$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/99153d29-8d3f-3d62-8907-3ff7fedc7562.roa File: 99153d29-8d3f-3d62-8907-3ff7fedc7562.roa (raw, json) Hash identifier: vRbMtbmURWtcgArKTeVC1kmLJmsZKFxhf1NZHf0AmjE= Subject key identifier: 45:D5:12:22:99:2C:05:61:A5:E5:EA:DB:B4:2E:69:AB:6D:70:DF:DC Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858493243DAADDC6BA358ED577B80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/99153d29-8d3f-3d62-8907-3ff7fedc7562.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:da:ad:dc:6b:a3:58:ed:57:7b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=ced3b9d2-e718-4800-b59b-8d9388386b63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:fa:ec:39:c1:94:5b:3d:34:84:8c:9f:9f: ca:d7:4e:f3:ea:14:c8:14:df:e1:30:81:49:11:e8: 1d:c8:a4:3d:89:51:3c:c9:66:27:10:6e:3e:38:e6: eb:21:c7:48:d5:de:08:c3:92:d4:f8:e0:99:d6:dd: d0:68:a4:ba:4c:fe:7d:75:7d:a5:bf:8f:cc:9d:10: 5c:af:ad:81:38:c7:ce:18:3c:01:b4:51:5e:ef:f0: 1e:39:95:78:3f:77:a8:32:7a:56:4f:7b:86:95:15: 18:54:37:5a:cb:da:b9:53:ce:16:dd:4c:de:b1:93: 74:c5:df:18:71:cb:de:4f:04:4d:dc:4a:61:26:55: ad:18:41:e0:50:3f:d3:a7:32:3e:13:c3:17:9f:da: 4b:a6:60:3b:c7:e1:6d:80:2d:63:cf:ee:90:60:30: 6b:4d:d7:78:da:09:81:a6:9b:61:9d:5d:ae:75:47: ba:c1:97:c4:66:dd:ee:35:4e:28:2f:ec:fb:dc:55: 07:48:eb:b1:09:43:6c:a7:5e:c2:57:b0:5d:f7:31: 66:11:e1:80:62:d6:41:f9:66:e7:88:8a:22:f8:77: 46:9f:0f:8e:03:82:40:42:d2:00:fe:2b:d0:42:44: 9c:97:62:72:62:9a:3c:57:7f:1a:cd:02:dd:fe:bb: f4:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:12:22:99:2C:05:61:A5:E5:EA:DB:B4:2E:69:AB:6D:70:DF:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/99153d29-8d3f-3d62-8907-3ff7fedc7562.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d9:17:4e:12:e6:31:ee:22:d2:04:5f:12:7b:50:b5:cd:e2: 3e:86:ee:27:16:b7:84:52:33:00:d7:30:8d:d8:cd:04:a6:ef: d9:ad:e3:3d:d3:53:63:96:54:5f:08:24:53:11:37:c3:85:4c: 5c:e2:59:4c:ee:07:b5:27:65:d7:b1:52:3d:05:ae:8f:09:09: a4:2f:24:80:32:fc:b2:65:5e:f1:ac:63:64:87:de:f0:ab:9d: 39:4a:de:2e:2b:fa:f9:11:01:ca:3e:50:26:66:e8:5f:03:5c: 6d:e4:2f:a2:75:3e:84:72:7e:d6:9b:52:bd:7b:5c:d3:aa:7a: 46:b8:9b:33:f7:99:d8:63:3c:93:4e:bf:3b:00:4b:70:73:d1: 0e:7d:08:66:bd:99:80:61:75:c0:77:42:ce:25:42:01:60:30: c2:d7:5a:1a:6f:06:3a:42:6b:ce:aa:dd:61:ff:f4:d2:7a:f1: e0:fb:f9:6c:fc:06:30:8d:0b:9b:86:90:52:58:6c:c7:c1:9e: d9:f5:26:eb:3c:6a:84:42:5d:95:fe:bb:a0:d1:c3:af:6a:0b: a9:4e:eb:4d:24:04:d7:24:4c:c2:8f:d2:ed:80:14:e1:96:d4: 24:c1:8d:2c:9d:c3:b9:e4:9c:e7:53:7a:77:30:48:0e:70:dc: ff:ea:d3:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9qt3GujWO1Xe4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk Y2VkM2I5ZDItZTcxOC00ODAwLWI1OWItOGQ5Mzg4Mzg2YjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3n67DnBlFs9NISMn5/K107z6hTIFN/hMIFJ EegdyKQ9iVE8yWYnEG4+OObrIcdI1d4Iw5LU+OCZ1t3QaKS6TP59dX2lv4/MnRBc r62BOMfOGDwBtFFe7/AeOZV4P3eoMnpWT3uGlRUYVDday9q5U84W3UzesZN0xd8Y ccveTwRN3EphJlWtGEHgUD/TpzI+E8MXn9pLpmA7x+FtgC1jz+6QYDBrTdd42gmB ppthnV2udUe6wZfEZt3uNU4oL+z73FUHSOuxCUNsp17CV7Bd9zFmEeGAYtZB+Wbn iIoi+HdGnw+OA4JAQtIA/ivQQkScl2JyYpo8V38azQLd/rv0/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXVEiKZLAVhpeXq27QuaattcN/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTkxNTNkMjktOGQzZi0z ZDYyLTg5MDctM2ZmN2ZlZGM3NTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3ZF04S5jHuItIEXxJ7ULXN4j6G7icWt4RSMwDXMI3YzQSm79mt4z3T U2OWVF8IJFMRN8OFTFziWUzuB7UnZdexUj0Fro8JCaQvJIAy/LJlXvGsY2SH3vCr nTlK3i4r+vkRAco+UCZm6F8DXG3kL6J1PoRyftabUr17XNOqeka4mzP3mdhjPJNO vzsAS3Bz0Q59CGa9mYBhdcB3Qs4lQgFgMMLXWhpvBjpCa86q3WH/9NJ68eD7+Wz8 BjCNC5uGkFJYbMfBntn1Jus8aoRCXZX+u6DRw69qC6lO600kBNckTMKP0u2AFOGW 1CTBjSydw7nknOdTencwSA5w3P/q00g= -----END CERTIFICATE-----Generated at Sat Apr 26 17:46:44 2025 by rpki-client