$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbae4b91-fc80-306e-98e1-468cd8552640.roa File: dbae4b91-fc80-306e-98e1-468cd8552640.roa (raw, json) Hash identifier: cCvOGtNWYZGBba7GPZgF1QQ6AdRYsxbbl2FN+adE+sc= Subject key identifier: C0:75:A9:8C:CA:2D:01:94:66:E2:FF:C5:A9:39:86:9D:8E:62:76:0B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584913AC135B29756363FC12DA80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbae4b91-fc80-306e-98e1-468cd8552640.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 16509 IP address blocks: 130.137.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:13:5b:29:75:63:63:fc:12:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=35b1503e-0a5c-4bc2-b1c2-ddae9ad6da65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:01:4e:3b:a4:ab:4b:03:84:9d:86:62:9f:02: 75:16:82:7b:aa:85:7f:2d:0d:9b:eb:a1:b0:ec:b4: ff:82:0c:39:15:02:68:da:2f:22:81:ce:00:5a:f6: 22:47:12:0e:1d:de:66:cd:db:28:c3:05:1a:97:e5: 8b:a2:7e:af:5c:f8:dc:54:f7:22:dd:69:dd:bc:4a: 37:cd:40:03:d6:2b:d1:07:b4:7a:58:15:3a:af:84: 49:5e:04:10:c0:2d:67:b1:fd:33:e4:1f:04:0e:ff: 31:3d:ee:4c:0a:60:5b:ee:ef:16:3d:7a:69:96:b3: 44:74:3e:53:86:a1:bf:35:36:d9:62:c0:20:63:40: 2d:f2:40:25:82:92:71:8f:6d:26:bf:96:6b:89:43: 39:6a:85:67:1c:c0:6b:14:13:50:ad:8c:50:83:fb: 72:a4:01:9e:bc:05:2d:c1:e7:f8:ea:51:53:51:a0: f5:e3:60:ba:bb:75:0d:c3:65:2b:c5:b2:2e:b3:0b: 1f:d2:c8:e7:48:12:f8:b9:e4:82:c7:cc:c9:4f:c6: a5:e4:84:ce:a1:46:f8:84:13:74:d6:1d:17:55:c1: c3:c1:20:f0:9f:de:02:56:dd:17:d8:3b:78:23:d5: f3:1f:46:1c:3a:1a:41:0e:18:be:75:83:f3:c7:2f: 2c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:75:A9:8C:CA:2D:01:94:66:E2:FF:C5:A9:39:86:9D:8E:62:76:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dbae4b91-fc80-306e-98e1-468cd8552640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ee:d0:6d:70:26:2c:31:c8:39:32:a1:3e:c2:c8:d1:40:81: cf:fb:7d:24:6a:ba:8c:e0:26:af:be:ff:7a:76:a0:04:5f:0f: 63:a7:e2:be:bd:fa:0f:0a:53:c0:ec:af:d7:a0:3c:86:30:4a: ed:ab:77:93:a8:62:ca:78:b7:54:3c:68:79:1b:76:fa:b8:08: 51:a6:16:7a:bd:9b:f0:da:f9:81:de:6c:90:5e:a2:9c:82:8d: 1e:ec:c0:27:f5:0e:53:42:72:d7:8e:d0:c9:ab:71:66:c3:ad: e8:91:9d:e3:b6:80:b3:8b:04:b9:f0:b1:e6:75:49:c8:6f:6f: 7d:f4:22:92:4c:04:cc:32:12:ac:d4:24:0f:aa:0b:a8:f5:2b: 8a:cf:81:78:9e:f3:9a:4b:e2:50:fc:00:1f:be:90:1b:42:6b: 1c:60:34:5a:10:87:fb:93:d4:ac:51:cc:ec:48:b5:97:25:e6: 0d:5d:97:a7:1a:12:ab:3c:85:e8:5e:37:9d:79:62:53:0c:d3: 52:b1:6d:43:1a:c8:43:10:75:19:21:e6:9f:ea:50:28:5f:20: ca:71:14:48:97:97:8b:f0:a7:a8:17:db:0f:c4:62:b7:e7:35: 0d:66:97:e5:c8:ad:72:cb:b2:54:45:ab:3b:07:ec:c9:8f:21: c7:75:f8:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBNbKXVjY/wS2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MzViMTUwM2UtMGE1Yy00YmMyLWIxYzItZGRhZTlhZDZkYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQFOO6SrSwOEnYZinwJ1FoJ7qoV/LQ2b66Gw 7LT/ggw5FQJo2i8igc4AWvYiRxIOHd5mzdsowwUal+WLon6vXPjcVPci3WndvEo3 zUAD1ivRB7R6WBU6r4RJXgQQwC1nsf0z5B8EDv8xPe5MCmBb7u8WPXpplrNEdD5T hqG/NTbZYsAgY0At8kAlgpJxj20mv5ZriUM5aoVnHMBrFBNQrYxQg/typAGevAUt wef46lFTUaD142C6u3UNw2UrxbIuswsf0sjnSBL4ueSCx8zJT8al5ITOoUb4hBN0 1h0XVcHDwSDwn94CVt0X2Dt4I9XzH0YcOhpBDhi+dYPzxy8s8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMB1qYzKLQGUZuL/xak5hp2OYnYLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGJhZTRiOTEtZmM4MC0z MDZlLTk4ZTEtNDY4Y2Q4NTUyNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHu0G1wJiwxyDkyoT7CyNFAgc/7fSRquozgJq++/3p2oARfD2On4r69 +g8KU8Dsr9egPIYwSu2rd5OoYsp4t1Q8aHkbdvq4CFGmFnq9m/Da+YHebJBeopyC jR7swCf1DlNCcteO0MmrcWbDreiRneO2gLOLBLnwseZ1Schvb330IpJMBMwyEqzU JA+qC6j1K4rPgXie85pL4lD8AB++kBtCaxxgNFoQh/uT1KxRzOxItZcl5g1dl6ca Eqs8heheN515YlMM01KxbUMayEMQdRkh5p/qUChfIMpxFEiXl4vwp6gX2w/EYrfn NQ1ml+XIrXLLslRFqzsH7MmPIcd1+Hk= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:21 2025 by rpki-client