$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa File: a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa (raw, json) Hash identifier: u2QUaPgfDoGWm5OVi8mZOq/P4FnBtSIGW5LWjpFY+EI= Subject key identifier: 69:91:BB:6E:BF:ED:FD:24:74:9D:6A:09:AF:FD:CF:A0:FC:32:3D:86 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC2BA0C67F1200D273F8C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:2b:a0:c6:7f:12:00:d2:73:f8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=47b51fa3-acb4-4835-b4b2-bf78e27aed97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:13:91:52:fb:75:98:8c:1c:77:a9:78:ae: ee:02:8a:d5:be:ee:21:e6:26:8f:52:0b:dd:82:46: 08:a8:20:a5:b2:c5:fa:c0:0a:8e:0f:5d:7c:cd:5a: c4:db:01:3e:f7:36:c0:f2:61:9e:cd:04:e0:ca:7f: 87:d3:22:c5:44:7a:99:d4:08:ba:60:48:c6:aa:bd: c2:d2:cc:91:b1:8a:2c:50:9f:02:47:de:2e:e2:a7: 1d:a5:0b:13:16:69:40:2e:9a:3d:48:8b:8e:11:9d: c1:28:6d:2b:4c:d9:60:38:ba:48:62:63:7e:2b:32: c6:3a:66:a2:b1:38:ed:7c:c9:e7:bb:7f:a8:54:61: 44:88:4d:a4:72:1d:eb:9a:a7:61:f1:04:0c:df:45: 14:ce:c2:89:35:e7:eb:79:4e:7d:59:3a:0c:8a:2b: dc:27:2a:c9:8a:1b:78:4b:e3:db:ad:a3:cf:7c:5e: 3c:fe:75:fa:eb:68:61:e0:56:27:58:03:1e:41:e7: 75:1c:94:8e:a5:b5:6e:0f:f7:c5:de:1e:f9:99:bf: a2:89:2f:4c:e0:78:63:01:39:37:92:71:59:50:27: d5:93:78:ab:89:1d:99:4e:53:15:fa:b6:3a:28:2b: 21:c8:82:b8:3e:4f:ec:60:c9:19:9b:11:56:4c:fa: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:91:BB:6E:BF:ED:FD:24:74:9D:6A:09:AF:FD:CF:A0:FC:32:3D:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a912f0c9-c24e-3267-aad1-2fefbaf4bf7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:89:4a:de:99:5e:f8:c5:57:ad:96:5c:da:18:4c:26:f9:88: 39:c0:42:73:41:01:41:16:85:82:78:31:75:df:64:8c:95:61: 77:57:ca:e2:ff:97:9a:d6:2e:c2:36:01:3c:ad:fd:92:13:2f: e7:f7:46:9a:7f:b6:98:34:88:24:48:6b:8e:71:01:01:26:69: be:47:f3:ae:17:21:c5:25:46:99:5a:cc:9a:0a:07:fc:08:b5: 16:e7:3e:03:cb:15:f9:bc:5f:d6:99:3b:14:5c:04:27:2c:2c: e4:97:d7:74:f0:cd:eb:40:d1:cd:d5:c4:0a:cb:cb:21:c7:b0: 5b:3c:18:f1:d0:34:7d:cb:4f:c7:6e:94:5a:91:bf:5d:0d:66: cc:e5:94:a2:39:f7:d0:c2:9b:ac:c0:14:38:e8:03:08:d5:7d: 1e:47:de:69:f6:f7:e5:01:cb:46:a6:f4:8d:d6:32:e5:9f:76: 07:21:a4:ac:e9:78:37:d9:c5:5f:6e:f2:83:a0:d2:ac:65:7a: 56:76:f2:62:37:84:6b:9c:16:44:0a:6c:68:35:12:f8:bb:07: 03:b8:8b:3c:ff:4e:e8:71:5d:4c:5f:26:fb:78:57:b1:54:a9: d1:d9:11:1d:d9:4d:9b:8c:2a:22:d2:c8:1e:84:65:65:c1:8c: 5d:4a:ae:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Cugxn8SANJz+MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NDdiNTFmYTMtYWNiNC00ODM1LWI0YjItYmY3OGUyN2FlZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPETkVL7dZiMHHepeK7uAorVvu4h5iaPUgvd gkYIqCClssX6wAqOD118zVrE2wE+9zbA8mGezQTgyn+H0yLFRHqZ1Ai6YEjGqr3C 0syRsYosUJ8CR94u4qcdpQsTFmlALpo9SIuOEZ3BKG0rTNlgOLpIYmN+KzLGOmai sTjtfMnnu3+oVGFEiE2kch3rmqdh8QQM30UUzsKJNefreU59WToMiivcJyrJiht4 S+PbraPPfF48/nX662hh4FYnWAMeQed1HJSOpbVuD/fF3h75mb+iiS9M4HhjATk3 knFZUCfVk3iriR2ZTlMV+rY6KCshyIK4Pk/sYMkZmxFWTPrpBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGmRu26/7f0kdJ1qCa/9z6D8Mj2GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTkxMmYwYzktYzI0ZS0z MjY3LWFhZDEtMmZlZmJhZjRiZjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgoncMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyJSt6ZXvjFV62WXNoYTCb5iDnAQnNBAUEWhYJ4MXXfZIyVYXdXyuL/ l5rWLsI2ATyt/ZITL+f3Rpp/tpg0iCRIa45xAQEmab5H864XIcUlRplazJoKB/wI tRbnPgPLFfm8X9aZOxRcBCcsLOSX13TwzetA0c3VxArLyyHHsFs8GPHQNH3LT8du lFqRv10NZszllKI599DCm6zAFDjoAwjVfR5H3mn29+UBy0am9I3WMuWfdgchpKzp eDfZxV9u8oOg0qxlelZ28mI3hGucFkQKbGg1Evi7BwO4izz/TuhxXUxfJvt4V7FU qdHZER3ZTZuMKiLSyB6EZWXBjF1Krlw= -----END CERTIFICATE-----Generated at Fri Apr 4 23:24:25 2025 by rpki-client