$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa File: 473c7c36-4556-38c3-9405-8bc9ecfdf684.roa (raw, json) Hash identifier: ugArrboM56xrDnIsDtRjJ/liogm40XBlzb+ArXbOHho= Subject key identifier: AB:6C:9E:F1:F8:48:BA:54:90:73:8B:FE:5D:E8:2A:F3:E1:AF:B4:09 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA6D353AB387E5EDD2B600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 14618 IP address blocks: 130.137.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6d:35:3a:b3:87:e5:ed:d2:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=1aa013d2-21d2-4032-a0ca-cdafa6feac5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:96:6e:0d:77:1f:d2:e3:0a:b4:d4:84:56:8c: 1a:cb:b2:51:e7:10:a9:39:08:0d:3b:24:67:e1:a4: 74:22:c2:ac:f2:61:d9:f7:ac:0e:c9:bc:55:ca:1e: 16:d8:38:56:e6:20:85:7e:1d:cb:fe:64:fb:f7:a5: a9:ed:31:5d:7a:98:03:0f:86:cb:66:a3:77:f1:de: 2e:6b:aa:1f:dc:0c:af:5e:89:e0:25:dc:66:02:b4: fa:90:38:d5:7a:b9:31:98:1a:2f:3c:2a:f0:a6:97: f4:9f:0d:02:ba:39:c6:a1:96:de:1b:8d:de:d5:d6: 3a:6e:36:d4:74:cb:4f:e6:30:46:83:f9:23:a6:cb: e1:10:08:d4:0a:ac:5a:f2:1c:80:58:f9:e4:33:c9: e2:5a:8b:ee:32:16:ac:d0:b4:92:fc:db:7c:a3:7c: 15:2c:f6:48:2c:9f:23:09:55:87:ae:f0:c7:06:19: a3:59:f1:4d:8e:b3:f0:a0:22:67:aa:ae:db:2b:00: d6:23:f9:ad:ff:bd:01:8e:35:ce:37:78:a4:26:b4: 49:62:e1:6b:c7:b2:ad:1f:39:33:17:53:e2:fb:30: 48:e6:2a:6a:9b:1f:e8:d8:82:51:6b:ca:03:36:f0: 40:44:a5:09:ce:0d:10:94:62:4a:1b:a7:43:0b:c9: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:6C:9E:F1:F8:48:BA:54:90:73:8B:FE:5D:E8:2A:F3:E1:AF:B4:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/473c7c36-4556-38c3-9405-8bc9ecfdf684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f7:f8:0f:69:f7:6d:b6:8d:51:14:34:9d:fa:d8:71:eb:63: b0:70:89:63:6b:62:43:98:6f:34:e1:74:5f:17:14:98:9a:42: 7f:89:62:b5:7a:b4:7a:50:c5:3c:cc:16:92:30:74:55:06:1c: df:3e:b6:47:f4:e6:73:10:b7:40:08:a6:67:c8:8e:a2:f9:20: 9b:4a:77:09:3b:f2:ed:e5:34:7c:74:74:52:f4:f0:68:8e:22: 90:11:d7:38:bd:6d:d7:44:93:17:ab:d5:4c:d4:b8:97:f6:11: dd:1e:72:97:35:0c:96:e2:bd:3d:b9:98:a1:32:d1:76:d0:90: 01:da:8e:06:34:c3:a9:2b:ff:99:1b:13:2f:54:93:1e:c2:0d: d8:88:18:58:cf:83:e5:29:e3:f8:e1:91:a2:7c:ee:3c:0c:da: 4e:bd:e5:71:3a:50:1a:c7:b1:67:33:0d:2a:e0:92:f1:66:c9: b4:a1:d4:94:e4:8c:8b:67:6b:ba:ed:a3:28:b9:3e:35:9b:06: 29:9a:4c:7e:4b:ce:c3:14:99:ed:f4:7d:23:14:bd:52:09:53: cc:09:a6:49:6d:cc:bd:8a:f7:84:16:f9:cd:77:ae:a7:70:07: 01:89:0a:2f:0a:eb:e7:f9:16:f5:b5:3e:27:42:51:fc:e9:af: b6:35:fd:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qm01OrOH5e3StgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MWFhMDEzZDItMjFkMi00MDMyLWEwY2EtY2RhZmE2ZmVhYzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopZuDXcf0uMKtNSEVoway7JR5xCpOQgNOyRn 4aR0IsKs8mHZ96wOybxVyh4W2DhW5iCFfh3L/mT796Wp7TFdepgDD4bLZqN38d4u a6of3AyvXongJdxmArT6kDjVerkxmBovPCrwppf0nw0CujnGoZbeG43e1dY6bjbU dMtP5jBGg/kjpsvhEAjUCqxa8hyAWPnkM8niWovuMhas0LSS/Nt8o3wVLPZILJ8j CVWHrvDHBhmjWfFNjrPwoCJnqq7bKwDWI/mt/70BjjXON3ikJrRJYuFrx7KtHzkz F1Pi+zBI5ipqmx/o2IJRa8oDNvBARKUJzg0QlGJKG6dDC8k0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtsnvH4SLpUkHOL/l3oKvPhr7QJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDczYzdjMzYtNDU1Ni0z OGMzLTk0MDUtOGJjOWVjZmRmNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD3+A9p9222jVEUNJ362HHrY7BwiWNrYkOYbzThdF8XFJiaQn+JYrV6 tHpQxTzMFpIwdFUGHN8+tkf05nMQt0AIpmfIjqL5IJtKdwk78u3lNHx0dFL08GiO IpAR1zi9bddEkxer1UzUuJf2Ed0ecpc1DJbivT25mKEy0XbQkAHajgY0w6kr/5kb Ey9Ukx7CDdiIGFjPg+Up4/jhkaJ87jwM2k695XE6UBrHsWczDSrgkvFmybSh1JTk jItna7rtoyi5PjWbBimaTH5LzsMUme30fSMUvVIJU8wJpkltzL2K94QW+c13rqdw BwGJCi8K6+f5FvW1PidCUfzpr7Y1/Qc= -----END CERTIFICATE-----Generated at Tue Jul 1 16:54:08 2025 by rpki-client