$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6c1a4e3-93a7-3760-87c1-ee80c5dbb588.roa File: d6c1a4e3-93a7-3760-87c1-ee80c5dbb588.roa (raw, json) Hash identifier: MD8QFmnbfm37zYYPeIy8RtgVGYaOJvAndXf/Lz1s3Do= Subject key identifier: 17:41:90:5B:EF:C6:B8:10:7E:4B:4E:EA:30:44:6A:FC:9B:89:51:C5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584917DC26C0DA8E004F625DBA00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6c1a4e3-93a7-3760-87c1-ee80c5dbb588.roa Signing time: Thu 06 Mar 2025 02:00:39 +0000 ROA not before: Thu 06 Mar 2025 02:00:39 +0000 ROA not after: Wed 04 Jun 2025 01:00:39 +0000 asID: 14618 IP address blocks: 130.137.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:17:dc:26:c0:da:8e:00:4f:62:5d:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 6 02:00:39 2025 GMT Not After : Jun 4 01:00:39 2025 GMT Subject: CN=6b964d00-3143-4df0-b9e1-5078dd27e604 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:bb:7c:d5:89:e7:df:0c:1f:df:14:67:18:0d: a7:37:98:0e:2b:7e:30:98:7e:66:05:de:7d:98:da: f1:50:2b:ff:40:84:13:9e:58:28:14:dd:24:3a:37: a9:22:c5:3d:c5:48:13:aa:3c:07:43:25:c3:66:3c: f2:07:e0:cb:db:9e:29:96:67:7f:a9:d9:6e:f4:2d: de:7a:c3:98:2e:f3:35:37:c3:c9:e9:43:2b:bd:d5: 51:3a:c4:2b:9a:10:5c:0f:51:b4:c8:f9:35:07:40: 8e:17:17:73:9d:c2:63:5e:3d:9f:15:b9:1e:4b:2a: 06:f9:9b:d7:d4:c5:89:44:89:5a:7a:df:a4:b2:a6: 79:f6:0e:01:99:1b:4b:08:63:c4:0d:c4:32:48:1f: 53:de:51:4e:41:c7:20:4f:46:46:79:aa:97:ff:f4: af:d6:c1:75:f2:4a:58:b3:0e:3b:9b:9e:1d:34:56: 3e:a0:fc:20:f2:ae:3a:36:c1:bc:70:b9:2b:17:16: e5:cf:b1:67:d9:09:29:00:78:97:50:f3:f4:49:51: 05:e3:d6:5e:ff:6b:6f:a4:f3:c8:6e:34:0c:9b:58: ea:93:e0:d0:af:43:7c:c4:a6:3d:a0:1f:9a:50:78: 63:aa:1b:f0:f5:c2:f5:10:01:90:69:14:e8:11:ee: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:41:90:5B:EF:C6:B8:10:7E:4B:4E:EA:30:44:6A:FC:9B:89:51:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/d6c1a4e3-93a7-3760-87c1-ee80c5dbb588.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:17:8c:20:21:a4:97:51:d0:c5:b0:1c:8a:7d:19:41:aa:33: b2:c2:0f:c4:a5:07:1c:93:a5:ee:c6:d3:79:61:52:fa:ad:66: 4a:17:d9:51:4e:ff:a6:75:8d:e6:b4:7c:9d:c8:2d:77:89:93: 69:57:72:61:42:f2:bf:18:ac:f3:a3:be:1e:8c:db:c7:43:97: 40:29:38:bf:3b:33:72:0a:76:e8:cd:d6:89:64:cd:9b:a2:03: 7d:0c:e6:17:ce:4d:9c:e5:f3:78:af:20:30:43:36:b6:e4:19: 93:1a:08:83:df:ad:06:d3:4f:76:18:62:5c:43:d2:cc:e7:74: bc:0d:53:6f:dc:c7:be:75:d3:1c:94:81:c1:f9:be:a8:df:48: f4:b3:5c:08:73:49:53:db:df:82:c4:c1:de:70:13:9b:59:6e: 99:15:23:2e:ab:1f:3d:b2:2e:6b:0d:63:69:6f:9d:87:7d:45: 13:bb:b4:ba:e3:3b:7a:76:c9:d4:45:81:c9:a1:ba:9c:fd:29: 35:37:e9:4a:f1:53:d4:05:56:9d:fb:65:d8:22:51:c9:9d:8f: f6:a0:17:b0:41:cc:c2:f8:ab:5b:5e:e6:f0:18:78:98:db:17: 48:7b:95:d9:eb:19:4a:76:56:89:ad:8e:fa:b7:cd:21:6d:38: d3:9d:ab:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3CbA2o4AT2JdugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk NmI5NjRkMDAtMzE0My00ZGYwLWI5ZTEtNTA3OGRkMjdlNjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLt81Ynn3wwf3xRnGA2nN5gOK34wmH5mBd59 mNrxUCv/QIQTnlgoFN0kOjepIsU9xUgTqjwHQyXDZjzyB+DL254plmd/qdlu9C3e esOYLvM1N8PJ6UMrvdVROsQrmhBcD1G0yPk1B0COFxdzncJjXj2fFbkeSyoG+ZvX 1MWJRIlaet+ksqZ59g4BmRtLCGPEDcQySB9T3lFOQccgT0ZGeaqX//Sv1sF18kpY sw47m54dNFY+oPwg8q46NsG8cLkrFxblz7Fn2QkpAHiXUPP0SVEF49Ze/2tvpPPI bjQMm1jqk+DQr0N8xKY9oB+aUHhjqhvw9cL1EAGQaRToEe5JrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBdBkFvvxrgQfktO6jBEavybiVHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZDZjMWE0ZTMtOTNhNy0z NzYwLTg3YzEtZWU4MGM1ZGJiNTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4XjCAhpJdR0MWwHIp9GUGqM7LCD8SlBxyTpe7G03lhUvqtZkoX2VFO /6Z1jea0fJ3ILXeJk2lXcmFC8r8YrPOjvh6M28dDl0ApOL87M3IKdujN1olkzZui A30M5hfOTZzl83ivIDBDNrbkGZMaCIPfrQbTT3YYYlxD0szndLwNU2/cx7510xyU gcH5vqjfSPSzXAhzSVPb34LEwd5wE5tZbpkVIy6rHz2yLmsNY2lvnYd9RRO7tLrj O3p2ydRFgcmhupz9KTU36UrxU9QFVp37ZdgiUcmdj/agF7BBzML4q1te5vAYeJjb F0h7ldnrGUp2Vomtjvq3zSFtONOdqxM= -----END CERTIFICATE-----Generated at Fri Mar 14 10:02:10 2025 by rpki-client