$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc0f2296-226d-35b2-8fc9-9dbad325ca42.roa File: cc0f2296-226d-35b2-8fc9-9dbad325ca42.roa (raw, json) Hash identifier: +sQ8R+2xl991rFgU8KKJTGqabd7hpaV09/X5yUsE4m0= Subject key identifier: 5B:DB:85:1C:DF:85:75:10:E9:80:AB:2A:93:04:89:56:EA:99:DD:44 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848E9CBD1A2D7BBBF833A97BE00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc0f2296-226d-35b2-8fc9-9dbad325ca42.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:d1:a2:d7:bb:bf:83:3a:97:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=662e38c1-8d0f-434b-9e2e-12df431da5be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e0:14:fd:d2:87:6c:01:81:e5:6d:85:d4:36: cd:5e:ec:26:0f:02:e1:3a:e1:72:7f:a4:75:2b:8b: e5:19:8d:f3:4b:35:a7:e5:78:7d:95:a1:11:17:72: af:2c:0a:1c:45:dc:00:d4:4e:70:c9:31:54:3b:9d: 42:1e:56:f1:c6:5d:95:e2:ee:64:0f:1a:7d:7d:89: f6:b7:32:16:d8:b4:df:82:b5:af:c1:a0:23:e2:f6: 44:da:82:77:83:6d:69:58:3a:9d:d4:2c:b7:b9:ed: ed:ca:43:0e:f1:a7:d4:11:c6:49:01:74:8b:a5:0c: d1:0a:ad:10:42:fc:d7:65:b0:df:9e:cc:ec:b6:5e: d3:da:4a:dd:da:db:03:e2:07:4b:00:70:c4:c6:5a: da:4d:47:aa:7c:d4:49:66:4d:f6:71:d0:e6:94:3e: 50:aa:91:74:b6:d1:66:c0:b0:ba:dd:1a:cb:f3:25: 3c:93:77:c7:36:17:b9:de:17:6e:9d:c2:17:af:58: da:60:d9:c4:0b:f7:6f:b0:6e:e6:f0:65:21:0d:bf: 5a:bc:54:d5:95:02:37:4b:a3:a0:c8:25:3f:1b:1c: b2:de:b3:9d:6a:0e:dd:d4:a4:e7:83:69:7d:52:43: ee:1d:14:68:5f:70:b8:85:37:ec:74:f9:37:30:5b: 35:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:DB:85:1C:DF:85:75:10:E9:80:AB:2A:93:04:89:56:EA:99:DD:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc0f2296-226d-35b2-8fc9-9dbad325ca42.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7f:9f:a6:06:65:21:da:54:a7:80:53:9b:d0:3c:80:f9:b4: 2a:07:63:55:c3:f6:24:29:b9:84:46:83:f0:79:61:29:85:d3: 00:e5:f1:ae:44:1d:87:c2:24:ae:29:23:a3:41:d8:90:9a:1c: 38:b3:fa:f2:19:04:7d:66:40:2d:16:c8:7a:7c:b4:bf:c4:0e: 8c:84:59:12:78:08:bf:a5:73:29:d3:a5:da:b0:f8:75:7f:75: 96:31:ac:a7:a9:df:e2:d3:3e:29:8e:45:9a:6b:45:f6:54:e8: 77:0b:10:87:4f:97:9a:f0:1d:7c:87:09:5d:4b:53:44:04:cc: f1:5b:72:b1:f3:f6:94:f0:9e:d1:88:f0:2e:ea:a7:bc:3a:07: f9:71:66:df:4f:a7:8a:9a:3c:d5:bc:70:01:62:fa:52:79:8e: 42:47:4d:e8:80:d6:93:80:e9:cc:d3:fb:d7:71:4a:9e:e1:55: a1:64:b4:fc:7d:1a:b6:85:07:c3:85:64:71:db:1b:3a:67:a2: b6:40:a4:8b:e3:5d:16:4e:e6:2c:ee:87:6b:b7:e8:f5:3b:93: 40:92:bd:df:a4:21:23:db:70:0c:f0:9e:52:03:c3:d0:00:12: 0b:e2:ed:84:64:55:9c:78:75:c9:92:0f:8b:20:05:5d:29:81: 90:2f:ca:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy9Gi17u/gzqXvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk NjYyZTM4YzEtOGQwZi00MzRiLTllMmUtMTJkZjQzMWRhNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOAU/dKHbAGB5W2F1DbNXuwmDwLhOuFyf6R1 K4vlGY3zSzWn5Xh9laERF3KvLAocRdwA1E5wyTFUO51CHlbxxl2V4u5kDxp9fYn2 tzIW2LTfgrWvwaAj4vZE2oJ3g21pWDqd1Cy3ue3tykMO8afUEcZJAXSLpQzRCq0Q QvzXZbDfnszstl7T2krd2tsD4gdLAHDExlraTUeqfNRJZk32cdDmlD5QqpF0ttFm wLC63RrL8yU8k3fHNhe53hduncIXr1jaYNnEC/dvsG7m8GUhDb9avFTVlQI3S6Og yCU/Gxyy3rOdag7d1KTng2l9UkPuHRRoX3C4hTfsdPk3MFs17QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvbhRzfhXUQ6YCrKpMEiVbqmd1EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2MwZjIyOTYtMjI2ZC0z NWIyLThmYzktOWRiYWQzMjVjYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt/n6YGZSHaVKeAU5vQPID5tCoHY1XD9iQpuYRGg/B5YSmF0wDl8a5E HYfCJK4pI6NB2JCaHDiz+vIZBH1mQC0WyHp8tL/EDoyEWRJ4CL+lcynTpdqw+HV/ dZYxrKep3+LTPimORZprRfZU6HcLEIdPl5rwHXyHCV1LU0QEzPFbcrHz9pTwntGI 8C7qp7w6B/lxZt9Pp4qaPNW8cAFi+lJ5jkJHTeiA1pOA6czT+9dxSp7hVaFktPx9 GraFB8OFZHHbGzpnorZApIvjXRZO5izuh2u36PU7k0CSvd+kISPbcAzwnlIDw9AA Egvi7YRkVZx4dcmSD4sgBV0pgZAvyvE= -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:28 2025 by rpki-client