$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa File: d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa (raw, json) Hash identifier: jqgwuGKN/Wm/FyFzVFrXHb9T5PTeuheDp4+yvPGlCIU= Subject key identifier: 90:AE:2B:9E:CF:E3:FA:6C:7B:59:FC:AC:D4:99:F1:C1:88:5E:3D:99 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584908816E3D77EB585E702AEC20 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa Signing time: Fri 28 Feb 2025 14:00:52 +0000 ROA not before: Fri 28 Feb 2025 14:00:52 +0000 ROA not after: Thu 29 May 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:08:81:6e:3d:77:eb:58:5e:70:2a:ec:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 28 14:00:52 2025 GMT Not After : May 29 13:00:52 2025 GMT Subject: CN=8fe229b1-8cac-4103-aedf-9095af59b29f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:94:a4:94:f7:7b:11:a8:e6:ed:34:d8:9b:19: cc:a9:1f:ae:c6:98:81:e6:f2:c3:2b:52:b3:7c:bc: e3:f6:4e:1e:65:19:11:2f:f0:98:f8:c3:92:2a:6d: 40:57:19:f3:cd:8d:59:6f:0a:1e:73:7d:f0:54:b9: 03:c7:70:ab:90:4e:da:3d:0f:cf:29:66:df:4d:d8: 22:7a:7b:d4:43:8d:44:3e:10:f5:88:7d:25:da:73: c4:e9:8e:20:38:ce:fa:4d:2b:84:e6:75:c2:9a:69: 24:e6:53:6c:cc:1c:f0:65:0a:62:41:c8:2f:6c:86: a2:6e:ba:2f:8b:7f:25:02:d5:92:62:da:d9:4a:88: 3a:ae:35:27:1d:39:64:25:ef:3e:fe:1c:2c:af:0c: 93:da:c5:87:65:eb:d4:26:86:b2:0a:cb:8d:39:ff: fb:aa:d9:bd:93:23:ba:f2:b8:bd:d1:36:07:e8:35: ca:28:c0:4c:32:e6:29:ec:67:fb:3f:b8:91:9a:f4: d5:46:18:f8:53:1f:10:6a:b3:96:7c:91:09:05:af: b9:fc:b6:e6:ca:48:ba:c0:15:a6:78:f5:c7:95:65: 87:58:fd:fe:4e:19:d4:99:19:ec:0c:62:9f:c4:69: 7b:3d:91:66:bf:52:cf:03:a4:da:3b:1e:3a:94:22: e3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AE:2B:9E:CF:E3:FA:6C:7B:59:FC:AC:D4:99:F1:C1:88:5E:3D:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d09a0e7b-61b3-33c0-b5d6-28b5300e6c6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.115.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:ed:5c:fd:cb:0e:07:c5:7e:a0:3c:ad:68:2a:56:00:0a:09: a5:78:84:79:8a:d8:7f:ed:b9:c4:af:6c:5f:9d:f4:bc:b0:86: e8:ee:b4:a5:05:2e:89:3e:29:b8:54:0f:c7:5b:04:55:21:54: 24:a7:55:3b:b6:ec:63:4a:9b:74:27:f7:06:88:9f:27:30:77: ac:d3:75:1c:a1:93:95:c8:64:1b:e1:de:2d:99:32:8a:bf:68: 15:36:c5:96:73:94:53:98:2a:0c:50:ed:a2:43:22:e7:42:95: 7f:53:f3:e3:17:54:51:d7:1c:7c:74:b8:29:99:dc:21:b3:41: bc:db:4c:d6:a2:8b:ea:87:13:ea:2d:fc:86:1f:b6:7d:a9:e4: 4b:9b:2f:61:41:29:e5:07:c9:e0:72:19:ed:26:ca:01:66:05: d3:f3:13:d9:c8:f2:95:a3:31:63:ea:68:9d:b4:bd:4f:15:4b: 7f:16:bb:52:02:4a:08:2a:17:72:be:e0:c5:bc:74:d5:c6:2d: ad:5a:d4:71:d6:e8:06:e2:d5:10:ad:3c:d2:b7:22:d4:2f:4e: 7a:47:b7:f2:59:f4:b5:cd:b7:74:3b:85:43:0e:c3:f3:08:22: 9f:da:0b:86:72:f2:86:d9:cf:3f:5d:fd:99:a7:33:d3:dc:41: ed:64:9b:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgW49d+tYXnAq7CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk OGZlMjI5YjEtOGNhYy00MTAzLWFlZGYtOTA5NWFmNTliMjlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopSklPd7Eajm7TTYmxnMqR+uxpiB5vLDK1Kz fLzj9k4eZRkRL/CY+MOSKm1AVxnzzY1Zbwoec33wVLkDx3CrkE7aPQ/PKWbfTdgi envUQ41EPhD1iH0l2nPE6Y4gOM76TSuE5nXCmmkk5lNszBzwZQpiQcgvbIaibrov i38lAtWSYtrZSog6rjUnHTlkJe8+/hwsrwyT2sWHZevUJoayCsuNOf/7qtm9kyO6 8ri90TYH6DXKKMBMMuYp7Gf7P7iRmvTVRhj4Ux8QarOWfJEJBa+5/Lbmyki6wBWm ePXHlWWHWP3+ThnUmRnsDGKfxGl7PZFmv1LPA6TaOx46lCLjSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCuK57P4/pse1n8rNSZ8cGIXj2ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDA5YTBlN2ItNjFiMy0z M2MwLWI1ZDYtMjhiNTMwMGU2YzZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADztXP3LDgfFfqA8rWgqVgAKCaV4hHmK2H/tucSvbF+d9LywhujutKUF Lok+KbhUD8dbBFUhVCSnVTu27GNKm3Qn9waInycwd6zTdRyhk5XIZBvh3i2ZMoq/ aBU2xZZzlFOYKgxQ7aJDIudClX9T8+MXVFHXHHx0uCmZ3CGzQbzbTNaii+qHE+ot /IYftn2p5EubL2FBKeUHyeByGe0mygFmBdPzE9nI8pWjMWPqaJ20vU8VS38Wu1IC SggqF3K+4MW8dNXGLa1a1HHW6Abi1RCtPNK3ItQvTnpHt/JZ9LXNt3Q7hUMOw/MI Ip/aC4Zy8obZzz9d/ZmnM9PcQe1km64= -----END CERTIFICATE-----Generated at Fri Mar 14 09:30:23 2025 by rpki-client