$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa File: b8891b9b-22d6-354f-9592-c7a2be892635.roa (raw, json) Hash identifier: /+Bj0pzRX5U4b4XfPRK7Q4eKIe5VSHlsXxNjuESfbDA= Subject key identifier: C4:B7:3E:6B:64:89:2D:50:92:57:78:7F:33:51:9C:E4:B8:96:1E:1F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848E9CBD18C0A3136E88A6EA348 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d1:8c:0a:31:36:e8:8a:6e:a3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=6893057a-132f-43fc-8927-6c0d011d5bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:0f:40:c2:90:86:bf:e7:58:ea:b3:3f:a8:16: d3:fe:4b:e3:dc:d9:a2:4b:16:7c:eb:77:f5:d2:63: 10:b7:7f:dc:8d:7c:92:fb:7e:85:4d:d9:79:f6:cb: 4d:53:2e:94:03:39:fe:99:88:5c:4f:7d:27:67:1c: 8f:94:10:b1:e3:3f:51:dd:9e:5c:aa:50:53:50:88: 66:f0:c0:80:ab:e7:c1:ac:dd:20:d9:61:48:f1:a9: 01:47:d2:02:87:ea:07:f0:e2:95:b7:c7:ad:f6:aa: dc:1b:44:70:44:5f:88:62:ad:55:55:40:f3:5f:5d: d6:b9:5a:3f:ab:37:c4:e6:c6:4c:69:82:78:66:0d: 0e:31:bb:42:a3:74:55:1b:22:05:6f:ee:da:00:ce: f8:ef:84:28:47:62:89:70:89:92:ea:d1:db:dd:16: d0:4e:7e:c9:c5:2f:04:d2:70:df:28:03:98:e8:a2: 1c:d2:22:8a:40:d9:75:44:57:a6:a9:db:ff:d5:4b: 59:38:46:a0:c3:88:07:c2:56:12:37:a3:f1:21:8f: 09:4b:bb:54:3b:5f:ad:94:52:7d:46:70:ed:7d:68: f4:0e:c0:67:0e:52:f2:78:ae:32:45:5b:21:5a:d3: 46:89:44:f3:5a:62:55:dc:73:c8:54:fc:b2:b3:2f: 2e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:3E:6B:64:89:2D:50:92:57:78:7F:33:51:9C:E4:B8:96:1E:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8891b9b-22d6-354f-9592-c7a2be892635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:7a:ff:26:cb:85:d0:9e:2a:bc:ac:14:ae:cd:1c:b4:46:78: 8d:08:ad:36:9b:a4:68:20:a8:33:93:dd:67:31:57:56:25:99: e9:a0:45:54:52:a5:17:57:e1:6b:5a:fd:b2:60:9d:bd:84:3d: da:dd:a3:37:66:05:6f:96:04:8c:2e:7a:b8:c2:43:20:8b:9b: 6b:90:b8:5a:8f:20:b9:30:f6:38:93:d4:e6:d6:00:50:0a:90: 3f:f6:8d:cb:c3:d3:2a:89:72:bc:c8:9a:ca:cd:17:59:14:15: 1f:10:0b:d0:3f:19:39:b5:ca:22:8c:59:fc:21:0d:12:ea:1d: 0a:77:36:27:7b:ce:c2:a9:be:5c:f2:29:af:96:28:cb:71:89: 70:06:72:40:fe:6e:11:92:52:b4:13:b7:2c:52:b6:76:09:76: cb:e0:ec:0f:c5:8a:43:17:aa:f9:06:91:89:f2:f7:02:ec:8f: b4:fa:3b:8d:c9:dd:17:1e:12:96:37:7d:f2:96:30:cc:c6:83: 26:8f:b4:bd:d6:c7:1b:ed:c1:18:55:03:4b:ac:d0:87:80:ef: 64:32:21:8b:87:45:98:d4:d7:1e:30:9a:f9:4b:08:e5:2d:c8: fd:d7:9e:2a:cc:cd:f8:fc:fc:2b:9b:17:16:75:16:21:91:d4: b9:3d:ce:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9GMCjE26Ipuo0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk Njg5MzA1N2EtMTMyZi00M2ZjLTg5MjctNmMwZDAxMWQ1YmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA9AwpCGv+dY6rM/qBbT/kvj3NmiSxZ863f1 0mMQt3/cjXyS+36FTdl59stNUy6UAzn+mYhcT30nZxyPlBCx4z9R3Z5cqlBTUIhm 8MCAq+fBrN0g2WFI8akBR9ICh+oH8OKVt8et9qrcG0RwRF+IYq1VVUDzX13WuVo/ qzfE5sZMaYJ4Zg0OMbtCo3RVGyIFb+7aAM7474QoR2KJcImS6tHb3RbQTn7JxS8E 0nDfKAOY6KIc0iKKQNl1RFemqdv/1UtZOEagw4gHwlYSN6PxIY8JS7tUO1+tlFJ9 RnDtfWj0DsBnDlLyeK4yRVshWtNGiUTzWmJV3HPIVPyysy8umwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS3PmtkiS1Qkld4fzNRnOS4lh4fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg4OTFiOWItMjJkNi0z NTRmLTk1OTItYzdhMmJlODkyNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJ6/ybLhdCeKrysFK7NHLRGeI0IrTabpGggqDOT3WcxV1YlmemgRVRS pRdX4Wta/bJgnb2EPdrdozdmBW+WBIwuerjCQyCLm2uQuFqPILkw9jiT1ObWAFAK kD/2jcvD0yqJcrzImsrNF1kUFR8QC9A/GTm1yiKMWfwhDRLqHQp3Nid7zsKpvlzy Ka+WKMtxiXAGckD+bhGSUrQTtyxStnYJdsvg7A/FikMXqvkGkYny9wLsj7T6O43J 3RceEpY3ffKWMMzGgyaPtL3WxxvtwRhVA0us0IeA72QyIYuHRZjU1x4wmvlLCOUt yP3XnirMzfj8/CubFxZ1FiGR1Lk9zrU= -----END CERTIFICATE-----Generated at Sat Apr 5 11:05:21 2025 by rpki-client