$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa File: 4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa (raw, json) Hash identifier: pXjaENqhNQ+qlV78E4Ic49mTZtF7si4hD+Dj3ksaJ+E= Subject key identifier: 2D:7E:53:79:B7:6D:26:21:2B:D7:6F:05:49:C4:F4:5C:8C:41:92:80 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849A61F3B391BB33C4E646BB740 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 130.137.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3b:39:1b:b3:3c:4e:64:6b:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=a6f6cc86-250a-49e0-a6ec-cf462a0f2e26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:21:66:a6:3e:da:24:8b:8d:57:ca:51:0e:15: 5c:31:64:3c:8e:b9:d8:5d:71:f1:69:f4:dd:f9:86: bd:6f:b8:cf:c6:db:42:63:a1:ab:5e:36:af:3c:78: d5:2a:4c:dc:22:6b:fb:24:ba:db:ca:a8:54:3a:78: 0b:a9:0c:17:d1:f5:35:e8:10:26:84:c9:21:16:0b: aa:ee:08:35:fa:e3:e6:d0:1e:a6:e8:15:ec:e1:02: 81:08:46:bd:98:ea:22:1d:12:23:05:68:36:47:f8: 60:25:f7:22:f9:db:9c:1b:87:fb:9e:2a:7c:ce:4d: 0e:50:fe:dd:b9:02:70:08:e8:93:2c:d0:ed:e4:2b: fe:90:d4:d0:af:df:78:14:f1:9c:a5:61:88:2e:34: 00:6e:29:65:42:95:c2:e2:4e:10:9a:ad:89:f6:75: 60:fe:f8:35:d7:20:07:86:e8:b2:3e:cc:e9:74:29: 01:c1:98:b6:54:b6:e3:55:87:d9:4d:c5:07:27:21: 81:0e:17:11:09:b1:0b:c8:51:b7:6d:78:52:50:88: 39:20:92:fb:49:6a:3a:25:c1:f2:d3:e1:7d:34:50: d9:0c:d4:f5:dd:01:42:77:43:30:14:d7:8b:e7:e6: 6c:18:ad:b8:24:5e:7e:9a:7b:20:2c:ff:fe:a0:4d: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7E:53:79:B7:6D:26:21:2B:D7:6F:05:49:C4:F4:5C:8C:41:92:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/4b0f18ca-d70d-35b0-b701-1c0829ff3425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ad:ec:08:7f:3c:90:cb:e9:7e:15:27:20:4b:45:fd:57:cc: 73:cc:20:c1:f3:a5:dc:25:1e:f2:15:3e:e4:99:e8:3a:04:94: ad:52:73:9a:cd:33:37:c0:84:9a:76:24:e0:57:70:50:d7:10: b1:24:3d:3b:de:09:36:c5:95:99:48:9c:fe:c4:32:b6:99:0b: 33:14:70:7d:83:cc:55:4f:fc:c2:0a:57:35:f4:bd:59:5f:21: d2:ff:e5:1f:0d:1e:b8:be:52:51:7b:fa:f9:cb:dd:1a:aa:26: 71:d8:2c:e4:7e:08:d6:68:8b:6f:38:30:d4:6e:ef:55:3d:03: da:00:96:19:52:ee:f7:2d:3e:53:ee:2b:9e:3f:ac:b4:c3:88: 4b:db:32:75:c2:26:4f:58:42:dd:c5:3d:2d:38:a7:61:79:04: 51:7a:24:ab:a6:54:16:c5:17:52:ff:bf:a1:b9:40:27:9d:a6: 5c:c6:a4:e0:7b:e0:16:b8:92:92:b5:d3:97:52:8c:55:4c:25: 55:ab:c0:26:52:b7:fd:bc:c4:19:88:a5:2c:7f:15:69:d6:d0: 5d:fe:0a:9d:2a:3e:e9:27:86:bc:6f:e4:4b:6f:b7:ca:28:99: 13:42:7c:dc:67:36:99:19:66:09:e0:7c:f0:f2:4f:1d:4d:69: 0e:32:41:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzs5G7M8TmRrt0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk YTZmNmNjODYtMjUwYS00OWUwLWE2ZWMtY2Y0NjJhMGYyZTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyFmpj7aJIuNV8pRDhVcMWQ8jrnYXXHxafTd +Ya9b7jPxttCY6GrXjavPHjVKkzcImv7JLrbyqhUOngLqQwX0fU16BAmhMkhFguq 7gg1+uPm0B6m6BXs4QKBCEa9mOoiHRIjBWg2R/hgJfci+ducG4f7nip8zk0OUP7d uQJwCOiTLNDt5Cv+kNTQr994FPGcpWGILjQAbillQpXC4k4Qmq2J9nVg/vg11yAH huiyPszpdCkBwZi2VLbjVYfZTcUHJyGBDhcRCbELyFG3bXhSUIg5IJL7SWo6JcHy 0+F9NFDZDNT13QFCd0MwFNeL5+ZsGK24JF5+mnsgLP/+oE0KNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1+U3m3bSYhK9dvBUnE9FyMQZKAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNGIwZjE4Y2EtZDcwZC0z NWIwLWI3MDEtMWMwODI5ZmYzNDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyt7Ah/PJDL6X4VJyBLRf1XzHPMIMHzpdwlHvIVPuSZ6DoElK1Sc5rN MzfAhJp2JOBXcFDXELEkPTveCTbFlZlInP7EMraZCzMUcH2DzFVP/MIKVzX0vVlf IdL/5R8NHri+UlF7+vnL3RqqJnHYLOR+CNZoi284MNRu71U9A9oAlhlS7vctPlPu K54/rLTDiEvbMnXCJk9YQt3FPS04p2F5BFF6JKumVBbFF1L/v6G5QCedplzGpOB7 4Ba4kpK105dSjFVMJVWrwCZSt/28xBmIpSx/FWnW0F3+Cp0qPuknhrxv5Etvt8oo mRNCfNxnNpkZZgngfPDyTx1NaQ4yQVU= -----END CERTIFICATE-----Generated at Sat Apr 26 13:20:46 2025 by rpki-client