$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8d9e7eb4-d5aa-3171-9852-fa6822404474.roa File: 8d9e7eb4-d5aa-3171-9852-fa6822404474.roa (raw, json) Hash identifier: BmFbowHIRaZVb3Xmw5GfI5EgaR6HpB81r56ATYBejnM= Subject key identifier: BF:F0:92:46:7D:BD:E1:8F:E8:13:95:17:55:91:29:40:B7:8C:02:00 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D7179F4C786079F55FE0A00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8d9e7eb4-d5aa-3171-9852-fa6822404474.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:79:f4:c7:86:07:9f:55:fe:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=aa5938a4-c532-4d72-9254-989e1b4f94e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:63:f7:97:e4:1e:49:b0:4e:9f:e1:ba:47:c1: ea:36:96:1d:f3:f4:77:35:16:56:d4:8d:5e:75:15: 6d:91:fe:a2:5d:c6:2b:1a:ca:dd:85:06:ef:49:4e: 5b:98:92:b7:1c:05:18:fd:4e:e0:99:5a:1f:d0:22: 56:a2:ee:ce:50:83:3b:9c:2e:14:17:0d:dd:52:9f: 3e:45:15:c5:a1:fd:77:81:93:1e:d2:d3:a5:99:02: a4:e0:04:88:12:9a:c0:dd:9c:57:78:00:96:32:d1: 28:38:63:46:48:52:92:77:2f:8c:e8:a7:32:39:20: 9e:2c:9a:cc:1a:22:14:19:f4:65:05:23:ea:d7:3a: fa:18:0a:61:01:77:36:15:9d:51:cd:d7:39:03:a0: 14:1f:64:93:2a:ca:80:8c:72:19:cc:86:5f:cc:d9: a5:55:e0:a5:00:d7:a4:9c:cc:5f:82:3b:df:a7:b2: 60:8e:9c:92:d0:b6:6a:08:e1:4a:3b:c7:58:8f:f9: 31:91:2c:8e:d6:f0:a5:54:d2:0a:5f:89:5c:07:f0: 86:36:4e:a4:d5:89:9d:61:d7:42:4f:3e:62:64:9d: 7b:d8:a6:5b:5a:96:b2:ee:8e:35:82:fb:2f:bd:d8: 7a:18:de:f4:18:85:1d:83:08:c7:5f:53:dc:10:e6: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F0:92:46:7D:BD:E1:8F:E8:13:95:17:55:91:29:40:B7:8C:02:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8d9e7eb4-d5aa-3171-9852-fa6822404474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f0:6f:15:d9:4a:7a:3f:e3:ab:3c:01:8e:c9:a2:ff:2b:d5: 06:48:39:9e:86:bb:b8:8e:09:07:bf:48:43:69:1d:42:3f:19: 25:e9:07:c3:96:3c:01:32:bb:1e:cc:33:6d:e9:15:94:76:f0: b1:2e:3c:8b:78:a0:ab:82:f8:4d:d0:e6:d6:08:7c:63:0d:50: 73:ed:7d:f0:e9:77:73:80:f1:97:fd:9d:84:69:b4:c8:47:be: 18:38:50:bb:3f:f3:0e:04:39:bd:ed:aa:1b:ad:85:37:68:a4: 4c:fc:6d:7b:dd:ff:43:6f:d6:89:d9:97:61:0f:f2:08:88:c4: 68:ea:0d:ac:37:a0:e2:50:dc:fc:21:45:2e:77:ac:ae:0d:b7: 03:5b:81:f2:80:6c:1b:22:80:6b:ff:e7:c0:07:ba:29:2d:b9: 52:e7:d5:d7:96:62:79:b1:04:71:4b:bb:70:e1:6d:28:17:f4: 28:b5:45:19:12:ff:53:67:9c:2e:31:6d:94:54:26:ce:cc:fd: 81:43:fe:fb:13:86:a6:2a:39:6e:3e:6d:2b:5a:15:3d:1c:d2: ee:28:71:09:b8:88:cf:fa:f0:8e:cf:35:0f:ec:cd:7f:45:a0: 08:d7:a6:46:c1:4f:82:40:b9:77:95:ca:80:9f:2b:5c:65:23: 2c:cf:86:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXn0x4YHn1X+CgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk YWE1OTM4YTQtYzUzMi00ZDcyLTkyNTQtOTg5ZTFiNGY5NGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmP3l+QeSbBOn+G6R8HqNpYd8/R3NRZW1I1e dRVtkf6iXcYrGsrdhQbvSU5bmJK3HAUY/U7gmVof0CJWou7OUIM7nC4UFw3dUp8+ RRXFof13gZMe0tOlmQKk4ASIEprA3ZxXeACWMtEoOGNGSFKSdy+M6KcyOSCeLJrM GiIUGfRlBSPq1zr6GAphAXc2FZ1Rzdc5A6AUH2STKsqAjHIZzIZfzNmlVeClANek nMxfgjvfp7JgjpyS0LZqCOFKO8dYj/kxkSyO1vClVNIKX4lcB/CGNk6k1YmdYddC Tz5iZJ172KZbWpay7o41gvsvvdh6GN70GIUdgwjHX1PcEOYieQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/wkkZ9veGP6BOVF1WRKUC3jAIAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGQ5ZTdlYjQtZDVhYS0z MTcxLTk4NTItZmE2ODIyNDA0NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrwbxXZSno/46s8AY7Jov8r1QZIOZ6Gu7iOCQe/SENpHUI/GSXpB8OW PAEyux7MM23pFZR28LEuPIt4oKuC+E3Q5tYIfGMNUHPtffDpd3OA8Zf9nYRptMhH vhg4ULs/8w4EOb3tqhuthTdopEz8bXvd/0Nv1onZl2EP8giIxGjqDaw3oOJQ3Pwh RS53rK4NtwNbgfKAbBsigGv/58AHuiktuVLn1deWYnmxBHFLu3DhbSgX9Ci1RRkS /1NnnC4xbZRUJs7M/YFD/vsThqYqOW4+bStaFT0c0u4ocQm4iM/68I7PNQ/szX9F oAjXpkbBT4JAuXeVyoCfK1xlIyzPhrg= -----END CERTIFICATE-----Generated at Fri Apr 4 23:42:09 2025 by rpki-client