$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa File: 155ef00e-8903-3078-b1a9-610088db3245.roa (raw, json) Hash identifier: t3dczDQ98IiwcdA1GKN+J4FpIfyQYRlToqlVkvyRnrg= Subject key identifier: 64:71:BC:60:EE:12:68:59:5D:71:0D:93:A5:F9:81:4D:26:ED:94:1F Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849CBCFA63BCB5C669082B36600 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa Signing time: Fri 09 May 2025 13:01:00 +0000 ROA not before: Fri 09 May 2025 13:01:00 +0000 ROA not after: Thu 07 Aug 2025 13:01:00 +0000 asID: 14618 IP address blocks: 130.137.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cb:cf:a6:3b:cb:5c:66:90:82:b3:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 9 13:01:00 2025 GMT Not After : Aug 7 13:01:00 2025 GMT Subject: CN=e8d90ff3-4f85-4cd1-bf94-d77939c18ba7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:0c:18:04:d2:08:91:80:19:bc:5b:2c:56: 58:00:f1:93:f6:28:be:1f:45:30:ac:17:d9:80:72: df:8c:35:2f:1a:b0:14:4b:15:30:78:b7:14:c8:95: b7:e5:34:37:0a:88:01:52:93:50:25:84:a2:ca:7d: e6:80:1a:47:c9:2b:8b:03:e2:8a:11:e8:74:81:54: 48:97:af:b3:66:1c:65:c6:2c:cd:32:fd:d0:a6:33: 03:fb:ff:6d:ee:fc:54:70:f9:5f:3d:71:6e:6f:b5: 7c:19:da:5a:d7:0f:e5:28:13:a0:ff:c7:fc:ab:da: 7b:8e:ed:b0:b7:cf:fc:c9:80:50:dd:49:4f:80:1c: 32:5d:22:6d:a4:0b:90:47:eb:68:90:8f:6d:67:db: 91:5d:c7:84:3d:3b:10:c2:7d:4f:de:1a:e1:97:27: 10:49:f3:36:d4:86:20:c7:76:b5:41:3f:f9:67:d8: e8:1b:8a:c2:77:45:96:a7:62:7a:a1:11:4a:54:33: 2c:bb:53:3e:47:cd:55:ff:7b:01:3f:36:9c:f6:6d: c7:ca:a1:fa:6c:d2:f3:e9:16:ab:52:8d:90:0a:9c: cc:cf:69:51:c8:c2:e5:b4:d7:36:ff:4c:3d:06:2d: aa:28:a6:ce:95:b7:4d:a6:56:bb:49:8c:0f:bd:ce: 08:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:71:BC:60:EE:12:68:59:5D:71:0D:93:A5:F9:81:4D:26:ED:94:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/155ef00e-8903-3078-b1a9-610088db3245.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:4f:d4:f8:9e:99:ae:99:08:59:00:b4:76:4c:da:9d:8c:ae: 45:75:d3:ff:b1:1d:1e:2f:42:9d:bb:f1:8a:54:9c:df:a0:02: 0b:9d:77:80:38:b3:4c:7d:d7:0a:95:a5:57:a7:42:00:9f:41: ea:3d:17:9d:e6:10:a6:b7:f8:91:01:83:ed:03:ef:91:41:a4: 34:e2:62:36:cd:da:39:b7:5f:30:5e:45:d9:7f:f6:7a:15:1f: bd:14:a0:3d:b5:51:65:af:cb:03:bb:61:ab:88:9f:90:9f:43: da:ea:22:76:5d:75:27:32:3a:7f:6a:f8:3b:19:3a:b4:6b:7e: 4b:a9:06:ae:ee:bd:cd:a9:38:b6:a0:40:d5:fc:ff:6b:36:b2: 0e:c5:b9:79:b3:32:c2:d6:55:1c:35:da:a2:4a:e0:0e:ce:70: f7:0b:f2:6e:09:d3:dd:0a:45:4c:98:59:7b:87:f1:ad:49:b2: e1:e4:54:74:21:89:24:3d:28:0c:60:be:33:a2:d9:be:e2:5c: fa:50:63:d0:63:ff:d3:ad:1b:60:7f:0a:66:49:f0:b9:1a:fe: 1d:f0:f8:78:66:87:9f:b8:47:dc:20:49:43:d2:2c:be:f5:55: 67:5b:d5:93:6c:29:02:43:c6:d7:d7:f9:7a:2c:3d:25:44:7f: 7f:4c:9b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnLz6Y7y1xmkIKzZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk ZThkOTBmZjMtNGY4NS00Y2QxLWJmOTQtZDc3OTM5YzE4YmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdUMGATSCJGAGbxbLFZYAPGT9ii+H0UwrBfZ gHLfjDUvGrAUSxUweLcUyJW35TQ3CogBUpNQJYSiyn3mgBpHySuLA+KKEeh0gVRI l6+zZhxlxizNMv3QpjMD+/9t7vxUcPlfPXFub7V8Gdpa1w/lKBOg/8f8q9p7ju2w t8/8yYBQ3UlPgBwyXSJtpAuQR+tokI9tZ9uRXceEPTsQwn1P3hrhlycQSfM21IYg x3a1QT/5Z9joG4rCd0WWp2J6oRFKVDMsu1M+R81V/3sBPzac9m3HyqH6bNLz6Rar Uo2QCpzMz2lRyMLltNc2/0w9Bi2qKKbOlbdNpla7SYwPvc4IYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRxvGDuEmhZXXENk6X5gU0m7ZQfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMTU1ZWYwMGUtODkwMy0z MDc4LWIxYTktNjEwMDg4ZGIzMjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgok7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFP1Piema6ZCFkAtHZM2p2MrkV10/+xHR4vQp278YpUnN+gAgudd4A4 s0x91wqVpVenQgCfQeo9F53mEKa3+JEBg+0D75FBpDTiYjbN2jm3XzBeRdl/9noV H70UoD21UWWvywO7YauIn5CfQ9rqInZddScyOn9q+DsZOrRrfkupBq7uvc2pOLag QNX8/2s2sg7FuXmzMsLWVRw12qJK4A7OcPcL8m4J090KRUyYWXuH8a1JsuHkVHQh iSQ9KAxgvjOi2b7iXPpQY9Bj/9OtG2B/CmZJ8Lka/h3w+Hhmh5+4R9wgSUPSLL71 VWdb1ZNsKQJDxtfX+XosPSVEf39Mm2k= -----END CERTIFICATE-----Generated at Sun Jun 15 13:11:46 2025 by rpki-client