$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa File: cc783676-ac32-3508-b08e-796366c4c85b.roa (raw, json) Hash identifier: Ifa9/MiluDZliS+s4ZZgTY22h0Indc9OpVpYJmEgyfk= Subject key identifier: 04:B4:A8:5E:FF:6B:04:E2:44:E7:B6:4F:B7:35:1C:DB:89:E6:7D:7F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B49BECE1FD0FCBE1EC80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b4:9b:ec:e1:fd:0f:cb:e1:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=85fa8ad4-914d-4b57-a17a-2550fbdc992d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3c:7f:17:86:44:aa:0c:5b:0d:02:28:7e:95: 44:b0:b7:b5:e9:bd:cf:80:28:12:ef:b6:d5:50:e4: 77:b4:d6:7f:a3:3a:69:2e:62:30:99:50:b7:d1:ba: 1c:12:c2:62:16:fc:2d:29:7a:8e:f9:fb:4e:ab:46: 45:4d:c7:b5:2a:63:32:56:89:bd:01:c0:bc:de:14: 8a:d4:8b:e1:33:69:e3:e6:88:f4:c5:6e:36:de:af: 43:af:07:70:cc:c9:0d:80:3d:24:08:41:89:63:38: 95:de:0b:3a:2f:68:7f:40:be:6e:b1:c6:49:da:fd: 49:ae:df:bf:6d:34:8e:5d:13:b5:15:56:af:cf:96: d4:fa:57:df:22:b5:fd:b1:2c:da:79:b1:c5:88:00: 03:50:b6:c4:c6:1c:fc:ab:cc:dc:88:b6:ba:2a:e2: c5:92:8b:e7:9d:bf:f0:b7:cd:52:4b:d9:94:6f:f7: 3c:8f:a8:61:aa:71:9d:04:e5:a2:ed:73:d0:9a:52: e2:1c:a8:7d:8d:a4:4e:0a:51:ec:f8:6c:b4:bf:65: e1:56:55:a6:48:0e:dd:31:be:a6:38:6f:d9:36:08: d3:30:e8:1c:8b:f8:eb:a5:84:61:a6:f4:60:98:12: 27:43:f3:de:28:eb:9a:35:42:7b:c4:23:ae:39:0b: 53:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B4:A8:5E:FF:6B:04:E2:44:E7:B6:4F:B7:35:1C:DB:89:E6:7D:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cc783676-ac32-3508-b08e-796366c4c85b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:35:e4:22:85:29:bb:68:fe:dc:41:b5:5d:30:ba:5a:84:d5: 4c:5d:66:ef:ed:9e:48:94:6c:99:24:78:20:b6:28:08:d7:78: 99:a8:35:cd:10:31:e8:51:f2:56:08:b9:be:a0:df:c4:0f:9b: 25:ab:87:f1:f6:f9:6e:73:5e:e2:9c:3a:41:e7:9b:c8:28:53: 26:67:b3:19:6b:1d:62:7d:fd:0e:76:34:03:22:ec:04:9f:43: bb:d9:1a:ce:6a:f3:b3:9b:a6:7f:b6:33:a8:ae:cc:1f:a0:c2: 06:b5:bf:5e:ff:bb:1f:9c:0c:20:24:9d:97:37:b9:8a:10:d1: ef:f1:b8:c1:18:33:77:11:90:1d:d5:a1:02:3d:73:c8:ba:df: 5a:0e:62:9b:90:2c:cf:2d:59:69:d0:c9:c9:32:61:b6:ae:f1: 06:f3:45:72:74:d0:5e:d1:77:21:9c:d2:0c:a2:bc:20:fd:80: 8e:d8:29:b8:ba:1c:f5:f5:01:3c:83:69:48:4d:a0:14:58:a5: 6e:e4:bc:f6:7a:9a:c5:36:89:ed:c2:a7:bf:93:ec:3c:8c:1e: 16:ee:7c:cd:66:4a:b0:91:89:c3:39:3b:38:39:72:2b:d6:fe: 91:b8:1d:5d:c8:b6:c4:44:08:a4:4b:e4:cd:ce:13:de:62:d2: 16:1f:b4:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprSb7OH9D8vh7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ODVmYThhZDQtOTE0ZC00YjU3LWExN2EtMjU1MGZiZGM5OTJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzx/F4ZEqgxbDQIofpVEsLe16b3PgCgS77bV UOR3tNZ/ozppLmIwmVC30bocEsJiFvwtKXqO+ftOq0ZFTce1KmMyVom9AcC83hSK 1IvhM2nj5oj0xW423q9DrwdwzMkNgD0kCEGJYziV3gs6L2h/QL5uscZJ2v1Jrt+/ bTSOXRO1FVavz5bU+lffIrX9sSzaebHFiAADULbExhz8q8zciLa6KuLFkovnnb/w t81SS9mUb/c8j6hhqnGdBOWi7XPQmlLiHKh9jaROClHs+Gy0v2XhVlWmSA7dMb6m OG/ZNgjTMOgci/jrpYRhpvRgmBInQ/PeKOuaNUJ7xCOuOQtT0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS0qF7/awTiROe2T7c1HNuJ5n1/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2M3ODM2NzYtYWMzMi0z NTA4LWIwOGUtNzk2MzY2YzRjODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE15CKFKbto/txBtV0wulqE1UxdZu/tnkiUbJkkeCC2KAjXeJmoNc0Q MehR8lYIub6g38QPmyWrh/H2+W5zXuKcOkHnm8goUyZnsxlrHWJ9/Q52NAMi7ASf Q7vZGs5q87Obpn+2M6iuzB+gwga1v17/ux+cDCAknZc3uYoQ0e/xuMEYM3cRkB3V oQI9c8i631oOYpuQLM8tWWnQyckyYbau8QbzRXJ00F7RdyGc0gyivCD9gI7YKbi6 HPX1ATyDaUhNoBRYpW7kvPZ6msU2ie3Cp7+T7DyMHhbufM1mSrCRicM5Ozg5civW /pG4HV3ItsRECKRL5M3OE95i0hYftCY= -----END CERTIFICATE-----Generated at Fri Mar 14 08:44:45 2025 by rpki-client