$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa File: 91807d1c-489c-3c3e-9229-5ecc326d6394.roa (raw, json) Hash identifier: I2P4eljhsAs5C/jvGQ9CGiluyLSC1mbk5aLbhDMdF2Y= Subject key identifier: DB:57:83:5D:4E:08:36:50:2A:60:9F:F2:55:04:AA:7C:0F:25:A8:0B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858492E13B8886A51982CDDB8F580 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa Signing time: Fri 14 Mar 2025 01:00:39 +0000 ROA not before: Fri 14 Mar 2025 01:00:39 +0000 ROA not after: Thu 12 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:2e:13:b8:88:6a:51:98:2c:dd:b8:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 14 01:00:39 2025 GMT Not After : Jun 12 01:00:39 2025 GMT Subject: CN=45a290cb-7195-4361-8720-1fcbd50f5099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:01:24:7d:8b:c6:95:3d:18:64:a3:59:27:96: 2e:cd:d6:cc:f8:a0:1e:8e:78:b8:ca:5b:f0:d3:a0: c4:50:33:3a:b4:3d:6b:08:4e:e5:70:91:3a:58:dd: be:20:72:c7:c0:7f:93:68:f5:23:32:f5:48:7a:09: ce:b4:e1:d5:bd:e7:c9:b1:10:e1:06:20:79:44:35: 7b:55:5b:9e:09:a2:91:85:42:ed:e8:2c:bf:ea:71: 11:c4:75:02:dc:be:2d:74:85:67:90:22:78:69:1c: 66:23:c0:31:f5:4e:52:0d:ad:fe:58:fa:db:fa:99: fa:4f:4f:40:29:1e:06:77:b2:d9:14:97:4a:42:87: be:14:e2:bc:6d:2a:b9:1f:91:08:e2:f0:ea:43:5b: 8e:36:90:fc:83:a6:48:f3:f9:31:7b:b1:42:26:b3: 85:92:f9:a7:93:4c:e0:29:15:5e:db:69:ba:90:b6: ac:c5:1c:c8:e0:31:aa:7d:0e:0d:8f:37:96:16:a3: 6f:7c:10:6c:04:03:a9:8c:ab:ed:31:69:43:38:91: 22:ae:39:ef:3b:ab:8f:f6:6c:b3:33:ae:67:b8:09: d8:52:2e:d0:70:cd:38:91:c3:1b:fd:14:fa:12:01: 4e:70:92:d9:67:5a:0c:c3:cd:7e:be:be:ea:01:c3: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:57:83:5D:4E:08:36:50:2A:60:9F:F2:55:04:AA:7C:0F:25:A8:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:e9:34:77:04:a0:70:9b:12:56:6d:81:ef:0d:ae:65:13:8c: 69:e9:e8:fd:b2:dc:96:4e:71:d7:ed:ca:a2:41:51:ca:20:7b: c6:d8:7d:07:dc:c7:e6:2e:f0:ff:36:87:56:c0:91:b6:7e:27: f0:be:85:d0:ed:56:80:68:f0:e2:7e:71:5e:5b:db:01:e3:ea: dc:a6:44:d0:22:83:df:40:56:79:1c:53:e6:36:8e:ae:43:03: 38:c1:2e:81:04:67:89:2d:c5:35:d4:29:87:d1:9b:be:07:2b: 25:f4:42:7d:90:71:72:d9:a8:c3:16:4b:f0:9c:55:dc:48:e9: c5:18:2e:1e:a4:93:bd:14:06:29:c7:64:9d:26:43:f9:8e:3c: 09:3a:bc:dd:97:16:98:b5:58:a2:3d:c7:e0:bd:91:49:d4:58: c7:87:f9:0e:40:fc:60:70:d7:14:82:74:07:a1:b3:ae:b9:3f: 95:29:a1:0a:61:89:ce:00:39:0d:d5:8c:61:2e:9b:ea:7c:f1: 83:6d:d7:bd:a4:1e:c7:4c:1e:6a:af:e9:83:85:e7:ee:2f:1a: 7c:b8:cb:9e:d5:d9:94:e7:65:20:21:5d:7a:a4:4a:1b:95:76: c3:f5:9f:45:0f:cb:77:cf:73:11:f1:fc:7f:a7:b6:67:7f:59: 20:8a:7a:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE7iIalGYLN249YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk NDVhMjkwY2ItNzE5NS00MzYxLTg3MjAtMWZjYmQ1MGY1MDk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQEkfYvGlT0YZKNZJ5YuzdbM+KAejni4ylvw 06DEUDM6tD1rCE7lcJE6WN2+IHLHwH+TaPUjMvVIegnOtOHVvefJsRDhBiB5RDV7 VVueCaKRhULt6Cy/6nERxHUC3L4tdIVnkCJ4aRxmI8Ax9U5SDa3+WPrb+pn6T09A KR4Gd7LZFJdKQoe+FOK8bSq5H5EI4vDqQ1uONpD8g6ZI8/kxe7FCJrOFkvmnk0zg KRVe22m6kLasxRzI4DGqfQ4NjzeWFqNvfBBsBAOpjKvtMWlDOJEirjnvO6uP9myz M65nuAnYUi7QcM04kcMb/RT6EgFOcJLZZ1oMw81+vr7qAcNl9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNtXg11OCDZQKmCf8lUEqnwPJagLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTE4MDdkMWMtNDg5Yy0z YzNlLTkyMjktNWVjYzMyNmQ2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHpNHcEoHCbElZtge8NrmUTjGnp6P2y3JZOcdftyqJBUcoge8bYfQfc x+Yu8P82h1bAkbZ+J/C+hdDtVoBo8OJ+cV5b2wHj6tymRNAig99AVnkcU+Y2jq5D AzjBLoEEZ4ktxTXUKYfRm74HKyX0Qn2QcXLZqMMWS/CcVdxI6cUYLh6kk70UBinH ZJ0mQ/mOPAk6vN2XFpi1WKI9x+C9kUnUWMeH+Q5A/GBw1xSCdAehs665P5UpoQph ic4AOQ3VjGEum+p88YNt172kHsdMHmqv6YOF5+4vGny4y57V2ZTnZSAhXXqkShuV dsP1n0UPy3fPcxHx/H+ntmd/WSCKegE= -----END CERTIFICATE-----Generated at Sat Apr 26 18:39:57 2025 by rpki-client