$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa File: 48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa (raw, json) Hash identifier: X8JZsXYSHU8XN9h7m2IYzcn08K627oY51d9rUtdbeG0= Subject key identifier: 78:40:C8:DE:66:4F:42:C5:98:1D:5E:A0:19:97:57:2D:4B:E8:94:EE Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC2BC48B7E7AC276357620 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2b:c4:8b:7e:7a:c2:76:35:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=c7865c28-ce7c-4ff8-9e08-4d654a2c4abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:82:f8:ea:64:47:fa:21:da:f5:62:86:59:79: 4f:80:0c:49:bd:f4:ef:87:7b:6a:90:3e:2d:e5:b7: 51:d1:dd:28:cc:76:51:d0:bc:aa:80:85:73:8a:be: 7a:58:4a:95:9c:5f:3c:1f:5b:6f:95:3a:e8:ea:0f: 04:77:f5:d1:f3:80:b1:ed:b8:05:a2:1f:f3:7b:97: c1:34:69:ca:0e:b4:e2:b0:1f:9c:f8:28:17:75:bd: 2b:b5:5d:e5:6c:97:c0:85:e5:e6:7e:7a:57:17:6e: 54:97:2b:ec:8b:d7:bf:48:4a:d7:6e:19:6c:2e:7f: 6a:0d:a9:91:15:11:2e:8b:bf:c8:ad:7b:0f:1f:61: 97:00:44:98:5e:55:e4:e9:c7:7b:b2:68:78:ab:4f: 0f:20:aa:d9:41:49:95:fa:63:d7:a7:bc:14:ad:5c: 9e:a3:6a:a5:25:d4:19:7f:11:09:19:5e:b0:65:89: 35:af:d6:86:37:68:63:7d:6c:b3:d3:7a:58:4c:e7: e1:a4:d5:48:d5:d9:48:68:0b:17:4d:9c:38:d9:55: 1b:80:0a:d2:ca:1c:4b:cc:5c:85:dd:5b:cf:49:cc: 0a:23:14:73:99:28:70:02:e8:36:e7:62:90:0c:f2: c9:b8:3d:19:e3:22:b1:15:2c:fd:cc:6f:de:1a:79: 5e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:40:C8:DE:66:4F:42:C5:98:1D:5E:A0:19:97:57:2D:4B:E8:94:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/48ebc16d-41f4-3ab9-a2c7-5e1cb78ddbc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:b7:b1:f2:6e:8f:5d:ae:b6:1e:78:c4:b3:07:38:3c:0d:15: b4:9a:9d:1b:44:e6:8d:35:33:3c:df:e3:06:05:8f:00:48:70: 86:0a:e3:4a:11:23:87:3f:ed:d1:ce:4c:b9:a0:e1:2a:b3:42: 7f:58:7e:4d:a5:46:38:57:b9:b8:21:2e:cf:c7:5b:2d:35:6a: ef:23:53:6d:1f:76:7d:d8:ed:33:08:7b:d5:39:ae:12:b6:c2: 10:19:bd:f9:58:9d:3e:ca:d8:a5:9d:cd:c4:0c:4f:ff:46:33: 97:80:d9:ec:1b:4f:ac:ff:0d:ea:5f:82:a4:8a:75:9a:3e:ef: 78:27:c5:c2:ce:d7:4c:f1:52:63:15:a2:ce:fb:0f:0c:60:2d: 5d:fb:5d:bd:e7:67:18:31:43:d6:54:ac:39:76:5f:bc:50:a8: 24:30:4d:f7:6b:3b:36:14:08:9f:fc:15:fa:c7:5d:0e:65:ee: 40:2a:24:71:bb:7a:2e:04:2a:23:2a:81:6b:4d:79:b7:7d:7e: 62:bf:69:2a:86:0e:ed:29:dd:5b:b0:ef:8f:8f:ac:28:5d:55: 85:9c:9e:c6:ab:92:7b:61:00:47:74:1a:f3:b4:09:6e:12:8a: 43:c6:39:53:9d:34:21:44:44:f2:63:76:29:27:80:46:3b:d1: 36:0e:31:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CvEi356wnY1diAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk Yzc4NjVjMjgtY2U3Yy00ZmY4LTllMDgtNGQ2NTRhMmM0YWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIL46mRH+iHa9WKGWXlPgAxJvfTvh3tqkD4t 5bdR0d0ozHZR0LyqgIVzir56WEqVnF88H1tvlTro6g8Ed/XR84Cx7bgFoh/ze5fB NGnKDrTisB+c+CgXdb0rtV3lbJfAheXmfnpXF25Ulyvsi9e/SErXbhlsLn9qDamR FREui7/IrXsPH2GXAESYXlXk6cd7smh4q08PIKrZQUmV+mPXp7wUrVyeo2qlJdQZ fxEJGV6wZYk1r9aGN2hjfWyz03pYTOfhpNVI1dlIaAsXTZw42VUbgArSyhxLzFyF 3VvPScwKIxRzmShwAug252KQDPLJuD0Z4yKxFSz9zG/eGnle3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHhAyN5mT0LFmB1eoBmXVy1L6JTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDhlYmMxNmQtNDFmNC0z YWI5LWEyYzctNWUxY2I3OGRkYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJe3sfJuj12uth54xLMHODwNFbSanRtE5o01Mzzf4wYFjwBIcIYK40oR I4c/7dHOTLmg4SqzQn9Yfk2lRjhXubghLs/HWy01au8jU20fdn3Y7TMIe9U5rhK2 whAZvflYnT7K2KWdzcQMT/9GM5eA2ewbT6z/DepfgqSKdZo+73gnxcLO10zxUmMV os77DwxgLV37Xb3nZxgxQ9ZUrDl2X7xQqCQwTfdrOzYUCJ/8FfrHXQ5l7kAqJHG7 ei4EKiMqgWtNebd9fmK/aSqGDu0p3Vuw74+PrChdVYWcnsarknthAEd0GvO0CW4S ikPGOVOdNCFERPJjdikngEY70TYOMZ8= -----END CERTIFICATE-----Generated at Fri Mar 14 09:36:32 2025 by rpki-client