$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa File: 9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa (raw, json) Hash identifier: 2N8tEa4qhTWPnO2gzB/1RIsg5hDVXxkPxhZM6MPu9VY= Subject key identifier: C8:83:2B:09:CF:95:0D:1A:C2:62:90:25:A4:F3:AC:E2:08:2F:C6:E7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F432858491D717A531CB3D5B9559A7780 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa Signing time: Sat 08 Mar 2025 02:00:39 +0000 ROA not before: Sat 08 Mar 2025 02:00:39 +0000 ROA not after: Fri 06 Jun 2025 01:00:39 +0000 asID: 8987 IP address blocks: 130.137.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:1d:71:7a:53:1c:b3:d5:b9:55:9a:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Mar 8 02:00:39 2025 GMT Not After : Jun 6 01:00:39 2025 GMT Subject: CN=908f31b2-2ee8-4e29-8a9a-b478f61c4c28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:46:98:70:53:ac:bd:54:3f:9b:90:96:91: b2:b6:cc:7d:bb:e1:1d:9e:ac:61:c5:6f:5c:39:b8: ee:5c:f5:5b:91:12:74:e7:73:25:43:ad:5e:fb:7a: e6:00:cb:e1:4f:6e:8b:7a:d0:c7:8e:ac:42:df:5d: 89:3d:1f:2b:5e:fe:92:07:06:94:92:e5:95:53:06: 32:41:1b:2c:1e:99:0f:97:74:8f:9e:c6:51:a7:e3: de:a7:10:b3:e8:fe:e1:94:39:63:cd:50:b3:ca:b0: 9a:22:15:79:c3:65:ac:51:bb:90:c8:9b:c5:eb:92: 72:83:0e:75:73:f3:00:8d:65:90:19:2f:38:5c:1e: a6:bd:06:1a:68:00:c0:2d:b2:13:88:d7:f3:03:af: 39:cc:06:cd:6d:39:a6:b8:c6:28:98:9e:c6:bc:dd: e7:9d:09:f0:83:ff:fc:bc:29:d2:de:ab:3b:c1:56: 94:01:f9:db:f9:67:28:0b:1e:14:74:d4:c3:0d:d5: fa:d1:f9:5a:d4:60:07:52:9c:d4:04:d0:8f:1b:42: d4:0f:0d:9c:5e:1c:f4:4f:a0:a1:7e:78:7a:86:08: 68:88:31:eb:85:91:3f:98:80:9c:60:e1:d8:43:d6: 81:03:dc:d9:bc:12:4f:f1:df:0f:77:b1:f8:b4:20: 9b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:83:2B:09:CF:95:0D:1A:C2:62:90:25:A4:F3:AC:E2:08:2F:C6:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5b:0f:72:9b:e0:9b:39:a5:b7:80:f1:d6:9d:bb:9b:49:9d: aa:ed:51:06:d1:74:f9:6d:99:92:25:06:e9:25:d1:4d:4d:5f: cb:34:54:1d:25:78:bb:5d:25:02:a5:55:c6:aa:53:92:da:e9: 1a:88:e6:ad:1e:7a:78:f5:8d:a4:97:c5:bb:36:2b:b7:c5:6e: f1:b6:e2:c8:01:7a:70:ba:a4:da:5e:56:bf:85:5e:cc:32:4a: d4:57:fa:b3:94:d3:5a:51:9c:21:87:04:3d:e3:b2:77:34:8f: 99:f1:f3:d5:03:19:3b:d9:66:07:71:2e:85:c7:72:ef:7a:77: 3e:3f:a2:52:4f:22:8e:d5:91:7c:b0:58:4e:b5:ff:cc:74:16: 32:16:d2:59:1d:ce:8c:73:85:1a:2b:85:36:2f:3f:cb:ca:c7: 60:19:69:fe:eb:a2:ea:06:bf:dd:82:44:83:84:83:87:79:ac: 6e:d4:35:64:8f:f0:fe:5b:5d:1a:51:9d:28:be:30:d7:84:5d: b2:39:62:e3:7b:c6:9c:27:39:0b:f5:c0:48:55:c5:9a:6d:04: d1:85:2b:7e:af:1d:e1:6a:12:8a:e9:67:ae:93:22:f2:f1:a4: 36:77:9c:19:4e:32:8b:99:67:e4:dc:ba:ba:c3:e8:f4:ba:6b: 17:24:fa:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXpTHLPVuVWad4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk OTA4ZjMxYjItMmVlOC00ZTI5LThhOWEtYjQ3OGY2MWM0YzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie9GmHBTrL1UP5uQlpGytsx9u+EdnqxhxW9c ObjuXPVbkRJ053MlQ61e+3rmAMvhT26LetDHjqxC312JPR8rXv6SBwaUkuWVUwYy QRssHpkPl3SPnsZRp+PepxCz6P7hlDljzVCzyrCaIhV5w2WsUbuQyJvF65Jygw51 c/MAjWWQGS84XB6mvQYaaADALbITiNfzA685zAbNbTmmuMYomJ7GvN3nnQnwg//8 vCnS3qs7wVaUAfnb+WcoCx4UdNTDDdX60fla1GAHUpzUBNCPG0LUDw2cXhz0T6Ch fnh6hghoiDHrhZE/mICcYOHYQ9aBA9zZvBJP8d8Pd7H4tCCbJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiDKwnPlQ0awmKQJaTzrOIIL8bnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWQ2ZGIxYWYtODgyMi0z OTQzLWEwYzItMWQ4ZjQwZjhmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZbD3Kb4Js5pbeA8dadu5tJnartUQbRdPltmZIlBukl0U1NX8s0VB0l eLtdJQKlVcaqU5La6RqI5q0eenj1jaSXxbs2K7fFbvG24sgBenC6pNpeVr+FXswy StRX+rOU01pRnCGHBD3jsnc0j5nx89UDGTvZZgdxLoXHcu96dz4/olJPIo7VkXyw WE61/8x0FjIW0lkdzoxzhRorhTYvP8vKx2AZaf7rouoGv92CRIOEg4d5rG7UNWSP 8P5bXRpRnSi+MNeEXbI5YuN7xpwnOQv1wEhVxZptBNGFK36vHeFqEorpZ66TIvLx pDZ3nBlOMouZZ+TcurrD6PS6axck+vo= -----END CERTIFICATE-----Generated at Wed May 7 08:20:15 2025 by rpki-client