$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa File: 2b802f54-be87-3e85-b569-cf6fbafa55b0.roa (raw, json) Hash identifier: cnvzWQ+L4v+26XFUDd+VjWkinS0JZ7VeZ1HbcFp0SEM= Subject key identifier: 5E:CD:B4:50:BF:41:F0:83:D0:F7:1C:75:08:C7:8E:AF:98:FA:59:12 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849B57A09B4C73984FCFAD7D100 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa Signing time: Thu 01 May 2025 13:00:58 +0000 ROA not before: Thu 01 May 2025 13:00:58 +0000 ROA not after: Wed 30 Jul 2025 13:00:58 +0000 asID: 16509 IP address blocks: 130.137.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b5:7a:09:b4:c7:39:84:fc:fa:d7:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 1 13:00:58 2025 GMT Not After : Jul 30 13:00:58 2025 GMT Subject: CN=4f78e87b-4a48-40b2-8fd4-9f2e94f716eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:35:16:48:7d:54:22:03:ab:41:de:34:ab:16: 94:b0:e6:c7:09:b4:20:7f:47:99:cb:e0:3b:37:bc: 5d:f4:2c:6f:4a:8d:41:67:75:54:6f:98:7a:7b:c2: b8:ff:b7:17:cd:8b:83:ef:b1:98:85:65:8c:52:2c: ab:cd:ee:17:50:42:c2:dd:00:d7:2f:a3:32:32:e8: 4c:38:43:9c:2a:4e:1d:06:8f:24:e8:90:e6:6e:26: 96:97:5c:2b:2d:96:d5:f1:e4:ab:7c:52:e7:05:a4: e2:00:50:4c:bb:34:0c:63:e9:4a:32:79:d6:1c:d9: ed:23:a9:84:01:2b:52:8b:b1:5c:92:69:25:58:06: 8a:31:ae:59:d3:bb:7f:1c:b5:cd:48:77:f6:a3:48: 87:eb:e0:d7:4e:30:33:ec:33:0d:e5:d1:c5:56:f2: 0b:85:b2:d9:68:94:13:73:d5:c5:5e:f6:9d:72:f3: f6:0e:fd:9f:02:64:e7:7a:fb:99:65:1b:a8:6f:6c: e8:f5:86:34:b8:d0:3d:04:30:7f:76:ce:bf:20:b6: 11:11:cb:a0:f1:28:8d:49:0d:e7:02:16:d5:0a:e5: 65:cf:3e:a9:d1:3a:2c:62:12:a2:de:dc:97:7a:eb: 9c:44:9e:3c:19:6b:63:04:30:2d:2e:42:22:d0:41: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:B4:50:BF:41:F0:83:D0:F7:1C:75:08:C7:8E:AF:98:FA:59:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/2b802f54-be87-3e85-b569-cf6fbafa55b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:86:c4:be:89:db:55:07:b6:0a:f7:ee:a6:db:70:3a:77:eb: 03:a1:47:4a:54:9e:f7:85:74:59:58:92:d6:cb:e5:b0:a9:0a: b5:f5:d0:fc:df:60:8b:ed:d2:21:04:1d:2d:cc:3e:e5:00:55: ce:4f:58:ef:66:48:42:7c:7a:bd:d4:43:9b:20:17:3a:e6:75: 5d:97:c7:09:4f:5e:74:50:cb:7b:94:88:93:df:1c:fe:9f:63: 6d:a1:8f:5f:a2:ae:2e:3f:9c:b3:dc:26:19:e3:71:65:ff:46: eb:13:e1:2b:fe:26:19:a4:7f:d7:26:c2:46:bd:98:43:32:9c: 6f:bf:7b:02:53:b7:40:73:1f:ed:ea:1b:d7:5f:f7:ab:67:de: 64:b8:4f:a4:39:15:4c:42:13:cc:23:94:e5:ee:50:58:8b:14: 6c:9e:ab:9b:76:1f:23:90:7d:32:24:22:89:9a:5a:05:40:4b: fb:08:32:e8:f4:a6:1e:3a:f3:85:0f:f8:b5:84:83:71:d9:30: 8b:7b:10:de:55:6e:29:6e:e2:11:24:43:10:36:22:5a:3e:a5: ce:57:51:a8:15:9b:11:01:94:be:14:10:eb:a9:c8:0c:77:d6: 64:1d:1f:a3:b2:8c:b6:67:a0:cd:ee:38:44:13:7f:3a:4c:15: a4:d5:d6:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1egm0xzmE/PrX0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUwMTEzMDA1OFoXDTI1MDczMDEzMDA1OFowLzEtMCsGA1UEAxMk NGY3OGU4N2ItNGE0OC00MGIyLThmZDQtOWYyZTk0ZjcxNmViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjUWSH1UIgOrQd40qxaUsObHCbQgf0eZy+A7 N7xd9CxvSo1BZ3VUb5h6e8K4/7cXzYuD77GYhWWMUiyrze4XUELC3QDXL6MyMuhM OEOcKk4dBo8k6JDmbiaWl1wrLZbV8eSrfFLnBaTiAFBMuzQMY+lKMnnWHNntI6mE AStSi7FckmklWAaKMa5Z07t/HLXNSHf2o0iH6+DXTjAz7DMN5dHFVvILhbLZaJQT c9XFXvadcvP2Dv2fAmTnevuZZRuob2zo9YY0uNA9BDB/ds6/ILYREcug8SiNSQ3n AhbVCuVlzz6p0TosYhKi3tyXeuucRJ48GWtjBDAtLkIi0EGZzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7NtFC/QfCD0PccdQjHjq+Y+lkSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMmI4MDJmNTQtYmU4Ny0z ZTg1LWI1NjktY2Y2ZmJhZmE1NWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABGGxL6J21UHtgr37qbbcDp36wOhR0pUnveFdFlYktbL5bCpCrX10Pzf YIvt0iEEHS3MPuUAVc5PWO9mSEJ8er3UQ5sgFzrmdV2XxwlPXnRQy3uUiJPfHP6f Y22hj1+iri4/nLPcJhnjcWX/RusT4Sv+Jhmkf9cmwka9mEMynG+/ewJTt0BzH+3q G9df96tn3mS4T6Q5FUxCE8wjlOXuUFiLFGyeq5t2HyOQfTIkIomaWgVAS/sIMuj0 ph4684UP+LWEg3HZMIt7EN5Vbilu4hEkQxA2Ilo+pc5XUagVmxEBlL4UEOupyAx3 1mQdH6OyjLZnoM3uOEQTfzpMFaTV1j4= -----END CERTIFICATE-----Generated at Mon May 5 06:24:05 2025 by rpki-client