$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa File: 8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa (raw, json) Hash identifier: oD7QrARx0tIDY1WL49QMjOA7E4KsWB/3lurtMEpGB9M= Subject key identifier: 38:6E:0C:11:C4:99:62:7F:74:0F:CA:FC:9B:96:CF:37:01:91:B2:62 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B7C88F0733971C24E880 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b7:c8:8f:07:33:97:1c:24:e8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=7251f4fa-abca-4042-b28c-fc04e79bea73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:ec:46:65:b1:35:08:9f:f3:2d:65:11:ac: a8:d2:1d:c2:a2:34:65:6e:2d:23:89:9a:fe:38:ab: 06:99:ca:84:b9:45:87:fb:a3:5d:fb:77:91:51:d5: 9f:7f:36:e4:4a:ca:f7:3e:d8:dc:6e:4c:b2:12:3f: 4d:f7:c8:a5:2e:f4:31:31:6c:3d:05:7b:6a:2a:71: 04:d2:f6:11:9b:d6:7c:be:00:8e:46:68:77:37:70: 1f:77:15:cf:29:72:6f:40:db:58:50:f6:14:d8:28: 32:1b:81:0e:c0:cf:76:8d:30:e9:58:1c:4f:55:28: e1:26:d9:cc:d0:0b:ac:ae:6c:a4:ce:2a:1f:91:90: 0a:05:8f:17:de:33:fa:65:5b:46:95:c7:79:ca:b9: b0:f3:99:fd:58:e3:53:6c:0d:46:a2:e5:97:3e:91: 28:2f:28:9c:ca:f7:89:5a:0b:5f:24:e7:a6:d9:44: ce:96:47:2d:ca:e5:41:c3:3e:2f:9f:eb:0d:07:bb: 0b:ff:38:97:99:2c:c6:28:63:3e:e9:9a:3f:d2:81: 37:0f:6b:4d:e5:51:46:da:6e:44:8f:cf:8c:e9:73: d8:43:cd:ee:b0:da:65:34:4b:e5:a7:11:05:eb:a5: be:69:6a:1b:2b:70:86:38:b1:af:d6:bc:4f:75:1f: fc:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:6E:0C:11:C4:99:62:7F:74:0F:CA:FC:9B:96:CF:37:01:91:B2:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c2fc1e7-4390-3d18-badc-a6fa1c1f6d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:55:98:8c:57:56:e9:d4:03:eb:c8:44:86:06:3f:84:fb:c9: 17:b0:47:4a:04:6f:ff:35:86:52:76:11:9f:1b:ec:b2:ef:b0: 3c:c5:e5:d7:9c:f6:35:b6:91:74:83:ff:73:11:1d:c7:ea:30: 7d:01:48:7b:db:98:99:71:fc:a1:24:62:71:30:73:fc:95:e4: 70:0f:6e:98:c4:b3:84:2b:cb:fe:30:77:7d:20:f1:c3:c3:f7: e9:63:c6:71:a1:84:a8:47:b8:2a:fe:e6:23:6a:49:6e:e2:c5: 9e:df:9e:19:20:a0:8c:7a:d6:14:fd:97:f1:df:4e:8e:61:2b: 26:c5:34:ca:66:04:fe:26:80:1f:af:95:9e:80:3d:32:20:98: 0d:f7:a5:d6:b1:08:be:49:87:a2:35:fd:08:8d:95:c9:da:cd: 8a:10:e1:86:b8:8c:f3:80:52:2b:f6:d1:eb:aa:06:52:e1:93: 3f:9a:9d:cd:bf:a9:2e:cc:6b:79:81:61:55:f1:09:1f:3c:94: cc:34:27:82:8b:c8:b0:7a:a7:db:34:06:8f:f7:d0:a0:b9:ef: d4:d1:94:c3:6a:12:ed:79:6e:ca:61:dd:73:e4:2f:ed:be:ae: d6:c3:cf:78:ea:38:ad:bd:aa:f1:80:bc:fd:99:cd:1e:70:1e: 01:3a:39:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprfIjwczlxwk6IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NzI1MWY0ZmEtYWJjYS00MDQyLWIyOGMtZmMwNGU3OWJlYTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/PsRmWxNQif8y1lEayo0h3CojRlbi0jiZr+ OKsGmcqEuUWH+6Nd+3eRUdWffzbkSsr3PtjcbkyyEj9N98ilLvQxMWw9BXtqKnEE 0vYRm9Z8vgCORmh3N3AfdxXPKXJvQNtYUPYU2CgyG4EOwM92jTDpWBxPVSjhJtnM 0AusrmykziofkZAKBY8X3jP6ZVtGlcd5yrmw85n9WONTbA1GouWXPpEoLyicyveJ WgtfJOem2UTOlkctyuVBwz4vn+sNB7sL/ziXmSzGKGM+6Zo/0oE3D2tN5VFG2m5E j8+M6XPYQ83usNplNEvlpxEF66W+aWobK3CGOLGv1rxPdR/8GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhuDBHEmWJ/dA/K/JuWzzcBkbJiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGMyZmMxZTctNDM5MC0z ZDE4LWJhZGMtYTZmYTFjMWY2ZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdVmIxXVunUA+vIRIYGP4T7yRewR0oEb/81hlJ2EZ8b7LLvsDzF5dec 9jW2kXSD/3MRHcfqMH0BSHvbmJlx/KEkYnEwc/yV5HAPbpjEs4Qry/4wd30g8cPD 9+ljxnGhhKhHuCr+5iNqSW7ixZ7fnhkgoIx61hT9l/HfTo5hKybFNMpmBP4mgB+v lZ6APTIgmA33pdaxCL5Jh6I1/QiNlcnazYoQ4Ya4jPOAUiv20euqBlLhkz+anc2/ qS7Ma3mBYVXxCR88lMw0J4KLyLB6p9s0Bo/30KC579TRlMNqEu15bsph3XPkL+2+ rtbDz3jqOK29qvGAvP2ZzR5wHgE6Ofs= -----END CERTIFICATE-----Generated at Fri Mar 14 09:31:39 2025 by rpki-client