$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa File: 0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa (raw, json) Hash identifier: R+uOuP6m7JW8SuZ3yIhwrmyWCQgQ+AmcMbrNiwSg7rM= Subject key identifier: A2:96:DB:AA:51:29:C1:B5:CC:E0:60:46:06:21:E5:02:82:83:B6:90 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285848F65BDB81C8BE3E96E701E580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa Signing time: Sat 22 Feb 2025 02:00:38 +0000 ROA not before: Sat 22 Feb 2025 02:00:38 +0000 ROA not after: Fri 23 May 2025 01:00:38 +0000 asID: 16509 IP address blocks: 130.137.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f6:5b:db:81:c8:be:3e:96:e7:01:e5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Feb 22 02:00:38 2025 GMT Not After : May 23 01:00:38 2025 GMT Subject: CN=4b34c0c3-2f82-4f00-9e3f-9e8c0e2da0bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c8:f4:ad:ad:60:2f:c2:3f:57:f5:c9:d7:b6: 98:41:21:37:75:7a:db:0e:76:29:b2:20:68:aa:97: 3c:68:df:f6:26:b1:53:9e:16:f6:fd:9d:3d:5e:d9: c9:79:3b:ce:a7:6d:b3:8e:b3:dc:95:e0:c8:a4:ac: 9f:59:f0:28:58:22:b0:de:bb:a6:7c:bc:d6:53:60: 83:73:f8:c0:aa:24:e9:fd:75:57:01:82:86:86:d8: bb:15:df:4f:2c:d7:dd:55:c7:d9:75:b4:1f:da:04: 85:22:e6:a6:8a:6c:2f:74:2d:49:2b:c8:d3:cf:7c: 9e:2a:0b:74:3a:36:36:c3:91:76:44:0c:ed:44:6b: 20:51:4b:32:17:3e:1b:df:f7:11:75:7b:49:3b:94: 0f:9b:6d:7b:47:53:b0:2a:75:30:eb:77:2a:e6:33: e5:15:7f:dc:ce:1b:62:09:83:de:af:f8:77:e5:4f: 1c:87:6d:67:93:ff:74:3c:58:60:3b:d9:59:3e:8b: 3a:a0:ee:65:2d:c6:7f:a8:9c:c0:3c:6e:ed:12:01: 5c:ec:f0:d9:16:a0:9a:b2:d0:49:58:81:c8:33:18: 27:a4:47:4b:ef:5f:2b:4e:84:3a:43:ad:e9:9a:c0: 24:70:0a:5b:0e:07:74:a5:fb:07:e9:f7:13:da:15: 63:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:96:DB:AA:51:29:C1:B5:CC:E0:60:46:06:21:E5:02:82:83:B6:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:69:c3:27:88:b1:8e:e4:e8:d3:6d:ca:76:ee:5b:b6:86:6e: 9c:62:0e:29:fc:d3:01:d2:5b:c4:f3:ad:c5:3c:7b:d8:b5:10: ca:9c:47:9f:54:dc:eb:e7:79:a7:0b:f1:dd:32:0e:c1:86:0d: 51:a2:90:cf:2a:a0:f8:2f:05:48:f3:14:5e:9e:36:c4:7b:d5: ab:12:b8:07:6a:ea:35:30:f7:be:39:4a:55:0a:98:a3:ce:fa: c1:10:27:da:92:37:1b:66:27:f9:8b:9d:ca:c6:f1:22:bc:08: 0f:37:b4:2b:94:ef:1a:0b:28:92:cd:99:fa:78:9b:81:08:53: 4e:6b:c9:98:69:25:56:c6:9a:10:b8:64:ea:74:45:e0:62:2f: af:74:38:e9:5f:01:36:3d:8a:d5:fc:1e:47:f4:d4:31:85:cc: 1b:d9:8e:88:f1:36:67:57:72:c9:a0:47:90:22:59:30:da:02: 73:59:d0:67:94:f0:ab:99:68:b8:17:64:68:8d:5d:b3:8c:20: db:8e:77:69:bf:8a:36:38:a2:34:ca:e2:62:c7:a1:7d:6d:64: 62:6c:ea:2b:cd:24:df:09:13:a0:e9:30:c8:16:7d:72:ad:5f: 62:f8:ee:18:c2:f7:ea:df:18:4b:49:f3:33:f4:9a:a0:60:ce: d7:62:fd:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9uByL4+lucB5YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk NGIzNGMwYzMtMmY4Mi00ZjAwLTllM2YtOWU4YzBlMmRhMGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscj0ra1gL8I/V/XJ17aYQSE3dXrbDnYpsiBo qpc8aN/2JrFTnhb2/Z09XtnJeTvOp22zjrPcleDIpKyfWfAoWCKw3rumfLzWU2CD c/jAqiTp/XVXAYKGhti7Fd9PLNfdVcfZdbQf2gSFIuamimwvdC1JK8jTz3yeKgt0 OjY2w5F2RAztRGsgUUsyFz4b3/cRdXtJO5QPm217R1OwKnUw63cq5jPlFX/czhti CYPer/h35U8ch21nk/90PFhgO9lZPos6oO5lLcZ/qJzAPG7tEgFc7PDZFqCastBJ WIHIMxgnpEdL718rToQ6Q63pmsAkcApbDgd0pfsH6fcT2hVj6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKKW26pRKcG1zOBgRgYh5QKCg7aQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGUyZGEwZDUtNmY2NC0z MDM2LTg2ZGYtMjRjZDdkOWYzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVpwyeIsY7k6NNtynbuW7aGbpxiDin80wHSW8TzrcU8e9i1EMqcR59U 3OvneacL8d0yDsGGDVGikM8qoPgvBUjzFF6eNsR71asSuAdq6jUw9745SlUKmKPO +sEQJ9qSNxtmJ/mLncrG8SK8CA83tCuU7xoLKJLNmfp4m4EIU05ryZhpJVbGmhC4 ZOp0ReBiL690OOlfATY9itX8Hkf01DGFzBvZjojxNmdXcsmgR5AiWTDaAnNZ0GeU 8KuZaLgXZGiNXbOMINuOd2m/ijY4ojTK4mLHoX1tZGJs6ivNJN8JE6DpMMgWfXKt X2L47hjC9+rfGEtJ8zP0mqBgztdi/fc= -----END CERTIFICATE-----Generated at Sat Apr 26 15:57:58 2025 by rpki-client