$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa File: 91b4f611-70ec-3d76-a42a-76c6bf794529.roa (raw, json) Hash identifier: ywaisr3pQ1ziv9yPS4Xig2xi7SGfgjNOfZDfZW3CjNo= Subject key identifier: D9:52:F7:BD:8E:65:93:5E:CF:64:84:99:13:7B:EE:89:83:CA:D6:4E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858493243D33AC2B8DE79BC400380 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:d3:3a:c2:b8:de:79:bc:40:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=6c8e8a9a-1ae4-4475-88b5-cae533c67947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:03:f7:c7:15:3e:8f:cc:d2:ae:91:38:74:b5: 4d:7a:ec:0f:18:4c:bc:56:7c:a1:ae:6b:a1:03:b5: bf:e3:3f:aa:d8:59:29:6b:27:33:48:b9:99:10:ef: fd:d6:06:9f:43:0d:fc:40:7c:07:e8:69:6c:91:f0: 17:a8:48:6b:05:76:c1:62:fb:7f:06:23:a1:b9:7a: 91:5b:22:6e:22:ba:df:eb:87:03:29:61:6d:37:72: a8:5b:ba:a3:f4:4f:ec:47:11:64:2e:15:e6:de:8a: 6a:3e:e0:2b:89:88:62:9f:35:4a:f9:3e:69:95:98: 8c:1e:39:40:da:51:f9:5a:39:45:dd:f8:55:63:b8: 8f:30:6b:96:c9:48:ec:cd:ec:13:e7:0e:2b:36:e4: 19:26:44:ec:d8:7a:b3:99:76:a7:f8:b8:44:36:ad: f4:df:97:bd:a7:81:77:30:88:f9:67:27:90:3e:9f: 26:5d:98:13:30:d3:41:d8:68:41:d6:45:6f:fd:0f: 31:f9:30:05:3e:19:b6:51:10:34:66:02:ab:e9:5c: e5:bf:ae:c7:69:0b:4a:7d:1c:fb:64:72:8d:b0:08: 8d:6b:90:db:52:e3:91:71:d2:17:82:4e:4d:97:50: 50:2f:45:e2:96:3b:d4:c1:34:7e:6e:07:24:13:2f: 51:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:52:F7:BD:8E:65:93:5E:CF:64:84:99:13:7B:EE:89:83:CA:D6:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91b4f611-70ec-3d76-a42a-76c6bf794529.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:a1:47:bc:e7:7a:c5:c1:49:eb:e5:63:aa:8e:10:8c:e5:67: cf:94:13:46:51:cd:10:3d:4d:4c:2b:55:e8:3e:26:ef:c3:53: d4:70:40:94:cc:f4:12:f1:2c:95:54:dc:22:9f:9b:22:a0:12: 31:87:23:2c:17:b9:68:48:09:e1:0c:b4:d7:78:99:13:d7:19: 00:5a:25:b2:d6:d1:c1:e5:a9:05:a1:48:03:ee:47:64:9d:0a: bb:67:e7:b5:0a:9f:33:8a:dc:74:00:59:cb:42:9a:b8:35:76: f3:5a:f4:80:cc:db:c8:8b:71:3c:ac:61:80:10:18:6d:f7:d6: 0c:c7:6f:9d:03:48:e1:3e:38:dd:05:81:e9:e7:92:57:e2:6d: 5e:2e:7e:ce:b9:77:fe:f4:7c:6d:2b:cf:b9:3b:0b:ad:91:8b: 3d:8e:32:9a:3b:44:95:33:38:21:56:76:f6:15:e1:82:55:bf: d3:fe:37:ed:62:5b:92:34:3d:93:b6:97:b1:97:8e:f0:fd:33: bf:15:04:8f:ee:6e:dc:21:e7:b7:f2:d8:80:1d:99:7f:67:ee: 1b:04:c5:54:6f:e2:2f:59:03:ed:fc:12:20:8f:c2:63:67:ab: ec:51:90:4b:a8:e8:2a:ec:97:2d:39:1a:29:d3:f9:d6:16:14: 4e:56:78:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9M6wrjeebxAA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk NmM4ZThhOWEtMWFlNC00NDc1LTg4YjUtY2FlNTMzYzY3OTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAP3xxU+j8zSrpE4dLVNeuwPGEy8Vnyhrmuh A7W/4z+q2FkpayczSLmZEO/91gafQw38QHwH6GlskfAXqEhrBXbBYvt/BiOhuXqR WyJuIrrf64cDKWFtN3KoW7qj9E/sRxFkLhXm3opqPuAriYhinzVK+T5plZiMHjlA 2lH5WjlF3fhVY7iPMGuWyUjszewT5w4rNuQZJkTs2HqzmXan+LhENq3035e9p4F3 MIj5ZyeQPp8mXZgTMNNB2GhB1kVv/Q8x+TAFPhm2URA0ZgKr6Vzlv67HaQtKfRz7 ZHKNsAiNa5DbUuORcdIXgk5Nl1BQL0XiljvUwTR+bgckEy9RfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNlS972OZZNez2SEmRN77omDytZOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTFiNGY2MTEtNzBlYy0z ZDc2LWE0MmEtNzZjNmJmNzk0NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2hR7znesXBSevlY6qOEIzlZ8+UE0ZRzRA9TUwrVeg+Ju/DU9RwQJTM 9BLxLJVU3CKfmyKgEjGHIywXuWhICeEMtNd4mRPXGQBaJbLW0cHlqQWhSAPuR2Sd Crtn57UKnzOK3HQAWctCmrg1dvNa9IDM28iLcTysYYAQGG331gzHb50DSOE+ON0F gennklfibV4ufs65d/70fG0rz7k7C62Riz2OMpo7RJUzOCFWdvYV4YJVv9P+N+1i W5I0PZO2l7GXjvD9M78VBI/ubtwh57fy2IAdmX9n7hsExVRv4i9ZA+38EiCPwmNn q+xRkEuo6Crsly05GinT+dYWFE5WeJA= -----END CERTIFICATE-----Generated at Sat Apr 26 18:37:35 2025 by rpki-client