$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa File: 9e4ca616-100c-338d-90e9-4bee6142ba1f.roa (raw, json) Hash identifier: RsglLoXpu1VhnJ99x2d9ky7lDwJ2feKnfiVgW5AhVLU= Subject key identifier: 12:DB:10:17:F6:DA:31:A7:3D:05:42:03:7E:7A:21:DB:8C:09:B3:91 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B5954A88C0F631E37380 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b5:95:4a:88:c0:f6:31:e3:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=b4d13eac-8178-4407-8a68-1820510df95a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:74:69:92:9f:e1:23:2b:fd:2c:9e:c6:73:4b: a5:75:d1:8f:8a:9f:31:58:9f:3b:07:eb:71:b0:fb: 8b:d3:80:8a:e5:90:71:d9:d1:81:a8:ec:16:64:6f: eb:aa:e1:e0:f7:ff:76:1f:61:b9:4a:d6:72:a7:db: 67:2e:19:24:7c:36:da:63:d6:bb:24:72:84:29:ee: f3:1e:24:a1:0b:14:c8:c9:df:9f:ce:c7:35:9b:b6: 87:45:30:8d:2b:a8:c5:c0:e9:58:99:18:49:19:4d: 2c:5a:42:23:f6:8a:f3:ec:ab:b4:71:fb:cb:50:9c: ff:4c:44:02:d9:15:18:7c:52:92:48:02:40:51:83: a5:f7:2a:b0:c3:75:35:9d:7c:d5:19:af:67:50:ed: 71:47:4a:75:12:34:fb:3e:59:66:b1:78:f4:18:9b: 05:dd:96:b2:25:d4:ea:fa:c3:e5:9d:6d:15:ab:d1: 87:3b:eb:c0:9c:52:7e:04:83:d7:cb:4d:12:b6:f9: 34:b0:5c:3e:56:5d:b1:b0:f1:53:25:0d:ec:bd:c1: 62:11:32:50:e6:d2:24:de:7e:93:f6:99:4d:f3:e5: fd:25:b6:ca:5b:8d:d1:e7:a7:5f:33:ee:12:19:19: 9c:7d:a0:91:b8:71:c1:d1:b2:f9:ca:30:e8:79:f2: 33:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DB:10:17:F6:DA:31:A7:3D:05:42:03:7E:7A:21:DB:8C:09:B3:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e4ca616-100c-338d-90e9-4bee6142ba1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:d3:1e:a0:80:15:e3:ac:0b:40:c8:a6:93:2b:d6:82:3b:ae: 10:7d:c0:be:b8:60:aa:bb:81:7a:b9:fa:d7:26:51:b6:97:1c: bb:90:00:9a:cf:d6:05:1a:ce:6b:9d:35:85:c6:63:ae:04:cb: 16:6b:b9:a3:55:ce:1e:b4:f3:d8:99:7a:c6:1d:99:22:79:32: 0b:30:32:98:48:c7:5c:c8:69:f5:44:fe:39:55:1d:a0:fe:fb: d1:61:fd:b5:87:bf:0d:82:be:e8:43:8e:cf:a6:26:5e:4c:ed: a6:ae:50:bc:fd:74:c6:69:5a:30:95:95:d4:a8:3b:16:ab:c8: b8:cb:36:06:08:22:22:33:e0:73:24:d8:da:49:91:d1:2c:33: 85:a5:8c:a1:c5:63:e8:f4:0f:dc:6e:e0:33:21:04:1b:ac:13: be:5a:51:d4:27:e7:b3:bb:54:a0:51:b3:7a:d5:2d:0c:c6:55: 4b:8f:03:8a:d7:27:07:c6:a7:f1:1b:ee:a0:75:30:d5:aa:bb: b1:72:41:c7:d2:47:1c:88:b5:41:cb:a8:b5:ea:eb:47:ef:22: 22:93:46:c9:2d:1a:3a:11:c9:0a:91:da:b5:6b:45:a0:9c:5a: ab:97:2b:eb:53:c3:05:e9:22:f4:1a:52:5a:55:5f:a4:0f:f6: c7:62:25:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprWVSojA9jHjc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk YjRkMTNlYWMtODE3OC00NDA3LThhNjgtMTgyMDUxMGRmOTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnRpkp/hIyv9LJ7Gc0ulddGPip8xWJ87B+tx sPuL04CK5ZBx2dGBqOwWZG/rquHg9/92H2G5StZyp9tnLhkkfDbaY9a7JHKEKe7z HiShCxTIyd+fzsc1m7aHRTCNK6jFwOlYmRhJGU0sWkIj9orz7Ku0cfvLUJz/TEQC 2RUYfFKSSAJAUYOl9yqww3U1nXzVGa9nUO1xR0p1EjT7PllmsXj0GJsF3ZayJdTq +sPlnW0Vq9GHO+vAnFJ+BIPXy00Stvk0sFw+Vl2xsPFTJQ3svcFiETJQ5tIk3n6T 9plN8+X9JbbKW43R56dfM+4SGRmcfaCRuHHB0bL5yjDoefIzbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLbEBf22jGnPQVCA356IduMCbORMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWU0Y2E2MTYtMTAwYy0z MzhkLTkwZTktNGJlZTYxNDJiYTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzTHqCAFeOsC0DIppMr1oI7rhB9wL64YKq7gXq5+tcmUbaXHLuQAJrP 1gUazmudNYXGY64EyxZruaNVzh6089iZesYdmSJ5MgswMphIx1zIafVE/jlVHaD+ +9Fh/bWHvw2CvuhDjs+mJl5M7aauULz9dMZpWjCVldSoOxaryLjLNgYIIiIz4HMk 2NpJkdEsM4WljKHFY+j0D9xu4DMhBBusE75aUdQn57O7VKBRs3rVLQzGVUuPA4rX JwfGp/Eb7qB1MNWqu7FyQcfSRxyItUHLqLXq60fvIiKTRsktGjoRyQqR2rVrRaCc WquXK+tTwwXpIvQaUlpVX6QP9sdiJao= -----END CERTIFICATE-----Generated at Fri Apr 4 23:31:15 2025 by rpki-client