385-f80b189b4be5.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:db:db:09:77:77:00:3b:4b:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=0a0be4fc-4e51-4984-8a2a-020fda4bcf16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a3:83:d9:4f:22:09:fe:8d:28:54:d7:8f:cf: da:4d:fc:db:06:1e:30:bb:0e:31:87:5a:42:4f:35: 6a:a9:8e:19:29:34:5f:53:b9:46:ad:4b:6b:db:87: 00:66:10:45:f3:99:eb:ab:fc:9c:28:d5:9d:20:e1: 66:c6:2e:d7:8b:8a:8b:bb:3e:49:61:e1:d6:d4:fd: 2b:bd:72:9f:50:fd:8d:67:33:37:b3:c5:e3:93:f5: 26:ed:af:d1:57:80:9b:56:bf:a7:24:40:ed:99:b8: b5:71:d0:01:80:6f:bc:c2:50:50:aa:51:c3:fd:8e: 76:8c:8d:a5:db:1b:17:92:ca:83:18:22:9d:91:b1: 60:9f:cf:9a:5d:07:c0:f8:14:76:e0:19:1b:10:b8: a6:40:de:ad:4c:65:38:ce:5a:96:e2:a5:29:4b:6d: 32:5a:ba:22:66:02:d5:95:f5:1b:54:3e:a0:9e:17: c5:22:51:65:f2:89:d3:28:cd:6b:0b:e0:96:d2:32: ec:7f:cf:41:63:39:c8:23:3a:f2:df:18:9c:de:6b: 84:87:cc:b8:a0:ca:a5:ae:1b:fb:8e:f1:97:0a:ee: bd:c8:3f:6f:5f:aa:b2:1a:0e:48:be:6c:f4:ea:a8: 37:ab:f6:69:03:5d:ed:6b:7c:e8:73:df:6c:ea:cc: 87:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D3:72:DE:30:36:2B:C7:60:A2:D3:DC:17:26:56:0A:CF:7D:A8:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/43ea77a7-6f08-3adb-a385-f80b189b4be5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b4:82:03:23:b1:7e:cc:62:14:10:64:58:a8:c2:11:f2:19: f0:19:dd:07:79:4d:ff:ff:07:e4:cc:62:e9:ce:e1:4a:e9:78: 95:65:a0:e1:00:4a:8c:f4:f1:14:c9:6f:2a:3b:89:0d:70:82: 2f:a8:a0:d4:7e:ef:ec:32:8f:c3:68:4c:8a:7d:41:1d:39:06: 3c:e3:82:5d:a8:b1:f4:f2:c0:2f:06:d7:55:14:08:ed:e9:35: 25:98:7f:38:d9:39:a3:83:92:23:9e:55:11:0f:ef:98:09:2a: 84:1f:93:49:a7:df:42:6d:6d:69:86:7d:0c:fc:50:31:49:7d: 50:11:5c:01:72:28:e1:b8:cc:c5:c3:41:fb:8b:4f:8d:4a:4c: 01:21:68:ac:c6:c1:d5:0d:54:07:f1:48:eb:e6:42:a3:8d:58: 44:c2:c5:73:18:6d:97:7c:e3:8f:02:d9:3b:6d:82:09:82:59: f8:df:ee:1b:7c:ae:4d:5d:0a:2a:c5:4f:84:76:4c:c2:26:b5: 4d:e4:96:f9:0e:28:c2:53:da:ab:3c:4b:f3:10:55:40:cf:7f: 78:91:9f:0b:d1:d0:8f:93:5b:57:cd:dc:93:2d:12:8c:08:97: 3b:6b:b8:e6:3b:b6:99:02:a4:86:d7:f8:29:6c:45:e5:4d:ee: df:20:38:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9vbCXd3ADtLnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MGEwYmU0ZmMtNGU1MS00OTg0LThhMmEtMDIwZmRhNGJjZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9aOD2U8iCf6NKFTXj8/aTfzbBh4wuw4xh1pC TzVqqY4ZKTRfU7lGrUtr24cAZhBF85nrq/ycKNWdIOFmxi7Xi4qLuz5JYeHW1P0r vXKfUP2NZzM3s8Xjk/Um7a/RV4CbVr+nJEDtmbi1cdABgG+8wlBQqlHD/Y52jI2l 2xsXksqDGCKdkbFgn8+aXQfA+BR24BkbELimQN6tTGU4zlqW4qUpS20yWroiZgLV lfUbVD6gnhfFIlFl8onTKM1rC+CW0jLsf89BYznIIzry3xic3muEh8y4oMqlrhv7 jvGXCu69yD9vX6qyGg5Ivmz06qg3q/ZpA13ta3zoc99s6syHSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfTct4wNivHYKLT3BcmVgrPfainMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDNlYTc3YTctNmYwOC0z YWRiLWEzODUtZjgwYjE4OWI0YmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIu0ggMjsX7MYhQQZFiowhHyGfAZ3Qd5Tf//B+TMYunO4UrpeJVloOEA Soz08RTJbyo7iQ1wgi+ooNR+7+wyj8NoTIp9QR05Bjzjgl2osfTywC8G11UUCO3p NSWYfzjZOaODkiOeVREP75gJKoQfk0mn30JtbWmGfQz8UDFJfVARXAFyKOG4zMXD QfuLT41KTAEhaKzGwdUNVAfxSOvmQqONWETCxXMYbZd8448C2TttggmCWfjf7ht8 rk1dCirFT4R2TMImtU3klvkOKMJT2qs8S/MQVUDPf3iRnwvR0I+TW1fN3JMtEowI lztruOY7tpkCpIbX+ClsReVN7t8gOMc= -----END CERTIFICATE-----Generated at Fri Apr 4 23:25:44 2025 by rpki-client