$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0fefbafc-ef0e-3895-af67-0a148c8cf1e9.roa File: 0fefbafc-ef0e-3895-af67-0a148c8cf1e9.roa (raw, json) Hash identifier: ZXFwofTWVNc5jh7theFGOpUE9XoI3byCI3DEwiXXBHQ= Subject key identifier: C8:29:6F:8F:BA:CE:DF:75:F5:E8:E6:7E:2A:2E:EF:70:27:B3:18:78 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849B149EF4E5B6EFDFB5EF98E00 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0fefbafc-ef0e-3895-af67-0a148c8cf1e9.roa Signing time: Wed 30 Apr 2025 01:00:47 +0000 ROA not before: Wed 30 Apr 2025 01:00:47 +0000 ROA not after: Tue 29 Jul 2025 01:00:47 +0000 asID: 14618 IP address blocks: 130.137.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b1:49:ef:4e:5b:6e:fd:fb:5e:f9:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 30 01:00:47 2025 GMT Not After : Jul 29 01:00:47 2025 GMT Subject: CN=671bbb68-dda6-48f5-96fd-b6d011c5e236 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:af:79:0e:37:12:47:24:7b:69:7a:cf:f8:9c: f5:9c:b2:91:42:7b:d0:78:f6:a5:82:01:32:c7:39: 31:f3:e1:b9:7d:a1:b2:4e:95:14:67:42:c5:16:c1: 22:c7:50:53:c4:c8:06:bd:ee:a0:96:43:14:03:4d: 79:15:94:da:70:ac:db:44:9c:34:f1:00:48:58:39: 30:a4:a2:ca:d5:10:24:3a:7b:be:50:8a:3a:d9:ff: b0:96:30:4a:e9:56:25:a2:f7:bb:09:e1:11:a2:0d: 56:6b:44:74:5f:fc:bb:28:cc:81:62:8d:ce:41:6a: c2:03:f3:7e:58:73:ab:1e:9c:21:9e:e6:77:35:c4: 46:35:7c:f2:9b:39:ed:5b:03:c6:91:26:07:fa:fa: 9f:1a:78:03:37:70:4d:93:6b:05:2c:5f:c3:4d:d6: 5e:31:16:fb:0d:04:2f:76:3a:83:e3:5b:30:1f:a9: b0:1b:f5:08:d5:ae:50:19:04:06:8d:e3:65:e6:11: 83:bd:85:d2:0e:36:c2:ec:68:34:a0:62:42:99:6e: c6:b0:54:53:26:53:71:19:05:d8:c6:de:ba:44:75: b9:e4:97:a4:43:02:6b:0f:cd:13:2c:9b:4f:aa:35: 93:01:2b:df:aa:16:28:17:f5:bb:73:ba:24:8f:c1: 8c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:29:6F:8F:BA:CE:DF:75:F5:E8:E6:7E:2A:2E:EF:70:27:B3:18:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0fefbafc-ef0e-3895-af67-0a148c8cf1e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d4:9c:94:b4:30:f5:56:93:bf:35:e9:fe:37:3f:da:63:6c: 50:ca:bf:6f:aa:a5:aa:12:38:f7:c3:05:6e:51:72:0f:e7:ef: 70:de:54:d9:f6:65:2e:43:4d:7a:7f:44:cb:b2:17:7b:3e:23: 38:d5:f4:4e:d6:01:7d:77:b6:93:e1:03:d3:47:c4:f6:1b:b2: 54:84:3b:f6:aa:24:b8:01:6c:e0:aa:6c:93:0b:71:c9:00:3d: b1:fe:a2:96:dc:6c:16:b2:ab:ce:24:8d:43:69:68:ba:38:76: 5c:75:44:be:a0:06:67:3e:e8:87:9b:ac:22:ec:21:15:61:ad: 87:9b:f3:6d:98:f0:a1:6d:c1:3d:4b:98:64:d5:9b:97:2e:f2: 29:6f:af:9a:80:da:14:54:75:e8:c9:ca:cc:1a:4f:83:10:20: 56:58:a7:9c:0c:83:52:66:c7:d7:d7:18:a8:bc:90:64:7b:4f: 5f:34:59:17:e8:eb:3a:2b:bf:78:21:ae:47:41:89:96:11:b8: 8a:8d:ce:2d:19:ab:fe:2a:b5:1a:ac:f3:d0:f2:6c:15:71:8b: c0:86:2a:1b:13:6d:db:3d:d4:97:33:36:29:bb:91:25:ba:8f: 58:c1:9c:e2:03:0a:42:3e:c7:bf:34:37:4a:d7:e0:60:14:f1: 19:86:3b:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmxSe9OW279+175jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDQzMDAxMDA0N1oXDTI1MDcyOTAxMDA0N1owLzEtMCsGA1UEAxMk NjcxYmJiNjgtZGRhNi00OGY1LTk2ZmQtYjZkMDExYzVlMjM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoa95DjcSRyR7aXrP+Jz1nLKRQnvQePalggEy xzkx8+G5faGyTpUUZ0LFFsEix1BTxMgGve6glkMUA015FZTacKzbRJw08QBIWDkw pKLK1RAkOnu+UIo62f+wljBK6VYlove7CeERog1Wa0R0X/y7KMyBYo3OQWrCA/N+ WHOrHpwhnuZ3NcRGNXzymzntWwPGkSYH+vqfGngDN3BNk2sFLF/DTdZeMRb7DQQv djqD41swH6mwG/UI1a5QGQQGjeNl5hGDvYXSDjbC7Gg0oGJCmW7GsFRTJlNxGQXY xt66RHW55JekQwJrD80TLJtPqjWTASvfqhYoF/W7c7okj8GMXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgpb4+6zt919ejmfiou73Ansxh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGZlZmJhZmMtZWYwZS0z ODk1LWFmNjctMGExNDhjOGNmMWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzUnJS0MPVWk7816f43P9pjbFDKv2+qpaoSOPfDBW5Rcg/n73DeVNn2 ZS5DTXp/RMuyF3s+IzjV9E7WAX13tpPhA9NHxPYbslSEO/aqJLgBbOCqbJMLcckA PbH+opbcbBayq84kjUNpaLo4dlx1RL6gBmc+6IebrCLsIRVhrYeb822Y8KFtwT1L mGTVm5cu8ilvr5qA2hRUdejJyswaT4MQIFZYp5wMg1Jmx9fXGKi8kGR7T180WRfo 6zorv3ghrkdBiZYRuIqNzi0Zq/4qtRqs89DybBVxi8CGKhsTbds91JczNim7kSW6 j1jBnOIDCkI+x780N0rX4GAU8RmGO6k= -----END CERTIFICATE-----Generated at Mon May 5 14:38:38 2025 by rpki-client