$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8777ed5b-96b3-3a90-aa42-0db24ba46b16.roa File: 8777ed5b-96b3-3a90-aa42-0db24ba46b16.roa (raw, json) Hash identifier: prCk7b/jt6JFyu13cHfrkxtOhOkm1wrBLtqMOyWmLfQ= Subject key identifier: 0E:2F:2F:6F:B5:A8:DD:03:02:BB:BC:6B:04:06:B6:BF:C0:5B:8C:2F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D717AF988A9F22EED4A0900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8777ed5b-96b3-3a90-aa42-0db24ba46b16.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7a:f9:88:a9:f2:2e:ed:4a:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=2ceddfd3-d001-469f-a40d-33f008833b7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c7:d2:e2:22:d5:7b:36:98:c2:2b:52:0d:8e: 48:44:70:58:31:af:0a:57:9e:69:f1:b5:e9:41:d5: a8:00:b7:d5:f0:36:b6:c3:1e:69:b1:20:75:a8:a3: 70:1b:a9:38:9d:4e:e5:d5:d9:15:71:32:78:26:f8: 86:08:e0:01:6d:99:e8:a1:5c:cf:b0:75:eb:62:87: a3:92:fd:71:49:35:a1:ed:98:76:f7:8e:b4:5e:34: 38:d7:ce:af:09:e8:21:01:84:f5:40:13:0f:1d:9f: e0:5a:d4:90:0c:8a:9e:5e:e2:7b:a5:c3:81:df:a7: bf:db:c5:95:ab:c2:11:7d:11:9d:8f:a9:70:30:e2: 77:40:95:39:e9:6d:2b:24:85:1d:50:a0:59:0b:3c: 95:0e:5b:06:5b:aa:c3:dd:c0:82:0f:00:4c:99:59: fd:5e:3a:d7:5e:08:1a:f6:64:63:4a:d5:1e:c6:9e: 8c:27:e1:28:95:5f:4e:38:a7:5c:e9:d6:29:e1:0e: 3f:d2:58:88:96:1f:de:74:1d:17:96:bb:28:d5:ad: 02:50:7a:c3:6d:26:fe:99:f8:a8:a9:a4:6b:cc:b3: f2:7c:04:90:10:e2:32:31:cf:6b:b1:18:31:c3:c4: 6a:7f:97:3f:b4:3a:e8:2f:26:c4:b3:34:81:be:2c: 73:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2F:2F:6F:B5:A8:DD:03:02:BB:BC:6B:04:06:B6:BF:C0:5B:8C:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8777ed5b-96b3-3a90-aa42-0db24ba46b16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:67:37:dc:91:b3:d6:54:5c:8d:6a:29:c8:22:6f:54:8d:5f: a6:4d:08:10:9d:bf:3e:53:57:08:dd:9d:4c:88:e9:27:0a:a4: 28:5d:b7:d8:33:b1:35:b5:6a:1c:c3:35:bd:4f:aa:8e:2e:9d: d6:4b:a5:1b:ec:a4:1f:f8:a1:f2:97:5c:a6:f4:5a:12:75:88: a6:d0:e3:e2:37:bb:81:0b:77:01:4d:83:2d:26:93:05:32:d2: b0:d1:3b:93:02:62:1b:d2:70:76:1d:b2:f0:57:7e:40:7c:ca: dd:ff:6e:f7:70:1b:bf:f5:4f:9a:ab:6f:2d:e9:35:b9:24:73: 76:3e:01:50:f1:87:6c:30:47:8e:78:b3:78:07:b5:90:7c:cb: 79:51:29:6e:bf:81:45:36:a2:86:2e:1e:9c:bb:c4:22:cd:0c: 84:fb:d3:d2:61:90:22:dc:31:97:3e:b6:3d:77:c3:36:3e:62: 65:65:c1:5c:8b:9c:44:d9:06:48:cc:88:c8:a9:64:af:aa:09: cc:e9:b8:39:a9:8a:ce:77:05:74:b6:b6:18:bf:0b:7f:dc:8b: 1a:13:ae:b1:54:1e:11:d8:48:b5:b9:f5:1a:c8:c8:dd:98:9b: aa:87:79:42:c2:d4:ae:67:9e:bd:26:cb:2d:be:98:1b:44:08: b9:7d:70:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXr5iKnyLu1KCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk MmNlZGRmZDMtZDAwMS00NjlmLWE0MGQtMzNmMDA4ODMzYjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsfS4iLVezaYwitSDY5IRHBYMa8KV55p8bXp QdWoALfV8Da2wx5psSB1qKNwG6k4nU7l1dkVcTJ4JviGCOABbZnooVzPsHXrYoej kv1xSTWh7Zh29460XjQ4186vCeghAYT1QBMPHZ/gWtSQDIqeXuJ7pcOB36e/28WV q8IRfRGdj6lwMOJ3QJU56W0rJIUdUKBZCzyVDlsGW6rD3cCCDwBMmVn9XjrXXgga 9mRjStUexp6MJ+EolV9OOKdc6dYp4Q4/0liIlh/edB0Xlrso1a0CUHrDbSb+mfio qaRrzLPyfASQEOIyMc9rsRgxw8Rqf5c/tDroLybEszSBvixzpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4vL2+1qN0DAru8awQGtr/AW4wvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODc3N2VkNWItOTZiMy0z YTkwLWFhNDItMGRiMjRiYTQ2YjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdnN9yRs9ZUXI1qKcgib1SNX6ZNCBCdvz5TVwjdnUyI6ScKpChdt9gz sTW1ahzDNb1Pqo4undZLpRvspB/4ofKXXKb0WhJ1iKbQ4+I3u4ELdwFNgy0mkwUy 0rDRO5MCYhvScHYdsvBXfkB8yt3/bvdwG7/1T5qrby3pNbkkc3Y+AVDxh2wwR454 s3gHtZB8y3lRKW6/gUU2ooYuHpy7xCLNDIT709JhkCLcMZc+tj13wzY+YmVlwVyL nETZBkjMiMipZK+qCczpuDmpis53BXS2thi/C3/cixoTrrFUHhHYSLW59RrIyN2Y m6qHeULC1K5nnr0myy2+mBtECLl9cAg= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:49 2025 by rpki-client