$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa File: ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa (raw, json) Hash identifier: ZMxZwPlA3c06lFofk52nVpeV2m1DztZnJUUTqkDXgZE= Subject key identifier: BC:29:1D:DA:46:3E:1B:08:2F:DF:8F:CD:39:D0:B0:6F:E7:F0:76:02 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858493243DA66515ABF9B98ED1900 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa Signing time: Sat 15 Mar 2025 13:00:52 +0000 ROA not before: Sat 15 Mar 2025 13:00:52 +0000 ROA not after: Fri 13 Jun 2025 13:00:52 +0000 asID: 8987 IP address blocks: 130.137.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:32:43:da:66:51:5a:bf:9b:98:ed:19:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 15 13:00:52 2025 GMT Not After : Jun 13 13:00:52 2025 GMT Subject: CN=a4f26ccf-ec3d-4148-b287-9c7712f6a430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:72:c9:eb:59:4a:2f:9b:10:48:5f:78:45:53: 8f:3c:1a:ba:0d:b6:a5:8c:f4:eb:66:fa:f3:c1:94: 8b:1d:b1:e4:cd:f2:7e:64:84:0c:0d:68:01:2d:cf: ea:5a:68:95:70:b3:43:e2:bf:5a:b2:3a:46:f0:2b: 1f:89:c3:e1:63:e6:6f:11:b3:07:fa:b6:68:f8:ba: 95:ee:97:14:ef:f2:d9:d6:ee:00:d2:0e:9e:e8:16: 8d:5a:99:e8:a9:ce:54:74:55:66:19:67:07:07:08: 68:f9:a5:a5:1b:d1:64:b3:31:08:11:ef:4d:26:23: 56:15:ce:96:41:08:07:25:4f:3c:82:b4:ef:83:f3: 75:c4:9b:31:dd:02:e9:22:6d:77:9d:80:64:0b:82: 67:f9:d1:22:50:0e:61:fe:ba:3a:fe:87:43:dc:75: 89:17:91:6c:90:91:9e:41:eb:39:c9:c5:83:0d:be: 36:e8:28:a2:dc:27:b1:f9:8e:5a:e7:9e:f5:db:e7: 7e:f2:59:3d:53:a3:b0:c9:ea:44:5e:92:a9:67:ff: 76:e2:7f:be:99:c3:1f:84:4c:20:fb:7e:f6:ad:a1: ea:a7:fb:0a:b2:c1:73:e1:2e:ce:49:98:07:b9:a1: c8:01:af:ae:72:c0:85:99:41:fc:cf:63:66:f6:69: 8f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:29:1D:DA:46:3E:1B:08:2F:DF:8F:CD:39:D0:B0:6F:E7:F0:76:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ecb39e6d-8966-33f3-ae41-bb6232072ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:04:fb:15:f1:ff:97:88:c5:4a:d2:10:9a:81:48:ed:8a:68: e0:7f:54:b4:24:5f:3a:e3:e8:e5:33:3d:10:f0:83:68:fa:eb: 26:3f:fe:62:ce:0c:0e:d4:94:43:91:f3:2b:28:3a:7b:3a:18: fc:d7:ae:b2:ce:c8:2e:51:89:3a:b7:54:12:6f:d0:dc:90:82: 08:3e:5f:b2:41:bc:03:2c:77:71:cf:77:69:5d:91:b9:c2:3e: 1a:b5:de:61:04:98:c5:d9:03:ca:f3:b6:d3:80:e3:f2:81:7f: 0f:d5:8e:81:3e:28:43:b9:d2:ed:be:fe:68:f6:ea:7a:5a:8f: 35:84:48:d3:f2:1c:d5:a5:f7:14:17:ce:9c:64:d9:d8:c7:8b: 39:c4:7e:da:23:0b:00:71:cf:c9:ca:34:b3:2f:52:5c:b8:c3: 2c:49:c7:42:6b:3a:ec:4b:71:32:98:c2:b5:0f:3f:03:42:28: 21:c4:0c:de:f5:69:13:9c:06:46:b0:cb:a5:82:79:7e:b5:05: a5:63:3d:cd:c8:42:ee:75:a0:81:21:ec:3c:ad:4e:e1:d0:24: 01:fe:32:22:ae:74:f4:ed:09:42:29:c7:23:67:3a:95:e8:53: 6d:bd:17:f3:e6:fd:8e:56:80:b0:df:a4:56:06:6d:e1:c3:54: d5:f8:ba:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkyQ9pmUVq/m5jtGQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk YTRmMjZjY2YtZWMzZC00MTQ4LWIyODctOWM3NzEyZjZhNDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HLJ61lKL5sQSF94RVOPPBq6DbaljPTrZvrz wZSLHbHkzfJ+ZIQMDWgBLc/qWmiVcLND4r9asjpG8CsficPhY+ZvEbMH+rZo+LqV 7pcU7/LZ1u4A0g6e6BaNWpnoqc5UdFVmGWcHBwho+aWlG9FkszEIEe9NJiNWFc6W QQgHJU88grTvg/N1xJsx3QLpIm13nYBkC4Jn+dEiUA5h/ro6/odD3HWJF5FskJGe Qes5ycWDDb426Cii3Cex+Y5a55712+d+8lk9U6OwyepEXpKpZ/924n++mcMfhEwg +372raHqp/sKssFz4S7OSZgHuaHIAa+ucsCFmUH8z2Nm9mmPnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwpHdpGPhsIL9+PzTnQsG/n8HYCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvZWNiMzllNmQtODk2Ni0z M2YzLWFlNDEtYmI2MjMyMDcyYmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKIE+xXx/5eIxUrSEJqBSO2KaOB/VLQkXzrj6OUzPRDwg2j66yY//mLO DA7UlEOR8ysoOns6GPzXrrLOyC5RiTq3VBJv0NyQggg+X7JBvAMsd3HPd2ldkbnC Phq13mEEmMXZA8rzttOA4/KBfw/VjoE+KEO50u2+/mj26npajzWESNPyHNWl9xQX zpxk2djHiznEftojCwBxz8nKNLMvUly4wyxJx0JrOuxLcTKYwrUPPwNCKCHEDN71 aROcBkawy6WCeX61BaVjPc3IQu51oIEh7DytTuHQJAH+MiKudPTtCUIpxyNnOpXo U229F/Pm/Y5WgLDfpFYGbeHDVNX4ug4= -----END CERTIFICATE-----Generated at Sat Apr 26 19:09:41 2025 by rpki-client