$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa File: 524939f9-2055-3136-af33-79605998de56.roa (raw, json) Hash identifier: 85BkrLpcNTKr9Hf54P9uez15pIkpJBt7oEUQEX6dqHk= Subject key identifier: 53:8C:9A:8C:34:FD:D7:8C:BA:0E:DF:67:B5:83:58:A2:A9:84:53:18 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848E9CBDC8D635135F337AF0200 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:dc:8d:63:51:35:f3:37:af:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=552807e5-9017-4703-bdbd-6c8a2390b648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:69:03:49:ac:40:25:75:82:0d:6b:28:49:e9: dd:f1:31:e8:d1:95:4a:35:0c:30:d5:ac:d2:41:c8: 06:36:e8:09:fb:4c:83:08:54:fd:15:a6:ff:3c:f4: f8:77:4d:f3:89:73:da:f1:00:dc:e0:6e:a6:ce:ea: 0c:89:1b:dc:3a:2c:fb:19:77:ab:e0:59:b7:a0:bc: 4d:39:37:cb:0b:c5:47:9e:cf:8d:12:46:6d:db:15: 82:ec:dd:07:e0:ee:57:dc:f1:f8:f8:77:3b:bb:9d: f4:17:f8:e6:fa:52:cb:8a:c7:c4:07:7a:1c:be:5d: 0a:59:b6:71:88:f6:70:e9:22:cc:4b:9f:dd:ea:34: 74:70:a3:c9:c3:02:b5:41:2f:17:2b:96:dc:1c:59: c3:a6:29:8b:91:46:aa:ee:f1:25:57:12:62:ce:fa: ac:57:5c:22:70:cd:c1:f9:6d:7b:fc:11:3a:3c:07: cb:9c:01:20:cf:21:8f:2c:c8:f3:a5:96:c9:95:7c: e8:97:0f:e3:d2:d2:7a:43:33:09:94:d9:3b:f6:e6: 97:5f:09:32:e5:d3:6a:38:bb:75:bd:69:52:02:85: 96:6c:dd:76:b4:b3:64:67:4e:74:1b:09:2c:90:ae: ce:55:07:ac:fd:cc:ee:30:cd:2d:21:0a:ff:92:3d: 39:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:8C:9A:8C:34:FD:D7:8C:BA:0E:DF:67:B5:83:58:A2:A9:84:53:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/524939f9-2055-3136-af33-79605998de56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:77:8e:ed:51:54:5c:17:0f:52:9d:54:36:8f:09:6c:ca:a1: 16:85:ec:a5:93:06:40:ef:03:17:17:95:b1:8d:cf:15:97:b4: 6b:6b:3a:f2:9c:05:c1:68:5d:23:7b:1d:24:e7:70:8b:8d:36: 5e:4b:7f:48:42:e0:95:61:b0:06:3c:77:c7:9e:35:9a:0d:f2: 27:35:50:dd:c2:74:3f:5c:96:c0:e5:58:81:8f:0e:03:27:fb: c6:94:40:e3:6f:df:82:1b:58:92:18:c3:34:a6:16:10:5d:2d: 49:97:aa:60:c2:0d:67:d5:e1:60:3a:62:b9:4e:ab:7c:03:73: 80:93:8d:70:28:6c:e6:c1:1b:78:4c:1a:2e:2f:17:76:de:ac: 1a:1e:39:55:a7:96:33:09:70:45:10:71:33:87:c4:f0:68:27: 63:53:82:e9:b7:61:cd:2c:3c:48:55:82:47:11:e7:1e:96:88: 29:11:e4:3a:3e:68:7d:04:97:f6:0f:c8:a8:bd:a0:48:e8:b7: 76:f1:83:3b:26:72:58:0b:f5:c3:ae:53:62:a5:9a:1b:bd:0a: 6a:7e:b4:d5:39:07:60:ad:c5:19:39:41:8b:27:b2:7f:7d:07: 11:19:c5:fb:12:19:9a:db:f3:d7:18:e6:21:2b:55:d7:10:be: 87:00:c8:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9yNY1E18zevAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NTUyODA3ZTUtOTAxNy00NzAzLWJkYmQtNmM4YTIzOTBiNjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mkDSaxAJXWCDWsoSend8THo0ZVKNQww1azS QcgGNugJ+0yDCFT9Fab/PPT4d03ziXPa8QDc4G6mzuoMiRvcOiz7GXer4Fm3oLxN OTfLC8VHns+NEkZt2xWC7N0H4O5X3PH4+Hc7u530F/jm+lLLisfEB3ocvl0KWbZx iPZw6SLMS5/d6jR0cKPJwwK1QS8XK5bcHFnDpimLkUaq7vElVxJizvqsV1wicM3B +W17/BE6PAfLnAEgzyGPLMjzpZbJlXzolw/j0tJ6QzMJlNk79uaXXwky5dNqOLt1 vWlSAoWWbN12tLNkZ050GwkskK7OVQes/czuMM0tIQr/kj05iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOMmow0/deMug7fZ7WDWKKphFMYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTI0OTM5ZjktMjA1NS0z MTM2LWFmMzMtNzk2MDU5OThkZTU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgollMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN3ju1RVFwXD1KdVDaPCWzKoRaF7KWTBkDvAxcXlbGNzxWXtGtrOvKc BcFoXSN7HSTncIuNNl5Lf0hC4JVhsAY8d8eeNZoN8ic1UN3CdD9clsDlWIGPDgMn +8aUQONv34IbWJIYwzSmFhBdLUmXqmDCDWfV4WA6YrlOq3wDc4CTjXAobObBG3hM Gi4vF3berBoeOVWnljMJcEUQcTOHxPBoJ2NTgum3Yc0sPEhVgkcR5x6WiCkR5Do+ aH0El/YPyKi9oEjot3bxgzsmclgL9cOuU2Klmhu9Cmp+tNU5B2CtxRk5QYsnsn99 BxEZxfsSGZrb89cY5iErVdcQvocAyGE= -----END CERTIFICATE-----Generated at Fri Mar 14 10:11:01 2025 by rpki-client