$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c3836f9-1e40-31c9-aede-101ce576bf3d.roa File: 1c3836f9-1e40-31c9-aede-101ce576bf3d.roa (raw, json) Hash identifier: sNyGhllzNqkjZ3GLR8uLTvS52VeP03n+7+J7UeVEuwU= Subject key identifier: E8:7D:21:E7:66:15:A1:C7:D5:7B:46:14:66:60:8C:79:24:CE:0C:1E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA6C296EF249D1E95AB700 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c3836f9-1e40-31c9-aede-101ce576bf3d.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6c:29:6e:f2:49:d1:e9:5a:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=66ae1ed7-7f1f-41a0-bdbe-eac4f717d337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:00:be:e1:b5:04:81:5a:ac:6e:be:56:c9:fe: 7b:61:86:96:0b:f8:49:c7:9a:15:64:ab:f1:41:03: 0b:a1:c2:57:63:4c:e6:33:1d:32:a1:e6:36:73:08: e9:e4:bc:5e:d8:ac:75:13:75:b9:54:fc:ee:46:dc: 12:c8:ad:a2:f9:6a:83:72:a5:b4:70:32:c7:d4:49: 45:f1:59:27:8e:ef:60:95:a0:25:06:55:29:90:cf: 4c:e3:16:68:e8:27:20:b5:a9:0f:74:1a:6f:51:69: 2d:f5:1a:a4:f9:02:30:0b:50:c5:80:4e:71:ec:eb: cf:12:3d:d2:1d:19:5c:e7:bf:f1:cf:f3:4f:e8:90: 6c:c2:a1:72:48:f1:da:93:1e:73:8c:1b:61:af:63: b5:e2:32:d0:b5:fa:7c:6d:56:e0:2f:11:6f:9f:99: f3:6b:c2:32:e2:4a:03:bc:d1:43:ca:44:7d:31:46: c7:55:2d:47:f3:a3:e7:6d:af:3a:b0:95:ac:01:eb: 72:3a:20:88:9f:1a:5d:5d:2d:aa:56:17:a9:eb:f3: c6:68:ce:bc:3e:d8:bb:d5:cf:29:06:34:7b:2e:c1: 3e:91:e2:1f:1e:18:0f:01:50:7d:80:f7:fe:0b:7a: 18:89:5a:d1:34:20:36:77:2b:db:03:6f:ed:8f:1f: b5:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:7D:21:E7:66:15:A1:C7:D5:7B:46:14:66:60:8C:79:24:CE:0C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1c3836f9-1e40-31c9-aede-101ce576bf3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:25:b0:1b:f7:5d:c6:ac:7e:6c:2a:78:58:1c:6b:c4:90:b2: 92:7a:0f:0b:02:7f:75:33:b9:69:1e:e2:4a:89:ee:64:7c:b9: 03:8a:bd:6f:09:16:00:1d:2a:a2:eb:e3:b5:f2:d1:a8:88:06: a4:20:16:a6:29:72:7a:d9:93:ad:21:82:9a:e0:fb:23:4e:ca: b4:f3:7e:28:8d:b9:4d:14:53:90:a3:cc:75:9f:92:58:37:38: 18:93:f6:e4:2b:08:90:70:56:33:b3:d8:0b:9a:05:24:fd:69: 12:24:45:22:16:61:ea:0a:d8:b1:1e:70:5c:05:30:5b:96:48: de:c3:1b:91:dd:69:37:9f:41:52:3e:73:74:39:21:81:40:e9: 5f:56:ae:e0:1b:df:58:aa:24:63:44:76:24:b1:f7:9f:9a:65: 24:91:e1:fa:09:7f:fd:ef:7a:c9:23:6a:7a:2c:80:a3:59:28: ca:b0:d3:9f:7f:6c:22:54:31:14:60:4c:da:8b:4f:8a:a1:9f: 3c:ee:c0:14:24:fe:93:ea:70:98:d6:64:1b:8a:df:4e:76:a3: 5e:89:75:5f:29:b4:fd:41:3a:55:08:9d:b4:34:80:38:6b:a7: cb:aa:7c:60:6d:72:2b:b1:e2:07:bb:a2:74:e2:f4:97:c2:f1: 2b:af:58:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qmwpbvJJ0elatwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NjZhZTFlZDctN2YxZi00MWEwLWJkYmUtZWFjNGY3MTdkMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAC+4bUEgVqsbr5Wyf57YYaWC/hJx5oVZKvx QQMLocJXY0zmMx0yoeY2cwjp5Lxe2Kx1E3W5VPzuRtwSyK2i+WqDcqW0cDLH1ElF 8Vknju9glaAlBlUpkM9M4xZo6CcgtakPdBpvUWkt9Rqk+QIwC1DFgE5x7OvPEj3S HRlc57/xz/NP6JBswqFySPHakx5zjBthr2O14jLQtfp8bVbgLxFvn5nza8Iy4koD vNFDykR9MUbHVS1H86Pnba86sJWsAetyOiCInxpdXS2qVhep6/PGaM68Pti71c8p BjR7LsE+keIfHhgPAVB9gPf+C3oYiVrRNCA2dyvbA2/tjx+1GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOh9IedmFaHH1XtGFGZgjHkkzgweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWMzODM2ZjktMWU0MC0z MWM5LWFlZGUtMTAxY2U1NzZiZjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJUlsBv3XcasfmwqeFgca8SQspJ6DwsCf3UzuWke4kqJ7mR8uQOKvW8J FgAdKqLr47Xy0aiIBqQgFqYpcnrZk60hgprg+yNOyrTzfiiNuU0UU5CjzHWfklg3 OBiT9uQrCJBwVjOz2AuaBST9aRIkRSIWYeoK2LEecFwFMFuWSN7DG5HdaTefQVI+ c3Q5IYFA6V9WruAb31iqJGNEdiSx95+aZSSR4foJf/3veskjanosgKNZKMqw059/ bCJUMRRgTNqLT4qhnzzuwBQk/pPqcJjWZBuK3052o16JdV8ptP1BOlUInbQ0gDhr p8uqfGBtciux4ge7onTi9JfC8SuvWGU= -----END CERTIFICATE-----Generated at Sun Jun 29 15:56:37 2025 by rpki-client