$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa File: 40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa (raw, json) Hash identifier: bYcLi2zZTu2H5+PkfInY0CTR9kXjhDt7cWZ3CvD44VI= Subject key identifier: 0F:7D:01:30:13:80:CD:29:86:13:2E:62:CF:D6:02:1A:92:61:DC:B3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F7151573C532E0BCDAE8A230 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 14618 IP address blocks: 130.137.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:15:73:c5:32:e0:bc:da:e8:a2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=4415d059-c096-424a-8667-bd0ad9ef6ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:92:7b:2d:24:ad:22:22:85:e9:b9:d3:52:43: 56:93:c2:19:95:91:88:c9:72:ba:15:4c:5a:bd:1c: 35:4d:55:de:6b:68:11:1f:b4:81:9b:6b:7f:5e:be: 27:c4:dd:98:8f:bb:42:73:24:d0:05:9b:8c:2c:cb: dc:54:80:21:db:0f:49:9e:d8:f2:09:ed:a9:11:f8: 56:98:05:7f:df:02:ea:c6:9d:57:f4:73:91:46:6e: 51:ea:7d:a5:60:92:81:58:73:c9:68:62:65:cd:e8: 17:d1:7c:ef:4a:26:ae:9f:61:d9:20:7a:22:41:53: d2:24:7d:87:2c:d5:5d:3f:87:44:6e:88:f9:dd:53: 8c:de:4e:78:60:ed:05:e4:90:29:b6:d0:c5:2b:06: 39:7a:48:7a:72:91:cd:af:37:a5:c4:0e:bf:8d:eb: 9c:67:73:69:60:60:71:42:55:d8:e1:0d:7d:54:c4: d7:08:70:f7:18:dd:aa:a7:1e:3b:0e:b4:e2:34:49: 10:10:32:d6:23:48:ad:30:01:ca:5a:70:d3:e7:64: 05:53:bf:7a:29:1d:45:f3:31:77:56:c3:9b:35:94: dd:55:ab:c0:dc:7a:95:00:aa:88:39:3c:d2:5f:d5: 8b:2c:98:1b:9d:5b:99:4b:38:7c:bd:f2:f9:a6:bd: 59:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:7D:01:30:13:80:CD:29:86:13:2E:62:CF:D6:02:1A:92:61:DC:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/40ce3a5f-21cf-3e37-9ea4-9d9a84ff9e4b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:ca:8c:24:ea:d5:81:21:a7:87:27:0e:48:3b:d9:5d:ac:e8: ae:b3:59:4d:b2:5a:7e:2f:c4:dc:73:5e:ba:d3:a2:de:05:55: 02:40:bf:83:1f:eb:0d:8d:1c:88:c2:b3:fe:f3:26:8b:fd:bb: 20:8e:ea:c2:b6:c8:5b:aa:eb:cc:ba:30:09:a0:1e:ca:5d:18: fe:7f:b5:b7:e2:a4:e4:a5:c5:a9:cd:9e:9b:85:cf:25:c5:b0: f3:fc:00:3d:89:c8:4a:45:34:d3:7c:6a:c1:56:89:97:c7:4d: 13:7e:89:76:3b:b3:6b:19:54:84:95:8f:ec:29:1a:c6:48:c3: 32:cb:d6:f2:18:ec:e8:a7:6e:ed:8a:b8:f1:fb:b2:f3:b4:74: 76:06:5f:ed:d4:35:22:0a:95:1c:19:08:f6:23:e1:68:86:b9: f4:c7:30:52:24:44:8f:82:ac:e0:75:fb:af:14:cf:8b:85:0e: 28:a3:23:b5:52:de:bc:89:92:d3:9e:f4:b5:ba:e8:86:82:c8: 2c:85:ec:30:65:8a:a2:62:ab:c1:1e:fc:e3:99:1c:77:5e:9e: a4:7f:07:88:b9:31:18:d1:42:90:54:eb:ac:59:17:de:24:74: c4:df:16:c6:53:62:b1:5c:fc:02:c8:59:69:49:ef:63:72:05: 4c:d6:d6:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRVzxTLgvNroojAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk NDQxNWQwNTktYzA5Ni00MjRhLTg2NjctYmQwYWQ5ZWY2YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJJ7LSStIiKF6bnTUkNWk8IZlZGIyXK6FUxa vRw1TVXea2gRH7SBm2t/Xr4nxN2Yj7tCcyTQBZuMLMvcVIAh2w9JntjyCe2pEfhW mAV/3wLqxp1X9HORRm5R6n2lYJKBWHPJaGJlzegX0XzvSiaun2HZIHoiQVPSJH2H LNVdP4dEboj53VOM3k54YO0F5JApttDFKwY5ekh6cpHNrzelxA6/jeucZ3NpYGBx QlXY4Q19VMTXCHD3GN2qpx47DrTiNEkQEDLWI0itMAHKWnDT52QFU796KR1F8zF3 VsObNZTdVavA3HqVAKqIOTzSX9WLLJgbnVuZSzh8vfL5pr1ZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA99ATATgM0phhMuYs/WAhqSYdyzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDBjZTNhNWYtMjFjZi0z ZTM3LTllYTQtOWQ5YTg0ZmY5ZTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErKjCTq1YEhp4cnDkg72V2s6K6zWU2yWn4vxNxzXrrTot4FVQJAv4Mf 6w2NHIjCs/7zJov9uyCO6sK2yFuq68y6MAmgHspdGP5/tbfipOSlxanNnpuFzyXF sPP8AD2JyEpFNNN8asFWiZfHTRN+iXY7s2sZVISVj+wpGsZIwzLL1vIY7Oinbu2K uPH7svO0dHYGX+3UNSIKlRwZCPYj4WiGufTHMFIkRI+CrOB1+68Uz4uFDiijI7VS 3ryJktOe9LW66IaCyCyF7DBliqJiq8Ee/OOZHHdenqR/B4i5MRjRQpBU66xZF94k dMTfFsZTYrFc/ALIWWlJ72NyBUzW1v0= -----END CERTIFICATE-----Generated at Sun Jun 29 15:51:01 2025 by rpki-client