$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa File: 9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa (raw, json) Hash identifier: E/PayiNJn51A4JzcNqlBGICGRVonlYCukvoedJyAqk4= Subject key identifier: 45:E1:4B:65:DE:C3:38:32:6C:F3:9C:99:17:5A:C4:37:26:92:2C:5F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B46A9F159E4BC08A7780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b4:6a:9f:15:9e:4b:c0:8a:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=04205e7a-b7a9-4c31-b3c1-50181043e71d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:45:14:6b:ea:ab:69:0f:09:26:38:31:1f: f1:93:42:63:4a:38:d3:f5:d4:fe:07:f0:6f:2b:87: ee:76:1b:a2:c8:57:d0:01:44:06:45:ea:06:3d:e0: bc:72:c7:c8:0c:01:ea:69:e1:93:7f:94:89:85:ab: 89:2c:dd:17:aa:86:54:07:29:38:02:cc:18:95:03: be:fe:42:8f:34:a7:ca:f8:97:fc:bf:c7:e0:15:12: e4:49:95:5e:c4:a0:84:27:04:09:50:39:32:cd:da: 16:d1:81:dd:c0:94:4e:1f:a5:af:bc:ac:cb:a8:09: 88:b1:8c:c6:e3:49:19:53:6d:c2:dd:b3:16:70:07: 6e:34:9c:8b:1f:f3:36:d9:18:d1:23:2a:89:66:fe: 91:d8:85:1b:2c:5d:69:2c:d2:28:31:52:9e:d6:75: ca:fa:b8:b2:b6:2b:13:9d:93:5f:68:14:0a:31:e0: 2d:4f:36:f5:65:29:63:f3:95:69:f1:02:47:c1:7a: fb:ca:dc:27:c5:df:86:da:55:1a:c6:a5:22:1e:93: e5:16:dd:09:0f:b2:59:1d:93:72:d3:3d:96:34:17: 22:1c:49:25:91:64:4d:23:51:04:9c:25:37:d5:f8: ca:20:50:3c:c0:c9:0d:d5:96:e7:dd:f8:34:8b:58: b1:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:4B:65:DE:C3:38:32:6C:F3:9C:99:17:5A:C4:37:26:92:2C:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:94:d7:35:6a:55:16:e1:a6:a4:4d:5d:b8:dd:cf:3c:39:04: 40:31:d9:60:b2:1c:45:aa:f4:a6:29:91:e9:0a:4a:ac:af:1a: 7a:af:4a:07:0c:ff:39:be:f6:04:78:7a:25:9d:48:21:f8:29: a6:5a:21:84:6e:7c:32:27:55:b3:8b:18:6f:4a:3a:e1:4d:cd: 5f:5c:6b:bf:7a:91:b2:ad:0a:29:bc:63:1a:2c:e1:58:b8:36: c8:83:55:a6:0f:6b:d4:55:63:68:fc:b1:98:b1:73:02:fa:eb: 21:d2:bd:a8:d4:6a:7b:45:4e:87:cd:de:d1:94:da:e7:de:99: d7:50:67:d7:7a:47:a9:18:3c:b5:a7:a7:47:f9:bd:25:98:8e: c5:bd:d9:f5:06:5d:1e:1d:78:35:ef:4e:4a:8e:f3:e6:bc:17: 3c:d7:c0:d6:1b:3d:59:56:36:fd:0d:ad:6c:45:97:f4:ab:b6: ce:f8:bf:d1:95:a8:11:f1:a8:e7:16:36:dd:46:41:92:39:69: f1:cb:63:10:98:38:4f:96:a2:ef:fc:64:56:6b:11:53:75:46: e3:41:05:51:c3:a3:2b:aa:59:38:66:74:45:23:eb:e1:8c:2a: 56:40:e3:cf:83:59:02:59:b7:31:38:73:83:58:11:46:1b:a6: 66:ff:b2:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprRqnxWeS8CKd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MDQyMDVlN2EtYjdhOS00YzMxLWIzYzEtNTAxODEwNDNlNzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk5FFGvqq2kPCSY4MR/xk0JjSjjT9dT+B/Bv K4fudhuiyFfQAUQGReoGPeC8csfIDAHqaeGTf5SJhauJLN0XqoZUByk4AswYlQO+ /kKPNKfK+Jf8v8fgFRLkSZVexKCEJwQJUDkyzdoW0YHdwJROH6WvvKzLqAmIsYzG 40kZU23C3bMWcAduNJyLH/M22RjRIyqJZv6R2IUbLF1pLNIoMVKe1nXK+riytisT nZNfaBQKMeAtTzb1ZSlj85Vp8QJHwXr7ytwnxd+G2lUaxqUiHpPlFt0JD7JZHZNy 0z2WNBciHEklkWRNI1EEnCU31fjKIFA8wMkN1Zbn3fg0i1ix3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXhS2XewzgybPOcmRdaxDcmkixfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWFhZWFmZDAtMGRhZS0z ZDdmLTkxOGUtMmZjNDkzMTk2ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmU1zVqVRbhpqRNXbjdzzw5BEAx2WCyHEWq9KYpkekKSqyvGnqvSgcM /zm+9gR4eiWdSCH4KaZaIYRufDInVbOLGG9KOuFNzV9ca796kbKtCim8Yxos4Vi4 NsiDVaYPa9RVY2j8sZixcwL66yHSvajUantFTofN3tGU2ufemddQZ9d6R6kYPLWn p0f5vSWYjsW92fUGXR4deDXvTkqO8+a8FzzXwNYbPVlWNv0NrWxFl/Srts74v9GV qBHxqOcWNt1GQZI5afHLYxCYOE+Wou/8ZFZrEVN1RuNBBVHDoyuqWThmdEUj6+GM KlZA48+DWQJZtzE4c4NYEUYbpmb/sr0= -----END CERTIFICATE-----Generated at Sat Apr 5 10:54:35 2025 by rpki-client