$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa File: a3d77e1c-257b-3469-b300-a7bde94c1679.roa (raw, json) Hash identifier: S9Cjvuj/zejpr6X17Y4IJrDin6VD+E7bvCHbumF2n5g= Subject key identifier: 29:0A:9D:E3:8A:21:25:5D:19:14:07:76:A2:CF:C7:23:06:4C:C9:72 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B86A0FFA5CF81EF9CE78 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b8:6a:0f:fa:5c:f8:1e:f9:ce:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=66724418-dca6-4287-bfa2-7bdff4c42485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:77:c7:c1:25:28:e9:04:0d:5d:a9:61:79:ad: b4:e2:00:d7:bf:33:b7:3e:a0:9e:11:42:7d:da:b8: d8:ce:6b:db:78:50:82:1e:53:28:f0:9e:ce:df:3f: 9b:13:82:2f:04:06:fe:9c:11:70:fc:ca:d3:de:36: 19:98:51:e6:06:df:ca:98:ed:65:ce:2c:32:e6:fd: 71:ae:a4:f9:e3:bf:78:01:66:d4:70:4e:53:82:f8: d8:9f:ab:77:ac:63:00:8d:1d:92:45:7b:ca:ac:7f: 38:bc:4f:e9:76:f6:81:1b:87:4d:77:df:af:a8:4b: 95:f2:bf:94:6d:8e:14:d5:c7:f5:a5:9e:2a:1e:c6: 9c:a8:15:5b:fe:c4:ce:5a:32:07:30:a8:ad:da:b9: a0:c5:cb:11:3f:3d:1c:c6:1b:33:81:f0:5c:5f:e4: dc:f3:f9:7e:27:1c:5e:cb:92:b0:ab:98:51:f8:04: 9f:9f:67:77:3b:eb:e9:c0:a2:64:a9:9c:7e:e7:65: 49:18:d4:a0:3b:e2:72:6a:69:2c:30:f5:37:e3:b0: 9d:f6:b2:09:e1:c5:a7:a4:00:49:5d:f4:69:dd:40: e8:5d:f7:e2:f2:f8:c9:60:54:cb:27:1b:a7:51:43: b5:c2:da:bb:a5:c8:02:45:9a:f4:47:e6:32:ad:04: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0A:9D:E3:8A:21:25:5D:19:14:07:76:A2:CF:C7:23:06:4C:C9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a3d77e1c-257b-3469-b300-a7bde94c1679.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:51:09:b5:f8:5f:42:41:a6:e1:07:a8:b9:27:9e:12:f4:4f: dc:7a:ed:cb:72:5c:17:a6:62:3d:2d:c8:d9:ab:1f:a2:ee:9d: 7f:42:ff:eb:b6:72:74:87:eb:9e:49:1a:6b:39:91:6c:f9:6b: 80:45:b0:b7:38:d1:7a:8c:a4:bf:6e:01:2a:6c:e3:bf:b9:a2: 5f:b5:f3:2a:06:b6:8b:d3:b3:9f:6d:b6:45:2d:55:26:2c:70: 9e:84:bc:bc:a8:08:65:ec:f6:2a:16:2e:d4:9c:c4:d1:0c:9f: 3e:26:61:c7:e3:39:22:2c:a0:68:10:b6:d6:d0:0e:a5:5a:16: cd:ff:3b:ed:16:91:ce:a6:42:b2:d0:2a:8f:ae:61:10:0b:de: 48:bd:8d:f0:97:f4:8d:08:e5:eb:e0:80:8a:69:5d:3c:41:99: 08:7d:26:3d:c5:b0:4f:94:ec:85:4f:b7:e5:cd:aa:9c:77:f0: e4:63:77:12:85:b7:f9:05:9e:5b:46:43:73:fa:e4:28:f3:ff: 43:56:b7:9b:9a:ff:d1:56:ec:10:b3:00:e4:7d:35:97:7e:8d: c7:83:20:ec:ad:0b:96:98:1b:e6:0f:8a:a9:53:65:78:75:89: cb:f0:f7:ac:85:fa:6f:9f:e7:5e:d2:36:5c:3d:39:92:8c:8e: 56:45:50:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprhqD/pc+B75zngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk NjY3MjQ0MTgtZGNhNi00Mjg3LWJmYTItN2JkZmY0YzQyNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHfHwSUo6QQNXalhea204gDXvzO3PqCeEUJ9 2rjYzmvbeFCCHlMo8J7O3z+bE4IvBAb+nBFw/MrT3jYZmFHmBt/KmO1lziwy5v1x rqT54794AWbUcE5TgvjYn6t3rGMAjR2SRXvKrH84vE/pdvaBG4dNd9+vqEuV8r+U bY4U1cf1pZ4qHsacqBVb/sTOWjIHMKit2rmgxcsRPz0cxhszgfBcX+Tc8/l+Jxxe y5Kwq5hR+ASfn2d3O+vpwKJkqZx+52VJGNSgO+JyamksMPU347Cd9rIJ4cWnpABJ XfRp3UDoXffi8vjJYFTLJxunUUO1wtq7pcgCRZr0R+YyrQRylwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkKneOKISVdGRQHdqLPxyMGTMlyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTNkNzdlMWMtMjU3Yi0z NDY5LWIzMDAtYTdiZGU5NGMxNjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZRCbX4X0JBpuEHqLknnhL0T9x67ctyXBemYj0tyNmrH6LunX9C/+u2 cnSH655JGms5kWz5a4BFsLc40XqMpL9uASps47+5ol+18yoGtovTs59ttkUtVSYs cJ6EvLyoCGXs9ioWLtScxNEMnz4mYcfjOSIsoGgQttbQDqVaFs3/O+0Wkc6mQrLQ Ko+uYRAL3ki9jfCX9I0I5evggIppXTxBmQh9Jj3FsE+U7IVPt+XNqpx38ORjdxKF t/kFnltGQ3P65Cjz/0NWt5ua/9FW7BCzAOR9NZd+jceDIOytC5aYG+YPiqlTZXh1 icvw96yF+m+f517SNlw9OZKMjlZFUL0= -----END CERTIFICATE-----Generated at Fri Mar 14 10:03:59 2025 by rpki-client