$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa File: 6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa (raw, json) Hash identifier: qcusrQwyMinpGv1j5zDIck0Qyq5GzL+U6MatZriVs3w= Subject key identifier: 1D:DF:12:A2:7B:22:33:CB:97:2A:30:00:30:3C:4F:9A:4C:8C:44:AF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B8276CBA4B949440EC00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b8:27:6c:ba:4b:94:94:40:ec:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=422284af-c7e8-4e56-b9ea-d2bc53c407bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:5c:e8:32:05:77:aa:b6:d4:43:75:65:a0:8f: c9:21:92:a8:2f:58:ec:77:e2:18:80:21:22:83:55: d6:39:33:75:18:df:27:e5:4b:1e:a7:6a:6c:25:71: 21:2c:b1:82:72:a4:82:bf:b0:f6:a3:22:84:96:b5: ec:74:3f:53:7f:e8:01:be:48:94:e3:11:3a:0c:8f: b1:a5:da:7b:70:5b:93:f3:70:0b:1e:5a:f8:fb:9e: a0:9e:0a:0f:79:aa:bf:8a:75:4b:db:63:fb:11:31: 56:6f:50:5b:1e:04:30:9b:b3:01:6c:7c:d9:a9:02: b0:2e:af:9d:bd:54:25:ae:4a:28:fd:4a:14:1a:f2: 86:b2:8d:1a:3b:c9:2c:dd:8c:83:e9:e1:c2:cd:e9: 40:77:d1:5f:6f:41:7b:54:a9:43:23:19:2d:ef:34: 79:7a:e9:44:3a:dc:08:f2:a2:b8:c4:c5:01:37:77: dc:02:0b:c9:4c:9e:c3:23:ae:d7:a6:8d:b4:73:8a: ac:27:c0:5b:c5:46:50:58:a1:2e:92:d5:e0:0e:1e: 15:90:82:ed:d8:a2:b1:26:45:4c:0f:b2:50:5f:36: 8a:45:21:bd:ff:76:d1:95:56:66:e2:1c:fe:b4:a7: 59:b8:02:77:22:e9:fe:be:53:d6:4e:bf:20:54:b2: ca:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DF:12:A2:7B:22:33:CB:97:2A:30:00:30:3C:4F:9A:4C:8C:44:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a2aa082-0073-38e3-83d8-ef6b73c3e754.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:d1:fd:ac:db:62:67:64:d5:ae:1d:2e:6d:f3:06:ca:22:e3: df:7d:6f:89:e2:7c:7e:db:5c:66:d8:35:0d:03:87:5b:e5:4c: d7:a6:0f:bc:f4:ec:7a:26:b4:bb:60:a3:95:e9:93:ab:e8:43: 53:28:29:77:eb:98:55:81:51:04:74:5d:cb:cb:10:9b:0d:c8: 74:50:80:76:89:1d:a1:b4:f0:f5:2b:93:4c:10:98:9a:43:ed: 24:97:1e:70:ba:e7:96:96:66:30:b0:0f:50:96:a1:e9:3a:23: 51:30:10:95:bd:bb:20:70:81:eb:7e:d0:6e:2a:8c:1e:d2:93: 13:7a:a9:61:ca:8c:14:8b:49:17:9a:fe:8d:9b:f8:7f:ea:c1: 19:94:af:82:b9:4e:96:41:2b:6e:c0:47:c4:43:94:c0:78:45: a1:0c:97:a9:44:b1:46:4c:5e:db:d0:c5:29:dc:9f:de:c3:17: d5:23:62:df:20:bd:cf:a9:c0:a9:11:da:ae:18:25:3d:77:5c: f5:9c:68:4f:a6:6b:c0:85:24:86:3e:95:f3:af:97:6e:49:eb: 59:ab:25:d4:d3:a4:dd:67:04:a4:61:68:3f:de:e2:1c:a9:75: e1:31:ea:a2:81:ae:b1:72:9e:58:a4:13:84:3f:0e:73:7d:f6: ec:61:cb:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprgnbLpLlJRA7AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NDIyMjg0YWYtYzdlOC00ZTU2LWI5ZWEtZDJiYzUzYzQwN2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlzoMgV3qrbUQ3VloI/JIZKoL1jsd+IYgCEi g1XWOTN1GN8n5Usep2psJXEhLLGCcqSCv7D2oyKElrXsdD9Tf+gBvkiU4xE6DI+x pdp7cFuT83ALHlr4+56gngoPeaq/inVL22P7ETFWb1BbHgQwm7MBbHzZqQKwLq+d vVQlrkoo/UoUGvKGso0aO8ks3YyD6eHCzelAd9Ffb0F7VKlDIxkt7zR5eulEOtwI 8qK4xMUBN3fcAgvJTJ7DI67Xpo20c4qsJ8BbxUZQWKEuktXgDh4VkILt2KKxJkVM D7JQXzaKRSG9/3bRlVZm4hz+tKdZuAJ3Iun+vlPWTr8gVLLKowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3fEqJ7IjPLlyowADA8T5pMjESvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNmEyYWEwODItMDA3My0z OGUzLTgzZDgtZWY2YjczYzNlNzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGjR/azbYmdk1a4dLm3zBsoi4999b4nifH7bXGbYNQ0Dh1vlTNemD7z0 7HomtLtgo5Xpk6voQ1MoKXfrmFWBUQR0XcvLEJsNyHRQgHaJHaG08PUrk0wQmJpD 7SSXHnC655aWZjCwD1CWoek6I1EwEJW9uyBwget+0G4qjB7SkxN6qWHKjBSLSRea /o2b+H/qwRmUr4K5TpZBK27AR8RDlMB4RaEMl6lEsUZMXtvQxSncn97DF9UjYt8g vc+pwKkR2q4YJT13XPWcaE+ma8CFJIY+lfOvl25J61mrJdTTpN1nBKRhaD/e4hyp deEx6qKBrrFynlikE4Q/DnN99uxhy+c= -----END CERTIFICATE-----Generated at Wed Apr 9 17:12:24 2025 by rpki-client