$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc265216-2867-31f5-9a02-dab2253b6477.roa File: cc265216-2867-31f5-9a02-dab2253b6477.roa (raw, json) Hash identifier: V2xxSrTkhWRyDXY0djpWTWkdk52ORFYLbWgih4LO0U4= Subject key identifier: 1D:35:5B:4C:CB:1E:FD:FD:06:25:DC:3D:7C:75:4C:93:85:87:A0:85 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848E9CBDE036A626D16D19F0080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc265216-2867-31f5-9a02-dab2253b6477.roa Signing time: Mon 17 Feb 2025 14:00:52 +0000 ROA not before: Mon 17 Feb 2025 14:00:52 +0000 ROA not after: Sun 18 May 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:e9:cb:de:03:6a:62:6d:16:d1:9f:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 17 14:00:52 2025 GMT Not After : May 18 13:00:52 2025 GMT Subject: CN=0fe5b8bd-d3f9-47e6-afe6-f39790777590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a8:83:32:ad:b7:64:17:42:29:74:d9:47:48: b9:76:1f:a1:98:3b:91:34:9a:87:a5:ed:e7:76:ff: bd:5b:28:47:97:91:4f:1f:74:d4:a5:c0:34:c5:0d: 34:3e:44:07:49:fd:9c:9c:d5:63:d3:eb:00:cc:96: c0:9b:98:12:91:99:7f:de:eb:26:e6:50:66:4f:2e: ce:32:a8:5a:da:d3:f4:89:8a:d0:9c:46:fc:cb:14: 3a:5c:79:5b:aa:76:53:61:5e:65:9d:6a:c1:66:59: 92:40:67:fd:51:83:35:3b:b1:a1:cc:93:8e:b2:83: b1:32:0c:ee:7a:67:0c:1e:7d:26:10:10:25:45:ab: 87:e5:04:28:fe:40:72:de:76:54:35:d7:33:55:6a: 00:01:7c:e9:5f:2e:21:21:f8:d3:69:f3:55:5a:91: 44:23:a4:bc:47:35:88:40:69:c7:42:e3:bc:4b:2e: 22:96:20:d4:f1:ea:6b:ef:59:2f:78:8e:fb:57:2d: 47:28:49:10:93:9a:e9:c8:ab:a7:5a:f2:87:ad:ba: 9c:77:d9:77:0e:e5:fd:69:fc:4a:ab:71:29:2a:23: 84:ad:b8:c6:19:f5:e1:5d:ea:f6:99:38:51:1c:2c: 0a:5f:ae:cd:f1:27:f3:e7:c3:be:d2:19:b8:d8:0a: 6b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:35:5B:4C:CB:1E:FD:FD:06:25:DC:3D:7C:75:4C:93:85:87:A0:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc265216-2867-31f5-9a02-dab2253b6477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:2c:61:20:7d:32:62:62:27:68:3b:1b:71:69:dc:40:0d:8b: c0:0b:ed:54:70:a6:fb:ff:67:f5:8a:69:5d:7d:89:8a:cb:01: 36:a6:a4:36:58:7d:6e:18:d8:ac:4a:09:32:db:17:c4:a2:35: 39:77:87:39:ce:91:e2:96:be:0d:83:7e:59:f0:23:3d:97:a5: 51:28:29:2a:93:10:31:03:cf:ad:d2:7c:78:cd:bc:79:ab:54: 34:97:27:79:eb:9a:46:94:42:c9:dd:eb:19:f5:57:b8:7e:8b: 73:90:af:f5:1d:89:42:89:34:86:f3:00:22:fe:cd:58:6c:f8: a6:e7:b1:89:f9:4e:92:fb:0b:4a:27:7c:91:3e:5b:90:bc:60: 95:a4:45:01:0f:72:41:0d:70:c3:68:32:ff:dc:ed:f7:56:77: 2f:73:dd:52:ee:e4:c9:84:61:0d:bd:1c:e7:59:b2:bd:a7:c1: 75:6a:09:b0:90:cc:34:40:ec:de:45:49:1a:3d:68:0c:2f:48: de:f0:9c:ef:e8:9e:2e:4c:07:71:02:4b:b9:35:65:28:76:ae: 41:10:9c:47:69:fc:15:b3:36:ce:99:ca:22:21:9f:55:0a:6f: 8c:5d:9a:15:5b:8d:14:ce:4d:1e:91:6a:45:f0:a7:44:fd:37: 63:9d:52:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjpy94DamJtFtGfAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIxNzE0MDA1MloXDTI1MDUxODEzMDA1MlowLzEtMCsGA1UEAxMk MGZlNWI4YmQtZDNmOS00N2U2LWFmZTYtZjM5NzkwNzc3NTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqiDMq23ZBdCKXTZR0i5dh+hmDuRNJqHpe3n dv+9WyhHl5FPH3TUpcA0xQ00PkQHSf2cnNVj0+sAzJbAm5gSkZl/3usm5lBmTy7O Mqha2tP0iYrQnEb8yxQ6XHlbqnZTYV5lnWrBZlmSQGf9UYM1O7GhzJOOsoOxMgzu emcMHn0mEBAlRauH5QQo/kBy3nZUNdczVWoAAXzpXy4hIfjTafNVWpFEI6S8RzWI QGnHQuO8Sy4iliDU8epr71kveI77Vy1HKEkQk5rpyKunWvKHrbqcd9l3DuX9afxK q3EpKiOErbjGGfXhXer2mThRHCwKX67N8Sfz58O+0hm42AprfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB01W0zLHv39BiXcPXx1TJOFh6CFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2MyNjUyMTYtMjg2Ny0z MWY1LTlhMDItZGFiMjI1M2I2NDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHUsYSB9MmJiJ2g7G3Fp3EANi8AL7VRwpvv/Z/WKaV19iYrLATampDZY fW4Y2KxKCTLbF8SiNTl3hznOkeKWvg2DflnwIz2XpVEoKSqTEDEDz63SfHjNvHmr VDSXJ3nrmkaUQsnd6xn1V7h+i3OQr/UdiUKJNIbzACL+zVhs+KbnsYn5TpL7C0on fJE+W5C8YJWkRQEPckENcMNoMv/c7fdWdy9z3VLu5MmEYQ29HOdZsr2nwXVqCbCQ zDRA7N5FSRo9aAwvSN7wnO/oni5MB3ECS7k1ZSh2rkEQnEdp/BWzNs6ZyiIhn1UK b4xdmhVbjRTOTR6RakXwp0T9N2OdUvk= -----END CERTIFICATE-----Generated at Fri Mar 14 08:39:16 2025 by rpki-client