$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa File: 0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa (raw, json) Hash identifier: oEFr/HcO0R1+w15jOvyuFRl6jKwLS/sH2nE/OxrFIwU= Subject key identifier: AF:6F:E3:00:9B:60:50:CF:78:9F:42:D5:5B:57:A1:2F:35:03:B9:79 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849D594E083C0A41E856A35E2C0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 16509 IP address blocks: 130.137.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:e0:83:c0:a4:1e:85:6a:35:e2:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=aa074633-8d07-4bd1-b58a-a4b5f3983c30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:c5:23:f9:38:c2:8d:9f:ba:b9:50:65:b0: d1:86:19:f6:03:de:f8:b1:70:6c:82:2f:85:87:ec: a2:2b:48:5d:5b:05:90:e2:47:3c:14:a8:29:04:d0: bb:fc:8d:21:96:5c:3e:b9:d1:d0:bb:e7:00:4c:5d: 18:a5:ee:d7:3e:e0:e5:1f:45:56:be:c3:06:24:3e: c1:ad:f9:cc:f1:4b:68:0e:7e:87:3c:75:81:fb:36: 07:7c:78:2a:3b:c5:3d:76:3d:0c:50:de:a6:bb:11: 7b:ee:23:fa:78:19:4a:f5:d7:10:54:2a:ec:5b:d3: 98:ee:8d:bd:8d:32:5c:de:04:3e:fd:e5:77:59:99: d2:26:f7:17:94:2e:15:e8:4a:d9:67:37:f5:94:c2: eb:35:2a:73:e5:62:31:cf:09:22:f4:10:23:96:e9: 10:ae:01:89:6f:9f:d1:9b:5d:dd:99:6c:a5:51:e7: b1:e3:69:98:b5:5f:e1:8c:5b:84:7b:5e:ca:c7:e8: d9:d7:2e:d7:71:6f:50:bf:3f:d3:41:39:f3:21:e3: 72:e8:5b:c8:52:6b:00:b0:32:a2:7c:d5:70:f4:a4: 5f:b3:92:a0:f5:eb:95:fc:e8:85:b4:03:b3:65:ec: e3:6b:b8:bd:01:ec:7b:58:5f:68:a9:c5:89:ce:9f: 6d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6F:E3:00:9B:60:50:CF:78:9F:42:D5:5B:57:A1:2F:35:03:B9:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0e2da0d5-6f64-3036-86df-24cd7d9f3c97.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:93:75:dc:ea:1f:e8:d6:6b:6b:0f:92:b8:c8:22:8b:bb:79: 55:50:19:bd:88:2d:f3:7e:d1:5c:75:0f:64:df:98:a8:ed:d5: f6:67:6c:c8:a3:61:c2:aa:32:5b:de:2e:4c:a1:fe:96:5e:6c: f9:30:5e:b8:d1:ab:ec:7a:6b:8b:0a:ed:e9:e6:a4:8f:90:43: 21:67:ad:7a:c0:00:0e:47:91:8c:35:84:13:76:de:75:2d:3f: 58:90:c0:b0:20:82:5a:ff:68:2c:9f:cd:5a:43:2f:ab:94:2b: 5f:c8:c7:ce:d0:18:ed:80:11:2b:b0:f0:58:46:5d:f8:57:a2: d3:a2:10:62:40:b1:24:94:76:3b:43:8d:2f:1d:2d:a7:7d:e8: cf:f2:ec:9d:e9:5e:ee:73:a4:5a:05:fc:7b:8f:69:7f:b3:13: 2f:c4:bd:de:34:a5:7d:ee:87:95:6a:17:fc:02:7f:5e:5c:1c: bb:eb:83:38:95:03:c7:a9:6a:5f:2e:0b:51:fa:82:e2:94:84: 96:d6:dd:93:56:00:21:b9:0c:66:53:24:c4:da:fd:a6:32:48: fe:1b:37:45:1a:b2:24:29:09:a6:6b:2c:db:c9:c9:05:3f:5e: ff:fa:72:88:00:42:99:24:e7:79:e6:aa:1a:2e:fa:c7:3a:a5: d8:fd:25:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnVlOCDwKQehWo14sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk YWEwNzQ2MzMtOGQwNy00YmQxLWI1OGEtYTRiNWYzOTgzYzMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42bFI/k4wo2furlQZbDRhhn2A974sXBsgi+F h+yiK0hdWwWQ4kc8FKgpBNC7/I0hllw+udHQu+cATF0Ype7XPuDlH0VWvsMGJD7B rfnM8UtoDn6HPHWB+zYHfHgqO8U9dj0MUN6muxF77iP6eBlK9dcQVCrsW9OY7o29 jTJc3gQ+/eV3WZnSJvcXlC4V6ErZZzf1lMLrNSpz5WIxzwki9BAjlukQrgGJb5/R m13dmWylUeex42mYtV/hjFuEe17Kx+jZ1y7XcW9Qvz/TQTnzIeNy6FvIUmsAsDKi fNVw9KRfs5Kg9euV/OiFtAOzZezja7i9Aex7WF9oqcWJzp9t6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9v4wCbYFDPeJ9C1VtXoS81A7l5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGUyZGEwZDUtNmY2NC0z MDM2LTg2ZGYtMjRjZDdkOWYzYzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgolYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCTddzqH+jWa2sPkrjIIou7eVVQGb2ILfN+0Vx1D2TfmKjt1fZnbMij YcKqMlveLkyh/pZebPkwXrjRq+x6a4sK7enmpI+QQyFnrXrAAA5HkYw1hBN23nUt P1iQwLAgglr/aCyfzVpDL6uUK1/Ix87QGO2AESuw8FhGXfhXotOiEGJAsSSUdjtD jS8dLad96M/y7J3pXu5zpFoF/HuPaX+zEy/Evd40pX3uh5VqF/wCf15cHLvrgziV A8epal8uC1H6guKUhJbW3ZNWACG5DGZTJMTa/aYySP4bN0UasiQpCaZrLNvJyQU/ Xv/6cogAQpkk53nmqhou+sc6pdj9Jfg= -----END CERTIFICATE-----Generated at Sat Jun 14 06:14:07 2025 by rpki-client