$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa File: dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa (raw, json) Hash identifier: AqnS1vjHKZHAR2OrumJJnOblUwTnfHa71ggMRxYvxng= Subject key identifier: 9B:DA:23:1B:90:8A:FD:C4:3F:41:08:66:41:EC:B4:07:FC:2F:F5:7E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584913AC1B9906132A52E5128600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa Signing time: Tue 04 Mar 2025 14:00:52 +0000 ROA not before: Tue 04 Mar 2025 14:00:52 +0000 ROA not after: Mon 02 Jun 2025 13:00:52 +0000 asID: 14618 IP address blocks: 130.137.226.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:13:ac:1b:99:06:13:2a:52:e5:12:86:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 4 14:00:52 2025 GMT Not After : Jun 2 13:00:52 2025 GMT Subject: CN=23875de2-0ed1-4790-b997-bacbbee3b55c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:58:51:a5:6b:7b:ad:0a:f2:1a:74:5b:b4:96: d9:6e:8a:6e:23:f3:8b:a2:45:d3:42:a4:eb:d3:be: d4:b9:ff:ab:21:0c:5d:08:8a:31:fa:ac:44:08:6f: 8a:49:6b:63:de:0d:ac:86:91:99:3e:b6:bf:83:94: 77:68:da:d5:a2:61:6b:e0:dd:67:ec:9d:1f:c4:42: 11:b3:6d:fb:2f:7c:07:6f:cc:e6:fa:a3:42:a3:ab: d1:2b:51:27:1f:ee:0a:0f:ae:78:03:cb:4c:fc:14: 7f:ca:81:05:27:56:20:3f:14:35:ee:fa:78:29:f3: 7e:6e:6b:94:e2:f4:fe:70:24:86:95:cc:c9:ea:94: 35:82:a2:b7:43:b6:aa:ee:9c:07:26:bf:29:59:b5: c4:78:b1:7f:2b:d5:4b:80:09:e1:65:9d:6a:0a:c0: 90:13:00:6d:f2:58:1b:46:bd:d9:b4:77:dd:62:6b: 8a:8d:62:4b:25:5a:1f:11:59:63:01:e1:93:64:ab: a0:3a:e9:0b:74:c9:ad:ec:2d:aa:02:99:8a:71:f1: 84:68:63:24:50:64:77:23:5e:a6:bc:9c:f7:0a:07: 32:55:bc:64:1d:4b:dd:f4:00:af:ed:6b:2f:9a:53: 18:5f:f7:11:5b:34:92:bd:7e:db:25:81:9c:41:6f: 9b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:DA:23:1B:90:8A:FD:C4:3F:41:08:66:41:EC:B4:07:FC:2F:F5:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/dcf7ddb5-1590-3570-a0fd-9634b2b30e63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.226.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:a2:d5:72:ba:85:6d:69:22:7a:7d:48:87:90:b0:29:31:5b: 3d:14:18:60:1a:c0:fc:1c:c7:56:5b:eb:6f:b0:05:4b:6d:09: 4e:64:d4:06:64:ff:d2:e0:d6:e7:68:91:9c:a4:bb:ec:d7:df: 72:a5:0e:13:91:a0:58:51:21:7b:5e:8e:5e:66:0a:68:88:fd: e3:5f:a1:07:e5:e5:ff:48:8b:da:ee:ee:92:da:c5:80:fb:55: 1d:94:4c:fd:dc:17:da:c5:4a:b8:48:0f:83:a1:97:32:73:79: 91:20:09:73:e8:10:5c:bc:08:8d:af:68:90:61:25:07:97:e5: d7:0e:8e:ac:1f:b0:b0:00:47:99:a1:a1:cc:36:cb:45:41:14: 23:22:46:3b:da:61:b2:a4:b5:8f:15:1b:26:51:f7:2a:e2:f7: 31:9c:1d:b3:88:ab:cd:5c:c3:45:54:20:71:a2:59:8b:e8:41: 39:18:98:2e:39:b0:6c:7e:c1:6f:d1:45:af:5c:f4:bc:32:39: 9d:f2:5d:c4:79:be:41:6c:37:ba:d8:6b:a3:bd:35:25:8e:17: 04:6d:d6:f8:e1:3b:0c:a2:4e:2d:3c:08:01:a9:02:f4:07:3e: 42:cf:38:3b:fa:b7:7d:e2:57:71:87:38:db:41:f5:9e:46:27: 19:0e:4a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkTrBuZBhMqUuUShgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNDE0MDA1MloXDTI1MDYwMjEzMDA1MlowLzEtMCsGA1UEAxMk MjM4NzVkZTItMGVkMS00NzkwLWI5OTctYmFjYmJlZTNiNTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VhRpWt7rQryGnRbtJbZbopuI/OLokXTQqTr 077Uuf+rIQxdCIox+qxECG+KSWtj3g2shpGZPra/g5R3aNrVomFr4N1n7J0fxEIR s237L3wHb8zm+qNCo6vRK1EnH+4KD654A8tM/BR/yoEFJ1YgPxQ17vp4KfN+bmuU 4vT+cCSGlczJ6pQ1gqK3Q7aq7pwHJr8pWbXEeLF/K9VLgAnhZZ1qCsCQEwBt8lgb Rr3ZtHfdYmuKjWJLJVofEVljAeGTZKugOukLdMmt7C2qApmKcfGEaGMkUGR3I16m vJz3CgcyVbxkHUvd9ACv7WsvmlMYX/cRWzSSvX7bJYGcQW+bbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJvaIxuQiv3EP0EIZkHstAf8L/V+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZGNmN2RkYjUtMTU5MC0z NTcwLWEwZmQtOTYzNGIyYjMwZTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgoniMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGi1XK6hW1pInp9SIeQsCkxWz0UGGAawPwcx1Zb62+wBUttCU5k1AZk /9Lg1udokZyku+zX33KlDhORoFhRIXtejl5mCmiI/eNfoQfl5f9Ii9ru7pLaxYD7 VR2UTP3cF9rFSrhID4OhlzJzeZEgCXPoEFy8CI2vaJBhJQeX5dcOjqwfsLAAR5mh ocw2y0VBFCMiRjvaYbKktY8VGyZR9yri9zGcHbOIq81cw0VUIHGiWYvoQTkYmC45 sGx+wW/RRa9c9LwyOZ3yXcR5vkFsN7rYa6O9NSWOFwRt1vjhOwyiTi08CAGpAvQH PkLPODv6t33iV3GHONtB9Z5GJxkOSqs= -----END CERTIFICATE-----Generated at Fri Apr 4 23:31:25 2025 by rpki-client