$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa File: 0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa (raw, json) Hash identifier: rhagj5K0ic8jtWPYgulnzXsNUENfblt8rSRBM5en+vc= Subject key identifier: 34:52:8E:9E:86:25:44:7D:C2:D0:29:10:BC:44:13:79:08:18:B0:3B Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F715155FBE7045B6F5FCBC80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa Signing time: Sun 25 May 2025 01:00:49 +0000 ROA not before: Sun 25 May 2025 01:00:49 +0000 ROA not after: Sat 23 Aug 2025 01:00:49 +0000 asID: 16509 IP address blocks: 130.137.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f7:15:15:5f:be:70:45:b6:f5:fc:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 25 01:00:49 2025 GMT Not After : Aug 23 01:00:49 2025 GMT Subject: CN=7d3e65fd-bcca-44bd-bdef-9e31f7949d33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:67:4b:3a:97:79:97:f7:68:fc:f1:79:bc:49: e6:c6:1d:e2:a6:b0:da:71:6c:28:a7:75:5f:05:77: 02:3c:3d:0c:07:a5:c1:56:14:58:37:1c:65:d2:ac: 56:37:08:36:9e:6a:d4:f1:40:ce:5f:0e:27:5d:55: 7b:59:f6:a0:6f:fa:30:54:92:8b:8f:09:68:36:5f: c4:d8:87:77:a6:dd:ac:a9:bf:b7:c4:db:71:17:ba: ea:36:4e:c6:c8:2c:7c:9c:4a:b3:98:ed:39:0d:7a: df:c7:7b:e7:db:f4:c8:0b:0e:ab:2b:3c:10:b3:3d: 7f:3c:6b:a5:f6:99:9a:b8:fd:29:5a:8b:19:a5:3d: 15:17:e7:11:fa:46:e3:b1:66:fe:53:4a:56:4e:55: 84:07:86:e1:7e:fc:c0:b9:37:11:30:be:f7:9b:d5: 8f:c0:f3:98:e2:a4:50:c0:38:9f:95:5b:1c:1e:44: ba:a3:ad:9b:7c:13:ac:14:d6:c6:8b:01:77:fe:cf: e3:d8:58:b1:53:a4:f3:16:e1:2b:d8:ec:0f:5d:1a: 3a:4d:c7:71:3a:5a:c2:1b:af:4b:98:d6:df:5d:f3: a6:1f:57:e4:a0:19:32:6b:c3:b3:da:a0:ef:c0:32: 02:54:71:0a:0d:a7:f9:24:60:6e:58:ff:c3:ef:40: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:52:8E:9E:86:25:44:7D:C2:D0:29:10:BC:44:13:79:08:18:B0:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/0f8871b4-b7c9-3916-8e36-4deabab4c16e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:d4:38:ea:ab:43:a9:d5:0e:7d:9f:27:a9:ac:20:f8:51:f0: 6b:c9:67:e2:fa:72:c0:5c:25:00:4e:83:42:b6:24:67:2e:49: 22:72:10:c0:32:ee:18:70:bc:be:2c:95:39:00:ac:06:e7:09: a0:1c:f5:a9:17:f9:33:a2:69:55:ff:b3:34:36:41:37:e7:27: 04:0b:2c:2c:d5:b1:20:6f:59:c7:31:6c:37:40:32:a1:4a:78: 3e:49:cc:02:80:55:a0:7c:1d:af:9e:86:07:c9:af:97:1a:e9: b8:e4:b8:e6:0a:a4:19:90:73:2c:89:9d:11:41:94:dd:54:dc: 78:2f:66:d4:2a:8f:b7:b6:23:ff:54:9d:47:10:b5:6a:1f:6b: 13:9b:97:28:bb:cb:7e:58:2d:f0:fe:bf:d4:24:21:c1:9e:cb: 0f:8a:ac:53:97:d0:f1:e3:16:8b:34:08:e7:fb:7a:45:41:2d: 40:27:a5:77:77:4d:4a:9d:2a:e1:10:50:65:04:fd:ee:72:50: 99:46:fa:89:2c:3c:d8:3c:49:e2:27:51:63:11:9f:d8:58:de: 02:d3:d2:3e:0c:47:5e:2b:95:55:f6:3e:49:34:03:92:77:4b: 6e:94:f0:51:d0:6d:06:20:e9:03:29:a0:66:da:fe:2d:67:4d: 60:77:85:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn3FRVfvnBFtvX8vIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNTAxMDA0OVoXDTI1MDgyMzAxMDA0OVowLzEtMCsGA1UEAxMk N2QzZTY1ZmQtYmNjYS00NGJkLWJkZWYtOWUzMWY3OTQ5ZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmdLOpd5l/do/PF5vEnmxh3iprDacWwop3Vf BXcCPD0MB6XBVhRYNxxl0qxWNwg2nmrU8UDOXw4nXVV7Wfagb/owVJKLjwloNl/E 2Id3pt2sqb+3xNtxF7rqNk7GyCx8nEqzmO05DXrfx3vn2/TICw6rKzwQsz1/PGul 9pmauP0pWosZpT0VF+cR+kbjsWb+U0pWTlWEB4bhfvzAuTcRML73m9WPwPOY4qRQ wDiflVscHkS6o62bfBOsFNbGiwF3/s/j2FixU6TzFuEr2OwPXRo6TcdxOlrCG69L mNbfXfOmH1fkoBkya8Oz2qDvwDICVHEKDaf5JGBuWP/D70DowwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDRSjp6GJUR9wtApELxEE3kIGLA7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMGY4ODcxYjQtYjdjOS0z OTE2LThlMzYtNGRlYWJhYjRjMTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzUOOqrQ6nVDn2fJ6msIPhR8GvJZ+L6csBcJQBOg0K2JGcuSSJyEMAy 7hhwvL4slTkArAbnCaAc9akX+TOiaVX/szQ2QTfnJwQLLCzVsSBvWccxbDdAMqFK eD5JzAKAVaB8Ha+ehgfJr5ca6bjkuOYKpBmQcyyJnRFBlN1U3HgvZtQqj7e2I/9U nUcQtWofaxOblyi7y35YLfD+v9QkIcGeyw+KrFOX0PHjFos0COf7ekVBLUAnpXd3 TUqdKuEQUGUE/e5yUJlG+oksPNg8SeInUWMRn9hY3gLT0j4MR14rlVX2Pkk0A5J3 S26U8FHQbQYg6QMpoGba/i1nTWB3hRc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:29:21 2025 by rpki-client