$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa File: b8996c67-d2a0-38e3-a110-eaf29f117b40.roa (raw, json) Hash identifier: cHi5NGWlYo1opaRDgxAfNHOFMjSUh6ro0tbQM8hu9Ok= Subject key identifier: AB:3D:9C:63:3F:AE:46:5A:9B:2B:DB:D9:76:7F:97:F0:02:22:95:57 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA6BC378B0AA7BD5DDB064 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:6b:c3:78:b0:aa:7b:d5:dd:b0:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=53e274f9-bace-414c-8097-446e39929b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:81:68:3a:01:f8:61:fd:cd:e4:1b:88:f5:41: 01:3a:cb:87:d4:0f:61:6e:8c:00:88:2c:5c:98:15: 84:0a:a1:28:2b:90:1b:17:97:aa:91:3c:32:74:c7: 13:1a:ca:84:72:95:b2:1b:64:a0:d8:37:af:9f:c5: b5:68:05:ce:c1:7a:0a:02:96:89:70:a5:56:77:39: d7:0f:28:84:1d:71:5a:7f:2f:e0:24:e4:2c:d7:e5: 6c:dc:3b:8d:62:d5:aa:6f:3b:c8:57:fd:63:51:05: 3a:93:f0:4f:4e:82:48:8e:0c:27:60:0d:e7:56:8d: 1b:55:76:1c:6f:b5:35:95:bb:48:a6:49:dd:83:ce: c2:9b:ef:4d:87:37:49:57:62:ed:08:f9:49:68:15: f9:98:fa:74:41:fe:79:fb:b6:4a:be:36:8a:db:91: 38:e0:9e:48:02:0a:b7:87:33:c6:92:e8:7e:aa:b0: ca:a5:fd:92:7d:47:1d:29:49:7a:61:fa:4d:cd:91: d3:3b:a4:3c:59:6f:1e:8a:b4:1a:9c:59:89:b4:0a: 5e:e6:c2:bb:08:c4:9d:1c:19:65:63:07:82:60:02: cb:8e:ab:b1:00:fb:bc:e4:f7:bc:ce:c1:f4:bf:66: 1b:15:e3:a3:90:56:44:6b:8e:39:29:4e:d5:5c:c7: 02:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:3D:9C:63:3F:AE:46:5A:9B:2B:DB:D9:76:7F:97:F0:02:22:95:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b8996c67-d2a0-38e3-a110-eaf29f117b40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:48:a1:b7:a7:b5:a7:b8:1d:0d:24:b9:47:5e:64:7f:54:8c: 72:9e:90:32:ba:f3:32:95:c8:b5:b9:cb:1a:ef:69:7e:0d:0f: 23:41:ba:b8:d2:de:ab:26:0a:5f:98:06:43:62:ef:fb:30:06: 62:64:44:86:4b:8c:38:b7:16:33:14:97:d5:54:5b:42:bc:9a: 9c:ba:5b:23:fa:c8:a5:84:93:dc:50:4a:ee:bd:a8:1a:c7:0a: e2:f8:ce:d4:de:5d:6d:9f:b1:c4:50:37:97:f7:57:b5:85:0a: 5b:12:40:c8:7b:f1:40:f1:6b:08:6f:1c:7b:16:96:e5:bc:48: 48:2d:26:84:22:b3:32:a6:6b:ec:4e:04:47:fd:9f:32:0d:79: 86:3d:5a:fe:2a:a5:ca:6c:e1:f4:02:c2:e6:f6:89:de:24:07: 89:1a:4a:2e:2f:56:50:e9:04:c0:49:74:be:70:73:92:c6:15: fb:1a:fb:65:d8:88:0c:2d:fe:34:0c:93:c0:97:3e:db:b0:55: 0f:bd:9e:45:01:35:a6:2b:bd:9d:34:10:59:94:01:b4:96:7f: 48:83:0d:5a:52:d4:42:30:d5:63:cc:8a:47:8d:55:2b:2d:0a: c9:fc:46:89:a8:76:21:0e:40:08:ae:bd:47:9b:80:e7:57:38: 8a:a7:cf:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qmvDeLCqe9XdsGQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTNlMjc0ZjktYmFjZS00MTRjLTgwOTctNDQ2ZTM5OTI5YjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4FoOgH4Yf3N5BuI9UEBOsuH1A9hbowAiCxc mBWECqEoK5AbF5eqkTwydMcTGsqEcpWyG2Sg2Devn8W1aAXOwXoKApaJcKVWdznX DyiEHXFafy/gJOQs1+Vs3DuNYtWqbzvIV/1jUQU6k/BPToJIjgwnYA3nVo0bVXYc b7U1lbtIpkndg87Cm+9NhzdJV2LtCPlJaBX5mPp0Qf55+7ZKvjaK25E44J5IAgq3 hzPGkuh+qrDKpf2SfUcdKUl6YfpNzZHTO6Q8WW8eirQanFmJtApe5sK7CMSdHBll YweCYALLjquxAPu85Pe8zsH0v2YbFeOjkFZEa445KU7VXMcCfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKs9nGM/rkZamyvb2XZ/l/ACIpVXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYjg5OTZjNjctZDJhMC0z OGUzLWExMTAtZWFmMjlmMTE3YjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJIobentae4HQ0kuUdeZH9UjHKekDK68zKVyLW5yxrvaX4NDyNBurjS 3qsmCl+YBkNi7/swBmJkRIZLjDi3FjMUl9VUW0K8mpy6WyP6yKWEk9xQSu69qBrH CuL4ztTeXW2fscRQN5f3V7WFClsSQMh78UDxawhvHHsWluW8SEgtJoQiszKma+xO BEf9nzINeYY9Wv4qpcps4fQCwub2id4kB4kaSi4vVlDpBMBJdL5wc5LGFfsa+2XY iAwt/jQMk8CXPtuwVQ+9nkUBNaYrvZ00EFmUAbSWf0iDDVpS1EIw1WPMikeNVSst Csn8RomodiEOQAiuvUebgOdXOIqnz+Y= -----END CERTIFICATE-----Generated at Sun Jun 29 15:54:27 2025 by rpki-client