$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa File: ba55a1e4-2d79-3695-8442-96a538b35f02.roa (raw, json) Hash identifier: /jmV0QXrw7GkG7icbUgV6Ze61ILFFxtx5n9y6IDNGw8= Subject key identifier: 87:40:BD:C9:98:46:91:5C:89:E8:AC:E0:C2:29:03:A3:97:BB:11:72 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC2094675277AD4BE9F60 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c2:09:46:75:27:7a:d4:be:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=557c0a03-8a14-4912-af1b-9157acf12cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:25:26:cc:2d:33:40:32:23:d2:86:df:0e:8a: b7:2c:e5:94:95:0a:f5:6c:33:71:07:fb:83:6c:5d: 92:3a:a1:d0:de:5b:96:4d:fc:90:3b:e3:28:69:82: 44:cd:43:c2:e5:65:94:9c:b6:4d:d7:20:82:77:74: be:f3:5d:c2:74:e0:63:fe:e7:60:ea:a8:d4:85:a4: fc:7f:5b:1a:45:db:07:a1:67:fe:42:b6:5c:36:ee: 8d:ef:46:77:52:34:1e:e7:71:c6:9a:57:9a:93:da: a2:51:05:46:cd:6f:97:ac:3c:99:f5:4f:30:8a:24: d3:0d:92:dd:29:4d:cd:14:32:37:34:3c:f1:04:8c: a2:50:d5:3a:ec:5c:7b:9f:41:dc:c6:95:98:c7:01: 29:7a:5e:e4:f6:03:d3:81:c1:7d:17:68:17:04:8e: 83:b1:89:2f:03:43:73:41:8f:75:fb:4a:72:ae:e1: bb:d2:08:ad:e9:af:85:98:b6:52:2a:27:67:71:b5: 61:fb:26:9e:c8:9d:e5:9f:cb:a5:23:80:bd:b0:90: 91:4e:99:3a:a4:0d:a8:c3:49:8e:f6:bb:40:2f:52: c0:56:bd:f8:dc:db:d3:59:4e:96:57:d3:bd:da:63: 9c:52:f3:02:a2:d0:f7:c5:8f:ee:63:2e:e5:13:9d: bc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:40:BD:C9:98:46:91:5C:89:E8:AC:E0:C2:29:03:A3:97:BB:11:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ba55a1e4-2d79-3695-8442-96a538b35f02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:d1:52:a4:e5:89:0a:81:f9:cc:ae:87:5b:e8:23:8c:2f:8d: 6c:cb:50:7e:6c:8c:18:70:d8:46:af:d2:21:20:6a:cf:14:fc: 83:5c:6c:17:eb:c2:70:6a:1b:65:b4:02:8d:92:d6:77:eb:f1: b9:78:95:ab:14:14:92:1f:3c:0a:0d:2c:df:62:b1:0d:59:7a: 65:c2:81:4c:fd:87:fa:7a:f0:0b:94:c1:ae:e8:c9:17:0d:19: e3:ed:42:7d:d5:30:52:39:20:40:b3:dc:ae:1a:a1:1a:4c:a4: 41:0a:5b:c0:0c:8a:d8:92:79:5a:0d:e8:04:fd:07:57:17:ff: 49:59:67:46:8a:d2:cc:42:13:01:8a:b6:4b:25:b9:8d:d0:38: c7:e4:ba:50:97:df:40:c8:9c:28:34:d8:34:64:fa:20:06:76: 48:a0:cc:ae:ae:1b:84:b6:73:ca:f0:a9:11:0d:9c:15:10:06: 5b:58:d8:54:72:50:77:37:40:34:75:3e:50:21:b3:b0:4b:0a: 0b:38:ea:b7:18:6d:ff:f4:aa:0c:cb:81:1d:a9:88:f4:e8:8b: b2:93:14:69:71:de:6b:db:0d:a6:58:e3:4b:23:31:24:1e:d8: 41:48:21:08:6e:44:67:b4:8d:bc:be:79:4f:fb:4d:17:0c:db: bc:ad:54:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538IJRnUnetS+n2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NTU3YzBhMDMtOGExNC00OTEyLWFmMWItOTE1N2FjZjEyY2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiUmzC0zQDIj0obfDoq3LOWUlQr1bDNxB/uD bF2SOqHQ3luWTfyQO+MoaYJEzUPC5WWUnLZN1yCCd3S+813CdOBj/udg6qjUhaT8 f1saRdsHoWf+QrZcNu6N70Z3UjQe53HGmleak9qiUQVGzW+XrDyZ9U8wiiTTDZLd KU3NFDI3NDzxBIyiUNU67Fx7n0HcxpWYxwEpel7k9gPTgcF9F2gXBI6DsYkvA0Nz QY91+0pyruG70git6a+FmLZSKidncbVh+yaeyJ3ln8ulI4C9sJCRTpk6pA2ow0mO 9rtAL1LAVr343NvTWU6WV9O92mOcUvMCotD3xY/uYy7lE528/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdAvcmYRpFcieis4MIpA6OXuxFyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYmE1NWExZTQtMmQ3OS0z Njk1LTg0NDItOTZhNTM4YjM1ZjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB/RUqTliQqB+cyuh1voI4wvjWzLUH5sjBhw2Eav0iEgas8U/INcbBfr wnBqG2W0Ao2S1nfr8bl4lasUFJIfPAoNLN9isQ1ZemXCgUz9h/p68AuUwa7oyRcN GePtQn3VMFI5IECz3K4aoRpMpEEKW8AMitiSeVoN6AT9B1cX/0lZZ0aK0sxCEwGK tksluY3QOMfkulCX30DInCg02DRk+iAGdkigzK6uG4S2c8rwqRENnBUQBltY2FRy UHc3QDR1PlAhs7BLCgs46rcYbf/0qgzLgR2piPToi7KTFGlx3mvbDaZY40sjMSQe 2EFIIQhuRGe0jby+eU/7TRcM27ytVLA= -----END CERTIFICATE-----Generated at Sun Jun 29 16:16:07 2025 by rpki-client