$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/903173c9-1ee3-3c73-8584-35cd771f5a11.roa File: 903173c9-1ee3-3c73-8584-35cd771f5a11.roa (raw, json) Hash identifier: 8tjL6B5ovU/opL47/DAjD/126qTmfflQdr8mgoR5bag= Subject key identifier: 6C:2B:88:2B:05:2B:C2:65:38:11:97:49:EB:29:FE:45:C2:C4:F7:30 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D71749FBF299D4F40B69240 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/903173c9-1ee3-3c73-8584-35cd771f5a11.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:74:9f:bf:29:9d:4f:40:b6:92:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=79a60308-2071-4bdb-b6dd-1a94cc4ecd7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:df:d5:0d:03:f4:cc:2e:45:48:d0:8c:8f:3f: 7a:88:75:41:f0:f0:95:69:ed:a4:c1:5f:1b:bd:17: da:10:92:17:42:c4:89:66:bb:0f:f1:6e:5e:80:fc: 62:e9:e6:85:08:83:8b:a5:21:4f:f4:1b:7e:63:2f: 9b:86:aa:37:c1:a1:1b:9f:b9:05:ae:b9:75:09:10: 73:bf:6a:5c:5f:6f:41:98:bb:7e:78:41:0a:e8:d1: 1d:b2:b5:32:01:1b:1d:00:f3:73:af:22:85:36:6b: d9:59:d8:36:96:6b:5b:a6:43:25:13:ed:b2:de:35: 4e:cc:ee:e7:77:85:7c:fe:eb:1d:60:99:6c:6e:ce: 5f:0c:b3:ac:d6:dc:63:60:8e:fb:c8:29:18:84:17: fb:8c:32:ac:0e:a0:9b:f5:33:e1:0b:47:17:c1:fa: b9:05:6a:c4:77:1b:07:66:75:62:d7:91:17:1e:f5: 13:ed:91:07:c0:b6:ce:ae:25:26:7a:eb:9d:41:b6: 1c:65:39:53:6d:a0:72:7e:72:32:01:c5:d0:62:f8: cc:3c:22:e5:85:08:7f:4e:b8:00:5f:ae:b2:ef:61: c1:74:77:7c:9f:78:3e:e2:23:73:ed:0d:e1:ab:66: b3:a9:24:ba:6b:76:8b:36:7d:5e:e7:16:93:00:c3: a4:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2B:88:2B:05:2B:C2:65:38:11:97:49:EB:29:FE:45:C2:C4:F7:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/903173c9-1ee3-3c73-8584-35cd771f5a11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:7f:9d:51:2c:88:d3:bf:41:ae:5d:b2:09:e5:70:90:6b:f7: 3c:59:c5:ab:0b:02:5b:cf:27:4c:60:3d:2d:28:ab:57:21:f9: 0b:e5:86:c1:cb:86:e8:a8:c3:ee:e9:a7:39:dd:5e:6c:98:c4: 9e:d1:99:b8:e6:09:0d:6e:58:a7:b8:30:8a:0e:d7:00:ed:74: c6:59:d4:09:33:f8:5a:ad:66:63:05:eb:75:f3:16:bd:ef:53: e4:dd:54:24:90:68:59:9c:92:d6:2f:cc:55:eb:92:56:98:37: 84:5a:69:ee:1e:8f:df:22:da:96:e2:3b:34:f3:fb:d1:8e:86: 72:4f:a2:56:e2:97:2f:eb:b4:33:11:42:2a:af:5c:c7:ab:ce: ab:06:b1:d7:8d:d8:d9:d7:70:54:b2:dc:4d:45:b7:91:dc:fe: 08:25:39:ea:3f:61:d5:96:e6:5f:e4:10:06:fb:5b:c7:02:09: ba:69:7a:86:e8:b4:92:d3:2e:73:29:03:51:df:a4:b5:e1:2c: ee:e2:9c:54:b2:c3:5c:25:99:4e:8d:3a:5c:42:06:69:5c:d1: e1:fe:a9:f4:b6:14:37:21:e5:b6:42:54:35:61:2d:30:f2:bc: dc:4b:4f:33:b1:b2:c4:68:cc:77:a7:f0:83:78:e2:06:52:c0: eb:ea:1b:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXSfvymdT0C2kkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk NzlhNjAzMDgtMjA3MS00YmRiLWI2ZGQtMWE5NGNjNGVjZDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN/VDQP0zC5FSNCMjz96iHVB8PCVae2kwV8b vRfaEJIXQsSJZrsP8W5egPxi6eaFCIOLpSFP9Bt+Yy+bhqo3waEbn7kFrrl1CRBz v2pcX29BmLt+eEEK6NEdsrUyARsdAPNzryKFNmvZWdg2lmtbpkMlE+2y3jVOzO7n d4V8/usdYJlsbs5fDLOs1txjYI77yCkYhBf7jDKsDqCb9TPhC0cXwfq5BWrEdxsH ZnVi15EXHvUT7ZEHwLbOriUmeuudQbYcZTlTbaByfnIyAcXQYvjMPCLlhQh/TrgA X66y72HBdHd8n3g+4iNz7Q3hq2azqSS6a3aLNn1e5xaTAMOkTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwriCsFK8JlOBGXSesp/kXCxPcwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTAzMTczYzktMWVlMy0z YzczLTg1ODQtMzVjZDc3MWY1YTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgompMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEN/nVEsiNO/Qa5dsgnlcJBr9zxZxasLAlvPJ0xgPS0oq1ch+QvlhsHL huiow+7ppzndXmyYxJ7RmbjmCQ1uWKe4MIoO1wDtdMZZ1Akz+FqtZmMF63XzFr3v U+TdVCSQaFmcktYvzFXrklaYN4Raae4ej98i2pbiOzTz+9GOhnJPolbily/rtDMR QiqvXMerzqsGsdeN2NnXcFSy3E1Ft5Hc/gglOeo/YdWW5l/kEAb7W8cCCbppeobo tJLTLnMpA1HfpLXhLO7inFSyw1wlmU6NOlxCBmlc0eH+qfS2FDch5bZCVDVhLTDy vNxLTzOxssRozHen8IN44gZSwOvqG4c= -----END CERTIFICATE-----Generated at Sat Apr 5 12:33:17 2025 by rpki-client