$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa File: b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa (raw, json) Hash identifier: I5Y7/1IHgo0C0E+D6NH/ovEtCJ2ARzqPSDaFj+E2qtw= Subject key identifier: 23:D2:CD:6A:10:61:CE:84:FC:92:7E:53:89:D1:19:95:18:2A:E0:AF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B7F2D523248DC1BFB000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b7:f2:d5:23:24:8d:c1:bf:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=24bf4645-77dc-4c34-861f-578100c94383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:77:db:c7:7c:2f:c1:0b:20:b7:93:f7:83:e6: 22:3f:ae:bb:13:48:6a:4b:26:16:26:0f:88:61:14: fd:5e:f0:ea:cf:de:31:ff:29:14:39:92:09:8f:7c: ba:87:cc:90:b9:cf:7e:23:83:cc:09:13:ec:6d:bf: 65:4f:af:be:83:02:dc:e3:b8:9e:01:5d:28:8e:0c: ad:8d:d0:35:0c:d0:89:33:9c:d3:2e:f2:fc:73:b9: 5a:5d:c5:cc:22:c1:94:e9:65:a6:a8:97:83:32:90: 68:ee:96:4f:00:9a:1a:6e:33:fb:5c:69:df:91:a5: 4c:89:0f:89:b9:56:6a:ad:0d:93:9c:43:cf:fd:c2: b7:20:2e:39:73:b2:b0:a9:c3:2c:7e:73:37:1d:4b: f9:34:31:52:ea:98:4c:a1:91:a0:c8:c5:cd:27:be: 21:69:c8:b8:a5:e6:2b:5f:5d:fc:19:f5:8c:f5:84: 67:e2:36:b9:5f:d7:c1:6e:95:99:b5:6e:c0:00:50: 88:b5:37:77:b8:3b:15:8d:91:f3:1d:ba:d1:9b:bb: 3a:4e:c5:b2:b2:be:13:89:54:fd:fe:ea:6c:1b:07: ea:7d:9b:2c:58:55:4c:14:60:d7:8f:de:96:97:69: 3c:b6:99:70:30:28:23:0a:97:9a:60:37:af:4c:95: cb:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D2:CD:6A:10:61:CE:84:FC:92:7E:53:89:D1:19:95:18:2A:E0:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b4bf9041-3f22-35a7-aab0-81a4a45e68d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:91:0e:66:9e:54:3b:bd:d4:c5:a1:ea:84:c7:6c:93:cb:e3: 2d:22:54:41:a4:eb:7d:9e:25:3c:01:66:1e:ab:90:e5:ec:1e: 3d:20:a3:ed:07:a4:92:ab:7e:ff:21:f9:66:8c:fe:49:e9:ad: dd:c9:6c:76:2e:1f:2c:63:45:6f:d6:e1:d1:8c:2c:21:e2:6c: 2a:9a:49:e0:92:be:72:54:df:b4:de:57:3f:33:a7:34:d5:fb: c7:a5:3f:74:7c:f0:93:01:c5:70:74:7f:a4:c2:95:d7:ca:61: 69:41:45:4d:6e:76:8c:ea:68:2e:c4:6e:eb:42:98:f1:a6:b9: 29:03:c8:f3:3e:ee:b0:f9:df:76:32:db:36:5a:08:d5:74:86: 6d:35:5f:d4:20:b7:a7:72:cd:91:04:6b:9b:ac:60:2f:fb:24: 6f:b3:ce:49:93:d7:9e:65:f2:d6:40:a1:17:47:20:81:d0:cb: bb:e7:1c:18:5d:96:40:fb:a2:88:fb:d6:db:88:b0:ae:3d:c6: f9:f3:9c:76:55:a3:de:71:aa:8e:28:16:86:db:1c:27:aa:7b: 9f:35:ae:d2:2c:cc:a6:f8:66:af:05:d5:76:a3:85:4c:a1:9d: 1e:e8:4d:7a:1d:82:e7:8a:33:5a:f7:d7:0d:eb:ca:48:c1:13: 09:d7:9b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprfy1SMkjcG/sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk MjRiZjQ2NDUtNzdkYy00YzM0LTg2MWYtNTc4MTAwYzk0MzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHfbx3wvwQsgt5P3g+YiP667E0hqSyYWJg+I YRT9XvDqz94x/ykUOZIJj3y6h8yQuc9+I4PMCRPsbb9lT6++gwLc47ieAV0ojgyt jdA1DNCJM5zTLvL8c7laXcXMIsGU6WWmqJeDMpBo7pZPAJoabjP7XGnfkaVMiQ+J uVZqrQ2TnEPP/cK3IC45c7KwqcMsfnM3HUv5NDFS6phMoZGgyMXNJ74haci4peYr X138GfWM9YRn4ja5X9fBbpWZtW7AAFCItTd3uDsVjZHzHbrRm7s6TsWysr4TiVT9 /upsGwfqfZssWFVMFGDXj96Wl2k8tplwMCgjCpeaYDevTJXLvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCPSzWoQYc6E/JJ+U4nRGZUYKuCvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjRiZjkwNDEtM2YyMi0z NWE3LWFhYjAtODFhNGE0NWU2OGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2RDmaeVDu91MWh6oTHbJPL4y0iVEGk632eJTwBZh6rkOXsHj0go+0H pJKrfv8h+WaM/knprd3JbHYuHyxjRW/W4dGMLCHibCqaSeCSvnJU37TeVz8zpzTV +8elP3R88JMBxXB0f6TCldfKYWlBRU1udozqaC7EbutCmPGmuSkDyPM+7rD533Yy 2zZaCNV0hm01X9Qgt6dyzZEEa5usYC/7JG+zzkmT155l8tZAoRdHIIHQy7vnHBhd lkD7ooj71tuIsK49xvnznHZVo95xqo4oFobbHCeqe581rtIszKb4Zq8F1XajhUyh nR7oTXodgueKM1r31w3rykjBEwnXm6k= -----END CERTIFICATE-----Generated at Fri Mar 14 08:55:07 2025 by rpki-client