$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa File: 9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa (raw, json) Hash identifier: wFsAK1owRQx2v0LrGBjHumgyfpsTb1EFtYxLpUMvlV8= Subject key identifier: 9D:92:C6:30:1E:C9:21:DE:32:55:8E:3A:78:AA:53:60:90:E8:79:F2 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA714A683496C53BBDEE80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:71:4a:68:34:96:c5:3b:bd:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=3c0cc98e-fb54-4c8d-93a4-14e37787dec6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:a6:a8:9b:b4:5d:92:51:56:f9:94:28:00: db:11:6f:eb:a0:16:5e:49:de:2a:50:01:6f:a1:1b: 49:8a:67:79:32:23:e8:2b:bf:a8:2d:a6:ad:f4:b3: 1a:e7:7d:7c:bd:5c:fb:a4:e4:65:b8:ca:d8:cd:7f: f2:07:c6:6e:42:e4:59:ee:1e:53:0f:aa:3d:27:76: 9c:15:2f:d8:d4:99:fd:ca:af:92:84:28:c4:c8:70: ac:1c:43:12:b3:c5:27:5d:1b:70:43:b5:8a:bb:08: 07:9a:8d:d9:5d:1a:e6:05:98:b0:73:47:8e:0c:8b: 44:cc:bc:58:d1:47:83:7e:a3:4b:b1:91:8a:75:ad: ab:02:97:70:c0:e2:f1:10:1f:f7:66:3c:36:7c:2b: 5e:aa:74:2a:83:23:c4:f5:b6:fe:84:74:f2:46:da: 47:eb:35:7a:a3:c5:92:8f:fa:74:9f:be:ad:16:0b: 5b:9d:a2:1c:2f:f3:a0:48:3f:33:86:a0:49:44:e1: ad:80:99:65:32:65:d5:8c:9d:66:b7:22:c7:af:0a: ca:b4:bc:43:ca:82:83:cd:93:a7:74:ba:6c:98:3d: b2:38:3a:19:59:9a:b3:39:bc:05:86:c2:2e:b2:5d: 4f:c2:12:6a:78:93:0d:8f:04:d7:68:8f:e7:2e:d0: 14:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:92:C6:30:1E:C9:21:DE:32:55:8E:3A:78:AA:53:60:90:E8:79:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9d6db1af-8822-3943-a0c2-1d8f40f8f19a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:20:69:81:2c:3b:c7:9b:94:d1:e0:4c:68:ff:2f:e9:26:d3: f2:a7:88:c6:8a:bf:89:e1:d4:77:ea:a4:6f:2d:ab:fd:92:3a: ad:1e:e0:98:0b:80:ef:9d:2d:5b:df:08:fa:85:d6:0c:0a:8b: 42:5a:13:81:80:39:ca:f5:63:9a:94:15:45:ac:80:a0:3b:5a: f0:15:91:a7:86:5e:f1:58:1b:9a:48:e5:d3:fb:a8:ab:43:72: 70:95:41:45:0a:30:10:02:e4:92:a4:ff:73:bf:be:53:62:0d: db:fe:75:d0:2b:61:12:f7:33:ff:e7:e8:5f:7b:09:2c:78:78: 30:e9:bd:24:f1:f1:dd:93:a0:bf:e7:c6:e5:2f:7e:49:a3:ce: d7:57:de:a4:42:bc:23:d3:d7:51:56:fc:22:d0:50:71:6e:72: 8f:c7:4b:fa:b3:28:28:69:f4:db:fd:eb:84:b8:d8:2d:90:17: de:0e:f9:fb:a4:00:ab:5f:68:fa:f5:cb:c5:07:39:e2:b7:29: 50:25:f2:7d:f9:a5:06:5f:f2:1c:1a:ce:04:b4:d9:59:97:ad: b6:22:0e:83:da:d0:48:a7:66:8c:98:ef:2b:af:13:16:69:c8: e6:9e:34:e5:fd:37:e8:2f:99:f3:58:a8:b5:3b:63:1e:f8:12: a8:1b:8f:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnFKaDSWxTu97oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk M2MwY2M5OGUtZmI1NC00YzhkLTkzYTQtMTRlMzc3ODdkZWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNSmqJu0XZJRVvmUKADbEW/roBZeSd4qUAFv oRtJimd5MiPoK7+oLaat9LMa5318vVz7pORluMrYzX/yB8ZuQuRZ7h5TD6o9J3ac FS/Y1Jn9yq+ShCjEyHCsHEMSs8UnXRtwQ7WKuwgHmo3ZXRrmBZiwc0eODItEzLxY 0UeDfqNLsZGKda2rApdwwOLxEB/3Zjw2fCteqnQqgyPE9bb+hHTyRtpH6zV6o8WS j/p0n76tFgtbnaIcL/OgSD8zhqBJROGtgJllMmXVjJ1mtyLHrwrKtLxDyoKDzZOn dLpsmD2yODoZWZqzObwFhsIusl1PwhJqeJMNjwTXaI/nLtAU+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ2SxjAeySHeMlWOOniqU2CQ6HnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWQ2ZGIxYWYtODgyMi0z OTQzLWEwYzItMWQ4ZjQwZjhmMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8gaYEsO8eblNHgTGj/L+km0/KniMaKv4nh1HfqpG8tq/2SOq0e4JgL gO+dLVvfCPqF1gwKi0JaE4GAOcr1Y5qUFUWsgKA7WvAVkaeGXvFYG5pI5dP7qKtD cnCVQUUKMBAC5JKk/3O/vlNiDdv+ddArYRL3M//n6F97CSx4eDDpvSTx8d2ToL/n xuUvfkmjztdX3qRCvCPT11FW/CLQUHFuco/HS/qzKChp9Nv964S42C2QF94O+fuk AKtfaPr1y8UHOeK3KVAl8n35pQZf8hwazgS02VmXrbYiDoPa0EinZoyY7yuvExZp yOaeNOX9N+gvmfNYqLU7Yx74Eqgbj04= -----END CERTIFICATE-----Generated at Sun Jun 29 16:17:28 2025 by rpki-client