$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa File: 8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa (raw, json) Hash identifier: bbxw51BzfySSTre6kG0gWUzFKHFq3ZhBZ8DDJ+GVkVI= Subject key identifier: C0:0B:FB:43:14:03:0B:2B:D6:D4:60:AA:4D:C9:93:2E:52:9F:2E:75 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491246AA23A14956CD51317B00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa Signing time: Tue 04 Mar 2025 02:00:40 +0000 ROA not before: Tue 04 Mar 2025 02:00:40 +0000 ROA not after: Mon 02 Jun 2025 01:00:40 +0000 asID: 14618 IP address blocks: 130.137.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:12:46:aa:23:a1:49:56:cd:51:31:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 4 02:00:40 2025 GMT Not After : Jun 2 01:00:40 2025 GMT Subject: CN=101472c7-6c48-4709-b2d3-114b0b4ce229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bd:4d:fd:e1:7c:79:07:0f:ca:8b:01:b8:fa: 4b:47:84:5f:3f:82:d2:3c:cf:c7:88:b9:e5:18:95: 9e:7d:0f:f2:5a:2e:da:8b:bb:ab:8f:e6:a8:ad:55: c2:0a:c8:7e:61:6d:69:1e:2a:39:7a:15:31:ec:eb: 25:a3:8e:61:4e:e2:50:6a:77:0f:9e:41:84:b6:b4: 81:51:f3:84:32:57:fe:be:4c:b7:ff:7f:53:11:a6: d7:a0:31:3c:27:05:cd:24:f8:29:1d:f7:ef:42:e9: bc:cb:e0:7d:27:ac:87:c0:43:3d:11:07:ee:02:ad: 8c:1c:99:05:da:30:2e:e5:b6:a0:63:eb:c5:0c:e7: 86:3b:4b:f1:36:25:22:97:c5:5c:ef:e8:49:b9:bb: ce:24:9f:82:b5:52:86:90:b1:2d:e6:e7:f9:47:a0: 25:75:46:89:d6:be:07:a7:76:6c:23:09:c7:1c:64: ed:7f:a7:52:a7:37:38:82:6f:68:1d:25:8f:c0:9c: 50:d6:df:a1:6f:14:17:ef:3f:d3:6f:93:c8:c4:24: 32:72:3b:50:20:6a:9c:b1:4e:0d:87:fa:cd:4c:d9: b0:3c:6c:53:87:d6:36:05:b6:83:4b:96:61:95:a3: d2:31:05:5b:f4:ce:06:32:51:8d:a8:19:56:78:8b: 30:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:0B:FB:43:14:03:0B:2B:D6:D4:60:AA:4D:C9:93:2E:52:9F:2E:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8c95ec7a-5128-38d0-bff0-fcdab85e87ca.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:5c:d2:08:fc:fe:f0:44:2c:22:dc:ed:0d:5f:36:c9:8c:11: 3d:45:8c:67:4c:7b:87:60:71:af:ed:73:fb:7c:cc:07:94:55: 9c:9a:78:aa:49:d2:3f:9f:04:34:5d:fa:df:47:bd:04:ea:6d: af:99:90:da:78:ec:bc:04:77:ce:3d:e0:6e:6f:f5:dc:0a:a0: 49:b9:2c:8c:0f:64:c4:c7:cc:e5:d7:aa:5f:3f:62:1f:2f:f9: 02:f1:c5:62:b3:74:73:f9:b2:85:de:e8:27:57:bb:a8:35:be: 48:89:22:e8:b6:89:7d:75:06:93:a8:3f:3a:4d:e4:0a:d8:ff: 18:64:6e:80:8a:5a:1a:42:31:9a:1c:73:d0:6f:98:a3:e4:d0: 09:a1:d6:9f:cb:8d:09:e8:a4:99:26:c3:3a:33:f1:c0:03:7b: 65:27:06:2a:0f:46:8b:fa:04:9d:e6:37:e5:bc:af:2d:06:57: d9:eb:49:cd:04:06:92:fc:db:95:8c:2f:44:4b:c4:70:37:c0: a3:8a:52:2d:69:2b:b1:02:cb:06:e9:92:e5:1c:3a:98:db:86: 2f:d3:5a:58:bd:04:e4:b9:71:4b:f2:fb:ec:0a:10:2f:50:5c: b3:48:bd:88:5a:d1:71:cb:db:ce:ed:b1:a7:40:a1:0a:c4:34: ae:09:4b:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRqojoUlWzVExewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk MTAxNDcyYzctNmM0OC00NzA5LWIyZDMtMTE0YjBiNGNlMjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb1N/eF8eQcPyosBuPpLR4RfP4LSPM/HiLnl GJWefQ/yWi7ai7urj+aorVXCCsh+YW1pHio5ehUx7Oslo45hTuJQancPnkGEtrSB UfOEMlf+vky3/39TEabXoDE8JwXNJPgpHffvQum8y+B9J6yHwEM9EQfuAq2MHJkF 2jAu5bagY+vFDOeGO0vxNiUil8Vc7+hJubvOJJ+CtVKGkLEt5uf5R6AldUaJ1r4H p3ZsIwnHHGTtf6dSpzc4gm9oHSWPwJxQ1t+hbxQX7z/Tb5PIxCQycjtQIGqcsU4N h/rNTNmwPGxTh9Y2BbaDS5ZhlaPSMQVb9M4GMlGNqBlWeIsw9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAL+0MUAwsr1tRgqk3Jky5Sny51MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGM5NWVjN2EtNTEyOC0z OGQwLWJmZjAtZmNkYWI4NWU4N2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVc0gj8/vBELCLc7Q1fNsmMET1FjGdMe4dgca/tc/t8zAeUVZyaeKpJ 0j+fBDRd+t9HvQTqba+ZkNp47LwEd8494G5v9dwKoEm5LIwPZMTHzOXXql8/Yh8v +QLxxWKzdHP5soXe6CdXu6g1vkiJIui2iX11BpOoPzpN5ArY/xhkboCKWhpCMZoc c9BvmKPk0Amh1p/LjQnopJkmwzoz8cADe2UnBioPRov6BJ3mN+W8ry0GV9nrSc0E BpL825WML0RLxHA3wKOKUi1pK7ECywbpkuUcOpjbhi/TWli9BOS5cUvy++wKEC9Q XLNIvYha0XHL287tsadAoQrENK4JS4w= -----END CERTIFICATE-----Generated at Fri Apr 4 23:36:01 2025 by rpki-client