$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e3bafcc-b5aa-3dba-9ceb-bf633e1e588c.roa File: 2e3bafcc-b5aa-3dba-9ceb-bf633e1e588c.roa (raw, json) Hash identifier: S6+y5YHhn6omRbx7QhTI+UGeFbL/wl5m1Hq+fzUozMg= Subject key identifier: FF:58:35:F3:32:53:56:B6:7F:B9:3D:AC:38:3A:F2:F4:A1:9E:C3:E5 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B6A93783385166D251C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e3bafcc-b5aa-3dba-9ceb-bf633e1e588c.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b6:a9:37:83:38:51:66:d2:51:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=d4e53f1b-53c5-4524-a7da-bf63ca79eb19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2b:d6:ca:cc:68:15:5c:5a:11:fb:17:02:da: 3f:42:f5:f0:2a:22:9a:2a:ac:c4:71:4e:a8:ad:d3: ab:73:8b:8b:bb:54:cf:94:14:00:6e:0b:90:eb:c8: 37:28:8b:52:47:3c:24:e7:a7:56:b1:dd:32:88:93: 59:c5:93:3d:04:2a:9b:ca:5a:ff:36:c3:ca:43:a9: 63:c5:63:b3:7b:17:2b:b4:51:ae:a8:ad:19:5d:38: a7:e7:76:43:17:6a:9c:11:2a:ae:70:5f:9b:77:90: 92:78:18:1e:89:3e:42:ba:80:d2:4c:bc:42:c0:b3: 88:3d:5d:f6:71:8a:99:cb:5d:ae:42:04:3a:1c:3a: de:48:37:f0:2b:7a:99:cc:c1:91:62:d2:7f:59:50: c0:7b:f0:b3:c9:f6:2c:72:7f:ee:46:6d:17:02:b6: 14:07:e9:f5:87:9b:ee:a0:33:31:d0:95:75:09:b5: 50:12:34:7f:f9:1b:f6:0a:6b:39:9f:52:07:b2:b2: 76:dc:f7:5f:01:a6:ec:de:32:dc:98:aa:7e:d9:36: cf:fb:e7:04:4b:c4:e6:7c:fb:99:da:26:cc:a8:76: 8e:a6:4b:d8:25:e5:ec:68:86:b6:c3:9b:1b:77:6a: 95:79:5b:e5:3d:eb:94:f3:83:31:7b:55:f6:f8:af: 75:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:58:35:F3:32:53:56:B6:7F:B9:3D:AC:38:3A:F2:F4:A1:9E:C3:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2e3bafcc-b5aa-3dba-9ceb-bf633e1e588c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:00:cd:9e:85:ee:87:a3:6f:b8:57:49:af:4b:42:a6:5b:13: 47:24:76:f3:84:3a:c8:37:e6:f4:6d:82:18:8a:bb:8d:cc:bd: 13:96:0a:da:7a:70:d2:bb:55:a1:2c:01:94:29:13:f9:7b:76: 63:90:a9:b1:69:17:a4:f7:eb:b8:ee:b6:0e:bc:44:e3:93:f6: f6:42:01:87:fb:f5:ca:01:a5:eb:9c:58:76:64:9f:a0:34:c4: ff:5a:79:f6:7d:5f:c5:5f:26:8f:85:fe:2d:8f:59:3c:f9:c2: f0:97:6e:76:95:4e:3f:85:d3:96:33:83:0b:f9:8c:1d:13:03: 9e:81:38:e2:5d:3b:2a:d1:86:d5:c0:ca:6d:2a:44:64:33:a5: a1:2a:5d:fe:28:e3:31:2f:09:7f:7c:b7:ee:29:8c:af:7a:93: 23:8a:d1:de:eb:85:39:d0:40:df:41:2e:21:ce:cf:a3:33:9a: e7:a5:05:81:a7:1a:52:1e:8c:b5:2f:73:29:fd:b1:27:e8:52: c3:fd:ff:d7:e0:82:b1:d6:ba:85:a3:42:e8:dd:ca:b7:6e:5c: 4c:43:44:17:60:c4:ed:5e:e6:35:7b:ad:16:85:79:bc:5d:dd: 7f:52:f2:af:a9:d9:68:82:f4:b2:17:3f:3a:77:ca:be:1e:23: 65:d3:26:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprapN4M4UWbSUcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk ZDRlNTNmMWItNTNjNS00NTI0LWE3ZGEtYmY2M2NhNzllYjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyvWysxoFVxaEfsXAto/QvXwKiKaKqzEcU6o rdOrc4uLu1TPlBQAbguQ68g3KItSRzwk56dWsd0yiJNZxZM9BCqbylr/NsPKQ6lj xWOzexcrtFGuqK0ZXTin53ZDF2qcESqucF+bd5CSeBgeiT5CuoDSTLxCwLOIPV32 cYqZy12uQgQ6HDreSDfwK3qZzMGRYtJ/WVDAe/CzyfYscn/uRm0XArYUB+n1h5vu oDMx0JV1CbVQEjR/+Rv2Cms5n1IHsrJ23PdfAabs3jLcmKp+2TbP++cES8TmfPuZ 2ibMqHaOpkvYJeXsaIa2w5sbd2qVeVvlPeuU84Mxe1X2+K91/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP9YNfMyU1a2f7k9rDg68vShnsPlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmUzYmFmY2MtYjVhYS0z ZGJhLTljZWItYmY2MzNlMWU1ODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKAAzZ6F7oejb7hXSa9LQqZbE0ckdvOEOsg35vRtghiKu43MvROWCtp6 cNK7VaEsAZQpE/l7dmOQqbFpF6T367jutg68ROOT9vZCAYf79coBpeucWHZkn6A0 xP9aefZ9X8VfJo+F/i2PWTz5wvCXbnaVTj+F05Yzgwv5jB0TA56BOOJdOyrRhtXA ym0qRGQzpaEqXf4o4zEvCX98t+4pjK96kyOK0d7rhTnQQN9BLiHOz6MzmuelBYGn GlIejLUvcyn9sSfoUsP9/9fggrHWuoWjQujdyrduXExDRBdgxO1e5jV7rRaFebxd 3X9S8q+p2WiC9LIXPzp3yr4eI2XTJvk= -----END CERTIFICATE-----Generated at Sat Apr 26 15:50:19 2025 by rpki-client