$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5c04921d-9717-31f4-a404-40bab469d115.roa File: 5c04921d-9717-31f4-a404-40bab469d115.roa (raw, json) Hash identifier: RmhoM2LZEofrlAlZnilnd7H+OIlP2iCrzjShgraRrcM= Subject key identifier: 8E:AB:44:83:C7:7C:12:25:25:E5:A7:BF:9F:D2:9B:96:91:CB:87:24 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848E9CBF09F60A64F799A06F460 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5c04921d-9717-31f4-a404-40bab469d115.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 21664 IP address blocks: 130.137.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:f0:9f:60:a6:4f:79:9a:06:f4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=5860fc10-3675-4e99-a1b6-91db7ad919a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e8:45:cb:12:56:7a:f5:2a:5f:a6:22:31:74: 86:df:27:43:cf:6d:b5:b5:51:67:31:90:5c:c0:51: 57:1e:20:49:70:29:07:e5:d7:f7:61:a4:1a:c1:5b: 5e:bf:15:39:1d:a4:65:6c:56:47:49:be:0f:77:d2: bf:b2:f5:16:51:16:90:f7:4c:c3:6d:51:c4:8a:86: ee:3b:e3:2b:ab:b8:60:e4:ec:53:db:7a:a7:cf:bb: 19:cc:bb:f7:71:6e:56:9f:54:4b:9e:84:05:4f:73: dd:ed:5f:7b:e3:32:9d:71:d1:04:ac:4c:b2:ba:60: 88:04:5b:39:b7:ed:fe:d9:d2:5d:6a:1b:6a:64:66: 55:1d:03:b2:17:11:ff:90:f6:c6:05:c2:f0:1d:6a: 0d:02:4f:19:21:eb:b3:e8:6a:01:54:eb:e9:c1:47: 5b:78:9c:2b:53:11:ce:5c:a9:5f:ea:83:e0:1c:de: c0:bc:7b:d2:60:cf:e8:e7:1c:1b:87:0f:a3:da:1d: 50:ce:6f:fa:79:49:0e:de:55:95:21:b8:04:40:41: 20:53:bb:a9:a6:04:70:6c:0b:e5:95:07:1e:51:f0: 2d:47:bf:f9:58:be:26:5e:74:4f:5a:62:6f:50:7b: f2:43:5d:32:bc:5a:5d:d9:f4:8e:58:41:ba:a1:0a: c0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:AB:44:83:C7:7C:12:25:25:E5:A7:BF:9F:D2:9B:96:91:CB:87:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5c04921d-9717-31f4-a404-40bab469d115.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:78:28:c2:ac:f1:43:d8:55:29:52:98:46:23:13:46:fb:87: 7b:ab:21:00:33:98:c0:df:21:6b:f5:a1:1b:28:fd:d5:1e:1e: f5:39:3e:10:56:35:47:38:a8:6f:eb:78:02:a3:15:f9:01:0b: 30:bd:d2:22:f4:8c:75:ce:a1:7c:d8:11:e2:24:30:5b:0c:43: 32:01:3d:f4:ab:30:70:7e:9a:46:8c:05:5a:03:fb:8d:c6:53: 1c:f6:62:10:39:80:98:f0:c7:55:b7:99:c7:e1:d6:8e:e9:6b: a6:c8:0b:17:13:78:6b:e9:4a:00:1b:5e:86:18:82:7c:b1:d4: b6:90:3d:ba:0a:6a:ed:4d:52:d3:f8:2a:1c:42:a9:60:12:f3: f9:1c:42:5d:b3:78:1a:e0:23:0f:f8:b3:b2:42:24:e7:e7:07: af:87:cb:63:6f:59:b3:3b:57:c8:06:a0:34:ce:93:29:9e:30: 2f:96:cc:d1:08:e5:27:a0:b8:3b:3b:f7:09:9c:78:3b:55:f6: 19:40:4b:7c:ee:d5:ca:74:fd:c7:2f:94:21:e9:17:e1:07:fe: 00:77:79:0e:85:8e:14:3c:e5:92:6f:9a:5d:01:3e:99:5c:dd: a9:9f:3d:8c:05:ac:f7:64:b5:d0:e3:2a:31:02:35:30:a9:00: 3f:d8:7a:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy/CfYKZPeZoG9GAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NTg2MGZjMTAtMzY3NS00ZTk5LWExYjYtOTFkYjdhZDkxOWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOhFyxJWevUqX6YiMXSG3ydDz221tVFnMZBc wFFXHiBJcCkH5df3YaQawVtevxU5HaRlbFZHSb4Pd9K/svUWURaQ90zDbVHEiobu O+Mrq7hg5OxT23qnz7sZzLv3cW5Wn1RLnoQFT3Pd7V974zKdcdEErEyyumCIBFs5 t+3+2dJdahtqZGZVHQOyFxH/kPbGBcLwHWoNAk8ZIeuz6GoBVOvpwUdbeJwrUxHO XKlf6oPgHN7AvHvSYM/o5xwbhw+j2h1Qzm/6eUkO3lWVIbgEQEEgU7uppgRwbAvl lQceUfAtR7/5WL4mXnRPWmJvUHvyQ10yvFpd2fSOWEG6oQrAGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6rRIPHfBIlJeWnv5/Sm5aRy4ckMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWMwNDkyMWQtOTcxNy0z MWY0LWE0MDQtNDBiYWI0NjlkMTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ4KMKs8UPYVSlSmEYjE0b7h3urIQAzmMDfIWv1oRso/dUeHvU5PhBW NUc4qG/reAKjFfkBCzC90iL0jHXOoXzYEeIkMFsMQzIBPfSrMHB+mkaMBVoD+43G Uxz2YhA5gJjwx1W3mcfh1o7pa6bICxcTeGvpSgAbXoYYgnyx1LaQPboKau1NUtP4 KhxCqWAS8/kcQl2zeBrgIw/4s7JCJOfnB6+Hy2NvWbM7V8gGoDTOkymeMC+WzNEI 5SeguDs79wmceDtV9hlAS3zu1cp0/ccvlCHpF+EH/gB3eQ6FjhQ85ZJvml0BPplc 3amfPYwFrPdktdDjKjECNTCpAD/Yetc= -----END CERTIFICATE-----Generated at Fri Mar 14 13:52:45 2025 by rpki-client