$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8cde7481-e9ee-32b8-aa5a-7fab5685aa65.roa File: 8cde7481-e9ee-32b8-aa5a-7fab5685aa65.roa (raw, json) Hash identifier: 3+tYRz/FVNWRoIuGYtf+kzXY4WpGvcjqt3Nc2rbK7rA= Subject key identifier: C9:3A:BF:89:80:8C:D2:B4:B2:C2:B2:A6:BB:9C:52:7B:34:C4:60:2E Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC1461F4C24BD038C8800 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8cde7481-e9ee-32b8-aa5a-7fab5685aa65.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c1:46:1f:4c:24:bd:03:8c:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=729e3cfa-cfb3-4883-add0-0bc16a8801fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:26:cf:a8:e6:78:aa:50:6b:7b:4e:c5:e1:ba: 3b:cb:1b:8d:e5:75:ff:b7:7d:67:94:6f:5c:ae:a2: 9b:0c:8d:b2:f5:65:f4:08:9d:19:ab:ba:8a:05:c1: 74:2d:7a:4b:8a:ef:92:fa:b3:ad:06:fd:83:00:58: 1b:95:92:8a:c7:57:34:42:bc:25:53:17:9a:6d:9c: d6:1e:e7:65:9d:46:37:fa:08:79:29:e7:30:a6:7d: 70:d5:e7:4e:ae:e9:55:c1:63:c5:fe:d2:34:b1:49: 1e:b5:03:3f:08:53:77:0b:29:80:a7:5e:1e:c5:4e: 06:f8:39:cd:13:55:ae:ce:e6:66:79:d6:f8:e7:58: 37:84:72:e0:f3:9d:c2:ad:51:1b:85:65:54:7b:7f: c2:78:5d:28:18:11:b9:da:5c:09:95:36:65:6b:d1: ed:b8:6f:9d:68:68:2b:54:b3:fd:a2:bc:f3:76:ef: 69:e0:93:6b:74:cf:53:07:70:28:02:66:b4:5d:c9: 6a:78:cf:ce:d6:ca:7e:7a:9d:5f:f6:00:fb:71:f9: 08:2e:bf:70:fa:79:ac:54:d1:51:3e:5e:48:70:1c: b5:cd:f7:c0:f9:dd:b3:d9:fa:80:3a:21:ac:c0:f7: 76:4f:fa:9f:33:8b:9a:cd:d8:90:ce:ed:e3:6b:76: 91:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:3A:BF:89:80:8C:D2:B4:B2:C2:B2:A6:BB:9C:52:7B:34:C4:60:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/8cde7481-e9ee-32b8-aa5a-7fab5685aa65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:57:61:1d:e5:51:2d:0a:15:75:e1:a9:f7:a9:c6:89:84:6d: 64:a5:8c:27:d2:46:37:8f:58:74:9f:52:85:3e:af:dd:86:b5: 7c:d7:6c:21:d3:22:fc:bd:3f:6c:3b:85:ca:a7:da:65:99:e3: 82:87:40:9a:7b:fd:f7:20:47:77:4f:0a:81:fd:d2:4b:18:4a: 69:86:4e:04:bc:cf:12:47:3a:ac:dd:f5:42:fc:70:1f:e4:0a: 0b:3a:29:15:6e:cc:13:36:a5:9c:44:02:3f:05:17:f0:e4:43: 36:6b:cd:81:a6:75:cf:e3:49:30:1f:62:45:18:9f:b7:83:ab: a3:2e:a2:fc:9a:7b:ec:b0:fa:82:21:59:ab:11:44:ae:fb:4a: c6:9a:80:4b:98:85:59:b4:93:89:15:c8:0a:f8:6f:8f:de:28: c5:fc:f6:24:46:f1:9f:4b:54:4e:10:56:0e:7d:81:42:a1:fd: 29:ce:e9:64:b4:28:db:e9:6d:fa:eb:ce:f5:4e:b0:80:55:2d: c6:f2:53:c5:be:ba:e4:3a:29:b4:9a:a4:f0:67:17:a1:f9:2f: 4c:fd:4b:4f:1f:e2:21:97:9b:c0:b0:2a:8f:ec:ce:76:29:1f: 83:51:c1:35:d1:45:4b:3d:a0:43:65:b2:a6:47:86:7d:99:12: af:10:5f:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538FGH0wkvQOMiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NzI5ZTNjZmEtY2ZiMy00ODgzLWFkZDAtMGJjMTZhODgwMWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CbPqOZ4qlBre07F4bo7yxuN5XX/t31nlG9c rqKbDI2y9WX0CJ0Zq7qKBcF0LXpLiu+S+rOtBv2DAFgblZKKx1c0QrwlUxeabZzW HudlnUY3+gh5Kecwpn1w1edOrulVwWPF/tI0sUketQM/CFN3CymAp14exU4G+DnN E1WuzuZmedb451g3hHLg853CrVEbhWVUe3/CeF0oGBG52lwJlTZla9HtuG+daGgr VLP9orzzdu9p4JNrdM9TB3AoAma0XclqeM/O1sp+ep1f9gD7cfkILr9w+nmsVNFR Pl5IcBy1zffA+d2z2fqAOiGswPd2T/qfM4uazdiQzu3ja3aRJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMk6v4mAjNK0ssKyprucUns0xGAuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOGNkZTc0ODEtZTllZS0z MmI4LWFhNWEtN2ZhYjU2ODVhYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtXYR3lUS0KFXXhqfepxomEbWSljCfSRjePWHSfUoU+r92GtXzXbCHT Ivy9P2w7hcqn2mWZ44KHQJp7/fcgR3dPCoH90ksYSmmGTgS8zxJHOqzd9UL8cB/k Cgs6KRVuzBM2pZxEAj8FF/DkQzZrzYGmdc/jSTAfYkUYn7eDq6Muovyae+yw+oIh WasRRK77SsaagEuYhVm0k4kVyAr4b4/eKMX89iRG8Z9LVE4QVg59gUKh/SnO6WS0 KNvpbfrrzvVOsIBVLcbyU8W+uuQ6KbSapPBnF6H5L0z9S08f4iGXm8CwKo/sznYp H4NRwTXRRUs9oENlsqZHhn2ZEq8QX3A= -----END CERTIFICATE-----Generated at Sun Jun 29 15:58:55 2025 by rpki-client