$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa File: 5f0c1c12-64ae-39de-80a7-8a8c75568950.roa (raw, json) Hash identifier: eV56VxH3/MwE0HkfsxFcLfva5Dg1HZZNEhMU5m5XlA0= Subject key identifier: EB:02:55:45:C2:B0:58:92:6F:C2:84:4B:05:A8:11:61:72:4B:F0:6B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848C6E62BD767D5BCE7A0DF7780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa Signing time: Wed 05 Feb 2025 02:00:39 +0000 ROA not before: Wed 05 Feb 2025 02:00:39 +0000 ROA not after: Tue 06 May 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c6:e6:2b:d7:67:d5:bc:e7:a0:df:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 5 02:00:39 2025 GMT Not After : May 6 01:00:39 2025 GMT Subject: CN=eaed1b8f-edb3-491d-81ec-0b0ae28d53d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:29:a8:7c:a8:1c:ee:f1:f6:2e:53:20:9a:df: 60:4f:5b:14:d3:87:c8:2d:ad:8e:aa:be:c8:80:88: 00:d9:13:bb:56:0f:3d:ce:8d:e2:2b:57:6a:f0:16: fe:6c:60:c7:58:c0:7a:66:e2:2e:e1:d9:4a:c9:22: 46:3a:a4:9f:d5:a3:26:87:42:dd:ec:93:a9:38:d4: cd:0c:02:a4:7d:0a:fe:a1:7b:43:37:79:05:3e:63: 7c:c4:ac:d7:fc:01:23:b4:db:8c:43:25:ba:65:a4: f3:b7:27:77:a6:1c:dc:94:39:65:c9:77:6c:ba:e8: 37:71:ea:cc:45:f6:bd:fe:05:7a:0b:ca:54:eb:44: 3c:6a:12:a8:ad:1f:13:f4:47:2f:ed:40:18:05:e5: 94:3d:e7:b4:28:43:f8:5c:66:4e:04:ca:58:0f:04: 5c:c3:86:c6:b8:9f:22:2d:15:b5:a7:dd:fd:91:91: 8d:9e:a7:86:a5:04:ea:81:8a:73:2b:ae:b4:79:8d: 71:90:cd:e3:71:91:96:a8:64:2f:99:35:1b:29:44: c8:e1:36:5e:3b:9e:4d:a7:34:1d:e8:74:73:ce:c3: fe:f1:32:b3:77:1e:5a:64:f4:b7:77:b3:23:d8:98: de:7a:e0:a5:6a:6e:1c:ce:34:3e:5c:9d:90:ea:80: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:02:55:45:C2:B0:58:92:6F:C2:84:4B:05:A8:11:61:72:4B:F0:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/5f0c1c12-64ae-39de-80a7-8a8c75568950.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:f8:24:98:f4:98:3d:49:0d:93:68:66:9e:74:5c:78:dc:51: 15:ef:56:15:5b:e2:8e:c6:9e:39:df:b1:0a:17:0b:db:74:b7: 0e:1d:10:c8:5a:f7:e5:1b:74:60:b6:f1:dc:aa:2f:6e:5c:7b: 2c:d6:e0:ae:ca:60:85:7a:92:92:c7:ee:a2:50:8d:0c:03:f0: 83:20:05:c6:2f:eb:8c:7b:41:1a:38:10:98:7d:a4:4a:98:0b: ba:9d:05:80:9f:45:9b:f0:0f:5b:40:2d:e9:ff:35:5a:70:8f: 0c:cf:6f:be:d1:bd:7b:87:f2:34:22:6f:3f:ee:c0:ed:a9:37: f9:bf:66:b2:c0:00:5d:ab:88:a6:3f:28:2d:cc:d9:78:54:51: 2b:0b:2e:0f:07:33:68:70:0b:f8:27:0b:3d:ef:16:65:1d:7c: 06:4a:ed:07:59:84:c3:25:6c:33:8d:17:a7:97:8a:de:66:da: ea:8e:ce:7f:59:53:64:2a:60:cf:b5:81:6c:7d:0d:d2:2a:26: fc:b8:46:0e:0d:d1:8a:7a:0d:47:31:57:fd:4e:ef:9a:a5:92: 5d:b4:7f:99:b0:87:1e:0c:ca:e2:31:7a:ce:7a:ff:36:5b:86: 9f:7d:02:0f:7b:78:fd:09:8f:f0:85:77:26:2c:f8:86:07:42: e0:2a:4f:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5ivXZ9W856Dfd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk ZWFlZDFiOGYtZWRiMy00OTFkLTgxZWMtMGIwYWUyOGQ1M2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArymofKgc7vH2LlMgmt9gT1sU04fILa2Oqr7I gIgA2RO7Vg89zo3iK1dq8Bb+bGDHWMB6ZuIu4dlKySJGOqSf1aMmh0Ld7JOpONTN DAKkfQr+oXtDN3kFPmN8xKzX/AEjtNuMQyW6ZaTztyd3phzclDllyXdsuug3cerM Rfa9/gV6C8pU60Q8ahKorR8T9Ecv7UAYBeWUPee0KEP4XGZOBMpYDwRcw4bGuJ8i LRW1p939kZGNnqeGpQTqgYpzK660eY1xkM3jcZGWqGQvmTUbKUTI4TZeO55NpzQd 6HRzzsP+8TKzdx5aZPS3d7Mj2JjeeuClam4czjQ+XJ2Q6oC7AQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsCVUXCsFiSb8KESwWoEWFyS/BrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNWYwYzFjMTItNjRhZS0z OWRlLTgwYTctOGE4Yzc1NTY4OTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgommMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACD4JJj0mD1JDZNoZp50XHjcURXvVhVb4o7GnjnfsQoXC9t0tw4dEMha 9+UbdGC28dyqL25ceyzW4K7KYIV6kpLH7qJQjQwD8IMgBcYv64x7QRo4EJh9pEqY C7qdBYCfRZvwD1tALen/NVpwjwzPb77RvXuH8jQibz/uwO2pN/m/ZrLAAF2riKY/ KC3M2XhUUSsLLg8HM2hwC/gnCz3vFmUdfAZK7QdZhMMlbDONF6eXit5m2uqOzn9Z U2QqYM+1gWx9DdIqJvy4Rg4N0Yp6DUcxV/1O75qlkl20f5mwhx4MyuIxes56/zZb hp99Ag97eP0Jj/CFdyYs+IYHQuAqT7g= -----END CERTIFICATE-----Generated at Fri Apr 4 23:40:01 2025 by rpki-client