$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa File: cd5a3695-dc79-32b2-b279-0651d13c045f.roa (raw, json) Hash identifier: jL62PvK8QUDqtmYOAUlfgqMC9MXNLTtBgbS0n9kDXjU= Subject key identifier: 19:6F:84:28:4F:17:9C:91:20:F5:F5:EA:EB:B7:6E:7D:28:F5:D6:3F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC26CD58FB015E6EF80E00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 16509 IP address blocks: 130.137.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:26:cd:58:fb:01:5e:6e:f8:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=1e9f3ad7-bb9d-42bc-a1bd-cde3de613e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:56:6f:12:8e:97:48:da:13:67:e0:e4:48:6b: 05:c5:7b:da:d2:01:43:9f:57:c3:4b:6b:b6:9c:20: 98:b4:b6:68:f6:5d:b9:2c:51:99:b6:fe:df:11:a2: 2f:ca:f7:1a:12:73:ca:b0:12:56:ab:85:61:bc:b9: 65:07:8c:ed:95:ea:90:ed:44:8b:18:51:5a:8a:dc: ee:89:37:a5:a1:8c:36:b9:90:01:f8:d3:99:c1:31: 8d:96:92:f2:77:34:e3:72:03:b3:c1:cf:c2:28:e8: 4c:b1:2c:88:61:d3:79:99:b2:94:ce:a7:01:7a:cc: 1e:8d:f7:9e:e6:43:94:a3:2c:67:e4:2a:37:7a:73: 61:2b:65:77:14:8d:d6:7d:a1:3e:ab:43:26:3a:7c: c3:fd:11:e6:1e:0c:e3:78:20:b9:8d:9d:71:27:6a: ec:0f:92:eb:af:df:7d:61:2a:4d:07:82:09:86:da: 27:00:c1:65:c4:ce:51:45:66:a5:64:34:1b:87:58: ac:e3:bc:6e:7b:3d:9d:68:d8:b4:5c:bc:e5:cc:43: c1:9d:35:1c:54:d3:30:5a:52:ef:ef:90:a0:c5:7d: 98:f9:e1:43:e3:a0:81:9b:5f:a1:a4:e6:b1:36:c9: aa:4a:19:b7:14:d0:b8:9c:0e:15:ee:55:c9:d4:05: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:6F:84:28:4F:17:9C:91:20:F5:F5:EA:EB:B7:6E:7D:28:F5:D6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/cd5a3695-dc79-32b2-b279-0651d13c045f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:63:8d:c7:f8:ef:3a:48:3d:2c:6d:96:7b:e4:db:7f:7c:88: 2d:81:03:0d:6d:5e:52:8b:00:cc:d1:98:43:8a:3f:20:7a:10: 78:5d:d3:b1:54:13:ec:f1:bc:ee:57:6f:5f:bd:d0:a6:9d:b3: 63:94:3c:b9:46:f1:60:dd:c8:75:56:3d:47:35:7d:86:d0:7d: ed:7e:03:c3:ba:51:c0:92:ee:d5:35:8b:f7:7a:dd:9c:94:e4: 20:3f:6d:03:1a:09:c4:a9:74:4d:f1:39:c7:87:1b:7f:af:10: a4:8b:19:ab:7a:d9:b0:69:c0:fc:42:7a:18:c6:d1:1e:9e:4e: 40:60:ae:f0:fc:b2:1c:bb:38:59:51:15:46:25:c4:2a:a1:e3: 6a:6a:a7:56:c2:a8:9c:ee:48:94:85:c5:82:b3:a8:cf:53:4e: 16:b4:0c:68:85:bc:5f:6e:a1:d3:e0:1b:d2:48:a3:82:09:99: 8e:1a:24:a3:0d:1b:51:04:ac:40:d1:d3:ba:e0:32:c1:7c:0a: ad:25:c5:42:45:c3:8f:04:80:33:4a:db:ff:63:be:2a:fa:e6: b8:be:f8:cb:97:4a:65:95:f1:60:88:ac:55:aa:a1:20:a7:c0: 47:cb:65:77:bc:64:22:2e:1b:34:b8:6e:d3:2e:8b:1e:27:4b: 0d:34:63:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CbNWPsBXm74DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk MWU5ZjNhZDctYmI5ZC00MmJjLWExYmQtY2RlM2RlNjEzZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVZvEo6XSNoTZ+DkSGsFxXva0gFDn1fDS2u2 nCCYtLZo9l25LFGZtv7fEaIvyvcaEnPKsBJWq4VhvLllB4ztleqQ7USLGFFaitzu iTeloYw2uZAB+NOZwTGNlpLydzTjcgOzwc/CKOhMsSyIYdN5mbKUzqcBeswejfee 5kOUoyxn5Co3enNhK2V3FI3WfaE+q0MmOnzD/RHmHgzjeCC5jZ1xJ2rsD5Lrr999 YSpNB4IJhtonAMFlxM5RRWalZDQbh1is47xuez2daNi0XLzlzEPBnTUcVNMwWlLv 75CgxX2Y+eFD46CBm1+hpOaxNsmqShm3FNC4nA4V7lXJ1AU0tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBlvhChPF5yRIPX16uu3bn0o9dY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvY2Q1YTM2OTUtZGM3OS0z MmIyLWIyNzktMDY1MWQxM2MwNDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpjjcf47zpIPSxtlnvk2398iC2BAw1tXlKLAMzRmEOKPyB6EHhd07FU E+zxvO5Xb1+90Kads2OUPLlG8WDdyHVWPUc1fYbQfe1+A8O6UcCS7tU1i/d63ZyU 5CA/bQMaCcSpdE3xOceHG3+vEKSLGat62bBpwPxCehjG0R6eTkBgrvD8shy7OFlR FUYlxCqh42pqp1bCqJzuSJSFxYKzqM9TTha0DGiFvF9uodPgG9JIo4IJmY4aJKMN G1EErEDR07rgMsF8Cq0lxUJFw48EgDNK2/9jvir65ri++MuXSmWV8WCIrFWqoSCn wEfLZXe8ZCIuGzS4btMuix4nSw00Y6E= -----END CERTIFICATE-----Generated at Sat Apr 5 10:59:33 2025 by rpki-client