$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa File: a47d3352-10f4-3335-bf83-7e70062a6086.roa (raw, json) Hash identifier: ICNb8RTE8qnDmNxd7SmPen/QiSLAjTSGJpmQIqr7+Dg= Subject key identifier: C5:78:E1:B1:92:1F:73:BD:A7:18:7E:B2:19:2B:3F:20:8E:25:51:93 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B7B24AA0FEBF19496670 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b7:b2:4a:a0:fe:bf:19:49:66:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=1e484692-ae04-4a06-a16a-3cd3b233a60f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bc:9c:0d:26:8e:f6:a7:c8:27:54:5e:7e:06: 1b:07:ce:ad:2f:14:a5:f0:7c:ad:fd:0d:aa:b7:d8: ff:ed:42:6a:3b:a0:a6:8c:c3:02:30:d7:45:89:66: 87:e7:5d:8c:47:da:e1:a1:c4:05:1d:1a:6c:2d:67: 6e:36:d3:e9:a3:68:57:d8:e7:87:54:f7:85:c1:2a: 53:71:c1:cb:60:a0:66:37:b5:0c:97:9b:db:a9:06: de:cc:31:38:ab:17:2c:e0:b5:20:68:a1:21:2a:ba: 72:29:50:a8:a6:8a:5e:49:05:20:b6:30:57:87:30: b6:72:fa:10:f0:2a:ed:ea:1c:12:e0:97:14:c6:ae: 6d:01:7a:e1:3f:e3:92:9f:01:b3:e6:09:22:c5:ad: 84:70:ab:59:2f:50:1c:11:a6:7a:61:fc:c4:71:dd: 26:d9:ad:db:67:99:75:8a:54:56:6b:f4:9b:88:f3: 7e:fe:74:b2:3e:ca:64:d8:ee:bc:ab:38:32:fa:5b: 67:af:d0:86:48:fe:63:90:d2:0f:05:89:b1:a7:96: c8:96:cf:a6:8a:6f:31:27:db:18:18:00:2c:09:45: 27:e5:a0:2b:95:76:bb:e6:b0:22:b2:b9:9b:8a:f3: 05:57:62:f9:5b:53:8f:b4:06:fe:2d:1f:a7:a6:fc: 1d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:E1:B1:92:1F:73:BD:A7:18:7E:B2:19:2B:3F:20:8E:25:51:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a47d3352-10f4-3335-bf83-7e70062a6086.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:41:6f:e9:b4:d6:93:99:cd:a2:c0:bd:5c:69:59:96:35:f4: 6e:3b:70:a9:d8:82:8c:0e:b0:a5:6c:f0:84:5a:b3:08:b9:bc: c5:0d:38:22:88:7d:65:c3:a0:59:af:d2:f1:60:e5:69:5b:95: 18:fa:2b:1e:84:de:2b:bc:14:5f:ae:6c:80:30:73:e8:88:3c: d9:1c:34:6c:40:40:e7:ad:6d:f2:d0:0f:80:0f:da:90:49:66: 95:c9:77:0b:b1:4a:d4:17:22:c1:1a:b4:1d:bb:77:0d:63:66: 83:bc:36:15:67:2a:e6:80:a3:7f:26:58:af:37:ea:ca:52:24: 0a:d1:15:ad:8d:b7:7c:76:52:25:d6:67:e6:0f:3b:af:07:7d: bc:da:dc:98:5c:67:8d:c0:f5:d1:1c:42:23:66:c5:0f:80:14: 4e:57:fe:dc:be:1c:50:2a:00:d3:6e:15:2b:11:63:29:48:6b: c3:a5:42:fb:83:11:e6:74:bf:a7:f7:d7:03:cd:ec:ec:1c:e1: 25:03:1b:5d:2d:7a:99:e2:b3:20:f4:52:a8:4a:0c:09:77:8d: 89:dd:4f:1c:2d:25:fc:15:ca:bb:6e:20:4b:c4:aa:e1:57:65: 82:89:e7:b9:5b:49:89:c2:38:17:4a:98:6f:4a:4d:d4:bd:4d: ca:cf:b4:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkapreySqD+vxlJZnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MWU0ODQ2OTItYWUwNC00YTA2LWExNmEtM2NkM2IyMzNhNjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLycDSaO9qfIJ1RefgYbB86tLxSl8Hyt/Q2q t9j/7UJqO6CmjMMCMNdFiWaH512MR9rhocQFHRpsLWduNtPpo2hX2OeHVPeFwSpT ccHLYKBmN7UMl5vbqQbezDE4qxcs4LUgaKEhKrpyKVCopopeSQUgtjBXhzC2cvoQ 8Crt6hwS4JcUxq5tAXrhP+OSnwGz5gkixa2EcKtZL1AcEaZ6YfzEcd0m2a3bZ5l1 ilRWa/SbiPN+/nSyPspk2O68qzgy+ltnr9CGSP5jkNIPBYmxp5bIls+mim8xJ9sY GAAsCUUn5aArlXa75rAisrmbivMFV2L5W1OPtAb+LR+npvwdcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV44bGSH3O9pxh+shkrPyCOJVGTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTQ3ZDMzNTItMTBmNC0z MzM1LWJmODMtN2U3MDA2MmE2MDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgombMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI5Bb+m01pOZzaLAvVxpWZY19G47cKnYgowOsKVs8IRaswi5vMUNOCKI fWXDoFmv0vFg5WlblRj6Kx6E3iu8FF+ubIAwc+iIPNkcNGxAQOetbfLQD4AP2pBJ ZpXJdwuxStQXIsEatB27dw1jZoO8NhVnKuaAo38mWK836spSJArRFa2Nt3x2UiXW Z+YPO68Hfbza3JhcZ43A9dEcQiNmxQ+AFE5X/ty+HFAqANNuFSsRYylIa8OlQvuD EeZ0v6f31wPN7Owc4SUDG10tepnisyD0UqhKDAl3jYndTxwtJfwVyrtuIEvEquFX ZYKJ57lbSYnCOBdKmG9KTdS9TcrPtOY= -----END CERTIFICATE-----Generated at Fri Apr 4 23:36:00 2025 by rpki-client