$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa File: 531d8398-b955-3ca2-9032-3d7609e92d88.roa (raw, json) Hash identifier: zskVOhBCYUdWyd2pYIAhL/fAPf5uOF0Y3+/VDuUQY60= Subject key identifier: D0:A6:67:DE:39:1A:FD:93:3A:88:68:C0:11:84:6E:C4:C8:A1:15:71 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858493243DA087B9935AA4F2E8940 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:da:08:7b:99:35:aa:4f:2e:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=cb145fe6-973e-40e6-b43a-bffe3bb47f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:e9:8f:d1:88:56:9d:78:b7:64:7a:dc:9d:85: a4:0f:47:24:79:01:5b:ba:5a:0f:51:c2:0b:bb:6e: 0b:14:d5:13:bc:9f:f2:1d:11:b4:e3:90:4c:9a:66: 9c:36:61:e3:13:50:49:69:c0:b2:a7:f9:4c:23:8d: 95:2a:c5:4e:39:a0:aa:69:64:89:d7:68:3f:eb:9f: 27:0a:48:c2:f5:d0:9a:cd:05:ee:9d:90:05:8b:6f: 94:96:5b:0a:37:d9:29:e2:43:15:bd:47:72:68:56: 2c:5a:1b:89:30:df:95:ff:0d:df:61:d0:38:b6:b9: 50:31:86:d6:42:be:dd:39:0a:81:07:c8:3d:18:d6: d6:16:eb:d1:62:e0:d1:db:99:26:5b:c5:6b:b3:1e: 23:97:2b:13:30:e0:bf:a2:db:06:0c:a5:d5:88:5d: 21:d9:95:d9:9f:05:29:7d:95:a6:65:49:26:43:a0: 64:1a:14:a8:5c:79:78:9a:4f:32:d7:5e:0c:91:2a: 09:e7:25:b9:a6:c9:04:95:90:7f:85:f1:51:ce:89: b3:f9:6f:4d:fe:f5:43:e4:01:7c:67:5a:08:36:45: e3:a7:4b:0d:85:cd:e5:8b:26:9e:5d:a1:c5:b1:a0: e9:00:cd:7d:4c:a6:ec:d0:f9:7f:4f:7c:0f:e9:ac: 7d:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:A6:67:DE:39:1A:FD:93:3A:88:68:C0:11:84:6E:C4:C8:A1:15:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/531d8398-b955-3ca2-9032-3d7609e92d88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9f:a5:e1:09:13:b9:e3:17:a1:e5:3d:86:60:f2:e3:bd:8f: dd:67:c8:56:3d:68:ef:44:0a:93:a0:46:a9:a5:8f:55:68:f6: aa:4d:b2:2a:aa:1e:6e:4b:7c:98:77:27:ce:2a:d1:bb:a9:12: b7:aa:db:b5:4b:50:cb:0b:95:69:ec:55:56:a9:a3:73:0c:59: 79:22:a7:97:32:84:ba:d0:1a:d2:a7:8a:f1:96:6b:9e:5f:8c: 62:d0:79:eb:50:00:73:96:84:84:29:97:c2:50:db:51:4c:b1: 88:8d:a9:ce:4c:28:bf:53:58:78:24:75:b6:f4:52:1b:93:22: f9:ad:2f:23:50:f7:17:1a:a2:0c:e3:83:27:86:94:f4:0a:13: 7b:49:dc:15:42:9c:4c:e4:fd:ea:76:aa:51:ca:c9:02:13:57: 36:bd:aa:97:b2:b0:b0:22:00:b3:f9:d8:3f:2a:10:17:d9:0c: b9:19:af:83:58:e7:8f:02:7e:5b:1e:31:d4:23:6c:4f:9c:81: d1:5c:9e:33:ef:08:be:ea:61:52:c1:ca:15:ab:01:e9:3e:b5: ab:fa:5d:26:ff:dc:3d:41:f2:49:78:6a:60:b6:1b:79:e3:64: 57:41:c8:03:e8:f9:95:31:0a:91:34:9a:ed:74:19:32:88:9f: 89:54:c3:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9oIe5k1qk8uiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk Y2IxNDVmZTYtOTczZS00MGU2LWI0M2EtYmZmZTNiYjQ3ZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+mP0YhWnXi3ZHrcnYWkD0ckeQFbuloPUcIL u24LFNUTvJ/yHRG045BMmmacNmHjE1BJacCyp/lMI42VKsVOOaCqaWSJ12g/658n CkjC9dCazQXunZAFi2+UllsKN9kp4kMVvUdyaFYsWhuJMN+V/w3fYdA4trlQMYbW Qr7dOQqBB8g9GNbWFuvRYuDR25kmW8Vrsx4jlysTMOC/otsGDKXViF0h2ZXZnwUp fZWmZUkmQ6BkGhSoXHl4mk8y114MkSoJ5yW5pskElZB/hfFRzomz+W9N/vVD5AF8 Z1oINkXjp0sNhc3liyaeXaHFsaDpAM19TKbs0Pl/T3wP6ax93QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCmZ945Gv2TOohowBGEbsTIoRVxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNTMxZDgzOTgtYjk1NS0z Y2EyLTkwMzItM2Q3NjA5ZTkyZDg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgom9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyfpeEJE7njF6HlPYZg8uO9j91nyFY9aO9ECpOgRqmlj1Vo9qpNsiqq Hm5LfJh3J84q0bupEreq27VLUMsLlWnsVVapo3MMWXkip5cyhLrQGtKnivGWa55f jGLQeetQAHOWhIQpl8JQ21FMsYiNqc5MKL9TWHgkdbb0UhuTIvmtLyNQ9xcaogzj gyeGlPQKE3tJ3BVCnEzk/ep2qlHKyQITVza9qpeysLAiALP52D8qEBfZDLkZr4NY 548CflseMdQjbE+cgdFcnjPvCL7qYVLByhWrAek+tav6XSb/3D1B8kl4amC2G3nj ZFdByAPo+ZUxCpE0mu10GTKIn4lUwws= -----END CERTIFICATE-----Generated at Sat Apr 26 17:45:00 2025 by rpki-client