$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa File: 0ef970e6-d4e8-3790-901d-8464307c9a2e.roa (raw, json) Hash identifier: +9RGDFxboufLHuISkvLN8qtxAHcUT4opdc/Bu9BT1wY= Subject key identifier: 31:0A:2F:F1:21:29:B5:4D:76:9C:74:42:A2:DD:85:5F:93:B3:72:5D Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491AA6B560B307A317B22F86A0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa Signing time: Fri 07 Mar 2025 02:00:39 +0000 ROA not before: Fri 07 Mar 2025 02:00:39 +0000 ROA not after: Thu 05 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1a:a6:b5:60:b3:07:a3:17:b2:2f:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 7 02:00:39 2025 GMT Not After : Jun 5 01:00:39 2025 GMT Subject: CN=8ece518a-b3df-4582-8f0d-f4964e39f2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:0c:5b:88:00:a0:47:02:f9:67:1d:fe:90:4e: 23:fd:73:96:97:05:78:36:ff:e3:f6:9d:d8:a0:08: eb:23:df:74:78:4e:42:5a:c2:37:46:e9:e2:80:ef: bc:4a:17:a7:35:97:25:fc:63:a8:f4:68:44:34:72: 71:de:e0:2f:15:5b:0e:29:9f:7f:ca:fe:f5:8e:3e: 62:c2:ad:ee:6e:29:f3:1b:4f:91:1f:38:03:96:de: 81:d0:4f:05:58:aa:53:59:43:c9:f1:ca:50:8f:98: 21:62:fd:a8:a6:77:e7:59:02:64:f2:6b:cf:26:89: 90:7c:33:4e:e7:29:86:73:b3:35:0d:9a:f0:56:5e: 6f:05:a0:b0:ff:9c:b6:ac:fc:b6:89:9a:eb:ad:f7: f1:82:67:d3:d4:6e:ed:10:1e:24:ba:c8:34:e2:67: fb:79:d8:45:8a:fa:4b:18:34:1a:b9:b7:0c:fb:30: 30:f8:7e:e9:f1:51:59:b8:01:d0:20:82:d2:55:de: d8:84:61:b3:94:92:1f:3c:f5:3d:5f:bc:ac:70:7d: 87:d5:82:19:22:72:ac:c2:ba:ec:62:fe:4e:ad:77: 2f:a0:83:8e:f5:28:61:4f:f0:d4:c6:b3:bd:8b:ca: 03:00:93:ec:0e:89:a0:ba:6f:df:2a:56:84:9e:63: 44:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:0A:2F:F1:21:29:B5:4D:76:9C:74:42:A2:DD:85:5F:93:B3:72:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0ef970e6-d4e8-3790-901d-8464307c9a2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:35:07:0f:90:d5:1e:f5:01:f9:f7:91:32:02:fc:fc:7b:24: 1d:e7:0e:d3:2b:e4:7a:89:1e:44:ad:03:99:23:11:ff:a4:7d: 3b:72:8e:30:87:9a:98:b0:59:9e:40:16:48:39:52:1c:27:fc: 3c:01:b2:d0:d3:df:85:2b:d8:3b:04:8b:f9:24:42:f5:76:2e: 18:6f:de:e6:da:dd:05:8b:cf:91:f6:d0:30:21:1a:6d:4d:eb: 50:34:c7:4e:e3:19:32:ad:98:70:20:66:88:b1:a8:93:ef:ca: 00:1b:82:84:61:86:6a:79:be:03:f4:b5:f4:ed:8e:ef:41:82: 06:fe:56:0f:7b:bc:d6:14:db:17:37:35:63:31:0e:c4:d8:67: 1f:0e:2b:9a:78:fe:26:41:12:a3:ba:83:18:d9:0e:49:60:bb: 91:68:79:16:12:9c:c4:87:b1:b6:a5:bb:0c:f4:d2:83:70:d2: 60:59:8e:89:43:b1:d3:74:3c:47:28:da:e6:60:65:6d:1c:c8: db:f4:80:98:f5:41:0c:50:3e:e4:29:bd:2c:05:9f:37:c1:8d: 4b:cf:a5:85:ee:74:df:47:a4:b8:13:f1:d1:b6:4d:e0:75:a7: 92:57:0c:14:15:f4:65:56:1a:00:c4:5b:12:34:86:f1:91:97: df:e4:f5:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprVgswejF7IvhqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk OGVjZTUxOGEtYjNkZi00NTgyLThmMGQtZjQ5NjRlMzlmMmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AxbiACgRwL5Zx3+kE4j/XOWlwV4Nv/j9p3Y oAjrI990eE5CWsI3RunigO+8ShenNZcl/GOo9GhENHJx3uAvFVsOKZ9/yv71jj5i wq3ubinzG0+RHzgDlt6B0E8FWKpTWUPJ8cpQj5ghYv2opnfnWQJk8mvPJomQfDNO 5ymGc7M1DZrwVl5vBaCw/5y2rPy2iZrrrffxgmfT1G7tEB4kusg04mf7edhFivpL GDQaubcM+zAw+H7p8VFZuAHQIILSVd7YhGGzlJIfPPU9X7yscH2H1YIZInKswrrs Yv5OrXcvoIOO9ShhT/DUxrO9i8oDAJPsDomgum/fKlaEnmNEMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEKL/EhKbVNdpx0QqLdhV+Ts3JdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGVmOTcwZTYtZDRlOC0z NzkwLTkwMWQtODQ2NDMwN2M5YTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAM1Bw+Q1R71Afn3kTIC/Px7JB3nDtMr5HqJHkStA5kjEf+kfTtyjjCH mpiwWZ5AFkg5Uhwn/DwBstDT34Ur2DsEi/kkQvV2Lhhv3uba3QWLz5H20DAhGm1N 61A0x07jGTKtmHAgZoixqJPvygAbgoRhhmp5vgP0tfTtju9Bggb+Vg97vNYU2xc3 NWMxDsTYZx8OK5p4/iZBEqO6gxjZDklgu5FoeRYSnMSHsbaluwz00oNw0mBZjolD sdN0PEco2uZgZW0cyNv0gJj1QQxQPuQpvSwFnzfBjUvPpYXudN9HpLgT8dG2TeB1 p5JXDBQV9GVWGgDEWxI0hvGRl9/k9Vo= -----END CERTIFICATE-----Generated at Tue May 6 03:53:24 2025 by rpki-client