$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa File: 3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa (raw, json) Hash identifier: Wkzp8ted02Ty81DLGwZw+T1m8tvivQFNgSbA3vEGkrw= Subject key identifier: 5A:22:AB:88:F6:C0:37:E4:86:FB:C4:25:63:84:87:A0:11:A7:6A:C4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC17F0D75790DCDA4B480 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.162.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c1:7f:0d:75:79:0d:cd:a4:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=3a31df35-b87c-4721-9cd6-d13012814736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:e8:d6:ae:7f:d5:08:8e:b7:5b:46:25:13: e2:b8:63:36:b9:67:da:2c:c7:8d:ea:7e:ec:f1:56: b6:57:47:f4:85:26:67:f4:97:e4:58:ba:db:63:43: 15:f3:42:84:d3:ed:8e:18:8a:48:3c:fa:15:a8:da: 4c:60:eb:36:68:b2:b6:7b:cb:41:c9:9a:97:df:2a: b7:1d:de:d7:25:ce:af:83:19:6d:cd:86:05:78:df: 51:45:09:c4:bf:b6:5e:1e:fc:cb:25:f0:52:79:49: 9b:47:12:4e:cc:30:38:67:63:77:ec:39:33:67:2c: ed:88:25:37:7d:69:aa:bc:4f:f7:bb:37:7e:84:3c: 74:7e:7f:4c:1f:97:cb:23:37:df:e9:5f:22:e9:80: 56:d0:08:5e:75:ea:53:76:b5:05:e6:24:45:8a:8d: 75:71:27:0a:63:d4:dd:cf:ac:62:aa:c4:83:a5:c4: 21:11:89:6e:c2:17:c8:c9:a8:e4:3a:5a:4e:49:50: 2a:44:18:5f:70:fb:55:9b:87:b0:f1:0c:de:0c:a1: 83:bc:09:08:29:33:2b:b4:7f:f8:bd:e9:5f:ba:39: e8:ed:b0:bc:63:89:48:8d:2b:de:20:da:4a:8b:27: cb:d7:18:87:be:39:dc:55:1d:cb:e1:07:df:d7:47: 25:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:22:AB:88:F6:C0:37:E4:86:FB:C4:25:63:84:87:A0:11:A7:6A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3bb3e20f-00e6-37fe-ba30-5a49ac29c508.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.162.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:cd:b8:49:7a:3a:7b:1e:3a:06:7c:2f:a2:99:41:a7:af:04: d2:f0:48:1e:09:db:9f:7f:01:8d:33:3c:24:61:06:de:80:7c: 87:dd:80:02:17:b2:d2:d1:1b:41:68:1b:45:05:d8:fc:13:3b: f7:4c:29:42:db:35:1e:15:02:21:ca:78:92:79:5d:d4:82:93: 33:a4:d5:23:9d:a8:d9:4d:03:b9:f9:81:05:8b:f0:1e:91:3d: 2b:2c:1a:2d:bf:24:4d:87:47:27:90:7a:c0:f6:42:92:7e:4c: df:21:92:56:8c:b9:2e:0a:7b:d0:c1:21:82:d7:88:4d:2a:e5: 4c:1e:71:98:11:62:73:5e:6a:55:4f:91:6a:67:32:0c:26:09: 31:43:9b:c9:a7:02:c3:c8:85:c5:2a:f6:1d:1f:27:74:94:ac: 74:b3:61:33:a7:f8:7c:62:1f:01:5b:e5:87:93:a1:59:dc:61: d5:6d:17:37:d8:c3:38:23:ca:31:af:f3:c3:b5:54:09:77:ca: af:c9:e8:8f:e6:1e:3c:83:e0:79:f7:8c:fd:60:41:8b:0a:29: f8:9a:18:f1:95:16:60:75:5b:56:95:4a:f3:d8:3d:f5:1a:33: af:87:77:a4:5a:fd:63:ad:a7:19:53:88:4f:3e:ea:15:d4:ec: 65:33:07:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538F/DXV5Dc2ktIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk M2EzMWRmMzUtYjg3Yy00NzIxLTljZDYtZDEzMDEyODE0NzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKjo1q5/1QiOt1tGJRPiuGM2uWfaLMeN6n7s 8Va2V0f0hSZn9JfkWLrbY0MV80KE0+2OGIpIPPoVqNpMYOs2aLK2e8tByZqX3yq3 Hd7XJc6vgxltzYYFeN9RRQnEv7ZeHvzLJfBSeUmbRxJOzDA4Z2N37DkzZyztiCU3 fWmqvE/3uzd+hDx0fn9MH5fLIzff6V8i6YBW0AhedepTdrUF5iRFio11cScKY9Td z6xiqsSDpcQhEYluwhfIyajkOlpOSVAqRBhfcPtVm4ew8QzeDKGDvAkIKTMrtH/4 velfujno7bC8Y4lIjSveINpKiyfL1xiHvjncVR3L4Qff10cldQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFoiq4j2wDfkhvvEJWOEh6ARp2rEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2JiM2UyMGYtMDBlNi0z N2ZlLWJhMzAtNWE0OWFjMjljNTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKPNuEl6OnseOgZ8L6KZQaevBNLwSB4J259/AY0zPCRhBt6AfIfdgAIX stLRG0FoG0UF2PwTO/dMKULbNR4VAiHKeJJ5XdSCkzOk1SOdqNlNA7n5gQWL8B6R PSssGi2/JE2HRyeQesD2QpJ+TN8hklaMuS4Ke9DBIYLXiE0q5UwecZgRYnNealVP kWpnMgwmCTFDm8mnAsPIhcUq9h0fJ3SUrHSzYTOn+HxiHwFb5YeToVncYdVtFzfY wzgjyjGv88O1VAl3yq/J6I/mHjyD4Hn3jP1gQYsKKfiaGPGVFmB1W1aVSvPYPfUa M6+Hd6Ra/WOtpxlTiE8+6hXU7GUzByI= -----END CERTIFICATE-----Generated at Sun Jun 29 17:10:19 2025 by rpki-client