$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa File: 443a0997-c399-3ce3-a707-a3b7e8ec5700.roa (raw, json) Hash identifier: ckQr2hGvOAHf9WNifuLgWdBDgC/0R/jR2gNFdItgL08= Subject key identifier: 3E:43:E3:72:50:1B:63:9C:6F:34:1D:EE:D0:79:96:8B:BD:BA:F2:F0 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849A61F408AE10DD5BD93A96880 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 16509 IP address blocks: 130.137.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:40:8a:e1:0d:d5:bd:93:a9:68:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=073e836b-9fc5-470b-9170-a50af877def9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:13:df:2d:20:48:09:27:89:1c:37:ac:f0: 4f:9a:da:91:38:78:69:0e:d6:33:dc:6a:87:d2:fb: fa:f9:99:0a:ea:68:4b:c3:87:bc:41:f8:ee:1f:44: 0d:8d:9f:26:5b:49:67:58:a6:56:9f:19:9a:28:51: 71:b1:0a:e7:ff:b9:6c:9c:1e:e6:ee:87:65:31:64: a9:e4:59:64:92:d9:cc:8f:67:d4:b0:85:5a:8d:eb: a0:f0:be:59:28:41:05:08:67:0f:8d:90:b0:62:4d: 95:f2:d6:7c:10:d3:0b:04:9c:00:27:b6:b9:9c:a0: 6c:cc:67:0f:54:69:84:ad:c5:c2:41:01:c2:51:43: 38:b6:e4:e9:7e:47:1b:f6:d0:1a:b9:15:af:61:53: fb:e0:1e:43:4f:00:fb:49:91:fe:f3:8f:b7:1d:ee: dc:be:36:c6:a9:35:c4:5d:35:33:5b:e0:22:d6:f2: 64:2f:bf:3f:52:7a:fc:fb:de:e9:bc:70:e1:4e:26: 01:01:b3:3b:67:6b:2d:85:59:6d:3a:38:d0:71:ae: 17:87:0b:c7:bb:58:fd:6a:86:4a:81:d7:2d:0b:89: 9f:cc:a8:9e:62:ee:2e:14:97:73:b0:d2:c4:88:76: 9b:96:4a:83:40:3b:86:9a:32:7a:63:ff:9b:e3:57: 90:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:43:E3:72:50:1B:63:9C:6F:34:1D:EE:D0:79:96:8B:BD:BA:F2:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/443a0997-c399-3ce3-a707-a3b7e8ec5700.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:fc:2d:02:02:b1:52:42:4a:49:37:79:b6:12:6e:4b:35:6c: bb:cc:81:91:b0:0b:73:f0:da:a0:ad:5d:f2:d2:3b:32:81:40: 3d:cd:b4:ce:2a:3e:04:4b:b0:39:ed:bb:c3:21:12:b1:6d:cd: 82:4c:59:e5:57:e2:98:33:77:a8:27:c6:e0:4c:b4:83:b4:80: 73:56:f0:1e:91:97:e1:1a:9a:04:23:55:ee:70:c6:b1:3f:38: 81:db:62:52:0f:d4:11:e2:24:8c:62:58:88:dd:ee:67:5e:6b: c2:8d:f3:07:0f:88:04:99:7f:59:41:97:d1:81:f3:8a:d5:be: 77:04:8b:e9:6d:59:be:28:82:46:d5:1a:88:7a:5c:b4:d5:62: d2:fe:c3:43:f7:0e:86:14:aa:1f:86:08:f3:43:52:ec:f8:72: 76:0a:bd:30:53:4c:74:7d:6a:fa:27:36:2c:06:b7:97:1c:d1: 23:e5:cf:b2:7a:4f:18:91:8d:3b:ef:2b:45:b7:d9:74:5d:18: 83:a2:27:7b:b1:f3:3d:4f:b7:84:b2:05:bd:3d:80:19:65:ab: 22:7e:25:82:9f:2f:c4:4a:b5:96:77:2f:60:dc:bd:ea:22:9a: 4b:d2:d2:20:13:f0:46:76:93:08:5d:1e:e5:cf:c8:99:2b:4f: 5c:06:a4:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0CK4Q3VvZOpaIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk MDczZTgzNmItOWZjNS00NzBiLTkxNzAtYTUwYWY4NzdkZWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3sT3y0gSAkniRw3rPBPmtqROHhpDtYz3GqH 0vv6+ZkK6mhLw4e8QfjuH0QNjZ8mW0lnWKZWnxmaKFFxsQrn/7lsnB7m7odlMWSp 5FlkktnMj2fUsIVajeug8L5ZKEEFCGcPjZCwYk2V8tZ8ENMLBJwAJ7a5nKBszGcP VGmErcXCQQHCUUM4tuTpfkcb9tAauRWvYVP74B5DTwD7SZH+84+3He7cvjbGqTXE XTUzW+Ai1vJkL78/Unr8+97pvHDhTiYBAbM7Z2sthVltOjjQca4XhwvHu1j9aoZK gdctC4mfzKieYu4uFJdzsNLEiHablkqDQDuGmjJ6Y/+b41eQlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD5D43JQG2OcbzQd7tB5lou9uvLwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDQzYTA5OTctYzM5OS0z Y2UzLWE3MDctYTNiN2U4ZWM1NzAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGf8LQICsVJCSkk3ebYSbks1bLvMgZGwC3Pw2qCtXfLSOzKBQD3NtM4q PgRLsDntu8MhErFtzYJMWeVX4pgzd6gnxuBMtIO0gHNW8B6Rl+EamgQjVe5wxrE/ OIHbYlIP1BHiJIxiWIjd7mdea8KN8wcPiASZf1lBl9GB84rVvncEi+ltWb4ogkbV Goh6XLTVYtL+w0P3DoYUqh+GCPNDUuz4cnYKvTBTTHR9avonNiwGt5cc0SPlz7J6 TxiRjTvvK0W32XRdGIOiJ3ux8z1Pt4SyBb09gBllqyJ+JYKfL8RKtZZ3L2Dcveoi mkvS0iAT8EZ2kwhdHuXPyJkrT1wGpLs= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:57 2025 by rpki-client