$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a43bd2c-cd79-35b5-b5a4-1435339a8401.roa File: 6a43bd2c-cd79-35b5-b5a4-1435339a8401.roa (raw, json) Hash identifier: myXZ1eqE3tTvbTxbcVHP6yG96Rgyzq1wfsQ2GlJCzW0= Subject key identifier: 0B:40:38:AB:B0:42:92:92:14:83:84:4B:61:4F:C0:3B:DE:CA:8E:36 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F87A7E5743401437C1AAEBE0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a43bd2c-cd79-35b5-b5a4-1435339a8401.roa Signing time: Sun 25 May 2025 13:01:02 +0000 ROA not before: Sun 25 May 2025 13:01:02 +0000 ROA not after: Sat 23 Aug 2025 13:01:02 +0000 asID: 8987 IP address blocks: 130.137.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f8:7a:7e:57:43:40:14:37:c1:aa:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 25 13:01:02 2025 GMT Not After : Aug 23 13:01:02 2025 GMT Subject: CN=9ca8de35-4ada-4bb1-a163-128b94674d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:9c:4b:6b:bb:4b:54:15:a5:a1:72:35:88:0b: d7:08:ff:0b:2e:3a:f3:d5:43:48:0d:9e:0e:28:6d: 5a:f4:a9:4a:4b:0b:33:c0:3d:74:96:2a:c3:2f:13: 9b:c3:43:36:70:06:96:ae:c7:ac:51:65:ad:3a:15: e4:77:52:94:66:98:81:c7:c7:67:ae:6e:23:3b:a1: ba:48:ee:eb:8c:cc:9e:26:c9:4f:97:14:23:af:16: 2a:0a:9a:47:8b:2d:4c:8a:53:1a:e8:93:b2:45:d7: 04:ac:6c:84:0f:cc:52:1d:f3:99:73:bb:6c:35:45: 41:c0:7e:9a:96:92:f7:66:f5:26:61:2c:26:71:37: 05:4f:0b:ae:d4:82:2b:60:f5:37:9a:34:d9:fb:3c: ed:e8:40:50:ad:00:be:f3:90:b4:90:fc:00:1a:8a: 8b:36:0b:6f:50:ae:bb:35:61:c0:bc:39:34:7a:e1: 49:d1:e7:50:20:9a:75:b7:03:60:3d:89:bc:e9:17: ed:b2:11:6b:08:20:fb:97:7b:ea:9e:4f:78:8f:be: f3:e2:e3:7e:85:08:33:a0:40:f0:b9:3e:5d:17:63: b0:4e:8d:ad:09:d5:74:f9:b5:4b:33:26:54:c2:cf: 37:fc:d9:ca:4b:5d:8c:70:4b:77:04:21:48:71:0b: d9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:40:38:AB:B0:42:92:92:14:83:84:4B:61:4F:C0:3B:DE:CA:8E:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/6a43bd2c-cd79-35b5-b5a4-1435339a8401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:fb:aa:7e:07:67:3e:b4:f8:e3:81:31:a5:6b:d3:3d:a8:d5: 06:c4:df:13:50:b9:cc:25:24:cf:4b:e2:42:d7:d8:2e:64:4e: ec:bd:98:70:3a:fa:d3:f2:64:e9:03:53:2f:35:7e:0b:2c:38: 1f:48:03:e9:2c:69:24:11:78:ef:2c:5a:e1:6c:3f:4a:fc:f5: d7:02:67:fc:d1:21:e1:0c:9e:00:b6:0f:65:da:0e:d2:34:46: ea:fb:ce:48:fe:a6:4d:a7:2d:ca:6b:73:46:7f:4f:8b:c6:32: 16:f9:86:55:b5:15:eb:69:4a:b9:fa:03:3e:e3:78:a5:ac:87: 7d:00:01:a0:d4:eb:31:f0:08:f5:da:82:59:f0:d1:86:b6:8d: 8d:7b:d6:5d:ea:be:44:35:2c:2d:db:c1:69:4b:0f:12:62:99: 8b:be:99:82:64:21:0d:08:a0:ae:69:9a:53:98:89:f6:fa:66: ca:83:dc:5f:1d:f5:65:75:ba:56:91:bf:60:8e:f3:76:9e:e3: 04:0b:96:65:bd:f7:b3:9a:27:29:ba:39:d5:d0:b5:79:da:ec: 31:07:40:1e:05:34:65:ac:f1:bb:01:8e:71:06:b4:19:9a:f4: 01:c8:b7:46:19:ef:12:6e:50:41:2b:c4:e7:4a:db:70:5c:dc: 31:95:2f:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn4en5XQ0AUN8Gq6+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNTEzMDEwMloXDTI1MDgyMzEzMDEwMlowLzEtMCsGA1UEAxMk OWNhOGRlMzUtNGFkYS00YmIxLWExNjMtMTI4Yjk0Njc0ZDE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZxLa7tLVBWloXI1iAvXCP8LLjrz1UNIDZ4O KG1a9KlKSwszwD10lirDLxObw0M2cAaWrsesUWWtOhXkd1KUZpiBx8dnrm4jO6G6 SO7rjMyeJslPlxQjrxYqCppHiy1MilMa6JOyRdcErGyED8xSHfOZc7tsNUVBwH6a lpL3ZvUmYSwmcTcFTwuu1IIrYPU3mjTZ+zzt6EBQrQC+85C0kPwAGoqLNgtvUK67 NWHAvDk0euFJ0edQIJp1twNgPYm86RftshFrCCD7l3vqnk94j77z4uN+hQgzoEDw uT5dF2OwTo2tCdV0+bVLMyZUws83/NnKS12McEt3BCFIcQvZBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtAOKuwQpKSFIOES2FPwDveyo42MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNmE0M2JkMmMtY2Q3OS0z NWI1LWI1YTQtMTQzNTMzOWE4NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/7qn4HZz60+OOBMaVr0z2o1QbE3xNQucwlJM9L4kLX2C5kTuy9mHA6 +tPyZOkDUy81fgssOB9IA+ksaSQReO8sWuFsP0r89dcCZ/zRIeEMngC2D2XaDtI0 Rur7zkj+pk2nLcprc0Z/T4vGMhb5hlW1FetpSrn6Az7jeKWsh30AAaDU6zHwCPXa glnw0Ya2jY171l3qvkQ1LC3bwWlLDxJimYu+mYJkIQ0IoK5pmlOYifb6ZsqD3F8d 9WV1ulaRv2CO83ae4wQLlmW997OaJym6OdXQtXna7DEHQB4FNGWs8bsBjnEGtBma 9AHIt0YZ7xJuUEErxOdK23Bc3DGVL0Q= -----END CERTIFICATE-----Generated at Sun Jun 29 16:11:48 2025 by rpki-client