$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa File: 7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa (raw, json) Hash identifier: q4ReMoVL06YQrq9pAK1Z6DLNaTXg6KHq9u9dYd3zgLk= Subject key identifier: 35:7A:4A:89:C6:A4:97:84:10:BF:6C:5B:F3:B5:52:25:2B:D7:A0:4C Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B76B495EB6B7BF648CC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b7:6b:49:5e:b6:b7:bf:64:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=8be962c2-d332-4712-84cb-a2c108b491d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:76:bc:5e:ee:73:f4:12:63:5f:66:e4:7d:02: 62:25:de:9b:e4:2d:50:cb:ce:c7:e8:45:95:90:08: 43:78:ae:f8:1b:c7:40:23:f8:18:a2:73:be:02:dc: c4:1c:1d:d0:8e:2c:be:1e:7b:7c:d8:59:22:6d:16: 07:89:1c:46:ab:b2:21:4d:1f:50:cc:2f:1d:64:38: b5:86:37:03:55:1c:85:d1:7c:2c:3e:38:5b:41:71: 75:38:de:15:5f:17:74:ed:ef:af:8f:e1:67:33:98: 9b:d5:7f:e6:71:28:93:6e:9a:06:4a:b9:0a:1f:1e: fa:d1:53:92:e0:e0:af:9c:1c:b2:01:bc:e8:ca:da: 60:87:48:b0:88:aa:3e:e0:8e:3b:74:ef:49:98:b2: 11:b4:ed:53:33:20:13:4d:cc:9c:71:c3:fb:29:d1: 8a:28:bb:c4:9b:15:1c:88:7a:57:32:d9:d0:45:d9: 5b:c1:02:3b:db:35:e4:07:d3:3a:19:7e:7e:8a:99: d7:f9:ed:47:07:2e:41:35:87:5c:fe:4a:e4:61:57: 12:13:3c:f7:7c:a6:87:57:85:b7:36:dd:f2:d7:fc: f8:99:b8:56:e1:0d:df:50:ed:29:90:94:ef:76:4f: 42:11:80:3b:46:d7:8f:e3:1f:ca:e3:eb:28:5b:5c: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:7A:4A:89:C6:A4:97:84:10:BF:6C:5B:F3:B5:52:25:2B:D7:A0:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/7c020ec1-fe29-32f9-a504-7ce4c74b713a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:22:10:f9:bb:d9:cb:81:3f:9e:53:e2:95:7e:96:fe:c1:39: 36:58:3e:1d:8c:43:48:b2:c0:82:74:43:eb:88:ae:ec:67:9d: d4:1f:1a:70:64:33:62:0e:c0:71:e1:36:74:3a:6d:9d:d0:c8: b0:3c:7f:1c:94:38:71:44:aa:ff:df:33:ef:00:d9:27:45:a7: 8b:1b:7d:4c:9f:99:b0:0c:6c:ec:83:1f:1a:2c:cd:ff:34:f5: b1:59:d1:f7:37:c1:19:bd:e6:19:d5:2e:f8:94:cd:bc:1d:99: 07:73:d6:61:a6:97:f7:51:37:08:81:54:b5:00:65:43:9b:6b: 91:65:43:c9:07:b2:0b:fe:4b:95:41:5b:0b:b7:b7:ce:b7:bb: 17:4a:82:13:ce:95:8a:d3:49:1b:51:18:31:37:d5:a3:b3:39: ca:9e:07:0d:db:cf:d7:9b:29:0e:b0:a6:34:50:49:b8:76:e3: 11:44:fb:22:19:11:ad:f7:57:45:a7:ca:2e:5a:e8:58:48:1f: 36:96:5a:0b:27:b1:e3:b3:bf:13:77:0e:23:62:e9:d9:8f:ca: cc:c1:a5:44:18:b4:e3:1b:f5:e0:f3:b8:2b:a2:57:7c:bb:64: b0:f5:1d:9c:fa:7a:70:c8:cc:9c:63:9e:03:a1:98:35:d8:c2: d9:82:f0:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprdrSV62t79kjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk OGJlOTYyYzItZDMzMi00NzEyLTg0Y2ItYTJjMTA4YjQ5MWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA53a8Xu5z9BJjX2bkfQJiJd6b5C1Qy87H6EWV kAhDeK74G8dAI/gYonO+AtzEHB3Qjiy+Hnt82FkibRYHiRxGq7IhTR9QzC8dZDi1 hjcDVRyF0XwsPjhbQXF1ON4VXxd07e+vj+FnM5ib1X/mcSiTbpoGSrkKHx760VOS 4OCvnByyAbzoytpgh0iwiKo+4I47dO9JmLIRtO1TMyATTcycccP7KdGKKLvEmxUc iHpXMtnQRdlbwQI72zXkB9M6GX5+ipnX+e1HBy5BNYdc/krkYVcSEzz3fKaHV4W3 Nt3y1/z4mbhW4Q3fUO0pkJTvdk9CEYA7RteP4x/K4+soW1x7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDV6SonGpJeEEL9sW/O1UiUr16BMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvN2MwMjBlYzEtZmUyOS0z MmY5LWE1MDQtN2NlNGM3NGI3MTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgiEPm72cuBP55T4pV+lv7BOTZYPh2MQ0iywIJ0Q+uIruxnndQfGnBk M2IOwHHhNnQ6bZ3QyLA8fxyUOHFEqv/fM+8A2SdFp4sbfUyfmbAMbOyDHxoszf80 9bFZ0fc3wRm95hnVLviUzbwdmQdz1mGml/dRNwiBVLUAZUOba5FlQ8kHsgv+S5VB Wwu3t863uxdKghPOlYrTSRtRGDE31aOzOcqeBw3bz9ebKQ6wpjRQSbh24xFE+yIZ Ea33V0Wnyi5a6FhIHzaWWgsnseOzvxN3DiNi6dmPyszBpUQYtOMb9eDzuCuiV3y7 ZLD1HZz6enDIzJxjngOhmDXYwtmC8NQ= -----END CERTIFICATE-----Generated at Fri Apr 4 23:32:39 2025 by rpki-client