$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa File: 1b1f431a-cc2d-3476-9010-a01cf18e3242.roa (raw, json) Hash identifier: omzyHo1+ax4jEXVigzMKx9tYoz7OMj2u+dCQW8rUYgk= Subject key identifier: 4F:A1:E8:7F:AF:52:AE:E8:4C:B5:8A:25:5E:1F:50:8C:6A:3D:A2:88 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC0FB5240EDF9534D0FC0 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c0:fb:52:40:ed:f9:53:4d:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=a100504e-e9a1-4aee-9b09-710dbb6d3995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:29:67:8e:12:33:9e:2f:70:81:2b:aa:b3:43: 08:fd:95:df:3d:30:d9:b5:1c:23:8f:02:33:72:36: 35:94:b1:c0:64:da:b4:3e:ee:00:32:91:77:57:fc: 19:3d:f1:b1:9c:25:60:d9:0c:c3:e0:ad:79:95:d0: f7:43:fa:f0:29:09:fc:8a:73:11:2b:bf:f2:a0:72: 55:67:f1:e1:d4:52:d2:60:09:4c:33:8d:30:93:41: b0:34:64:c7:f8:03:1f:87:51:c2:77:46:83:c2:bc: 30:0a:f0:7a:a9:70:43:29:60:a5:f2:ed:f7:72:89: 7c:52:0e:76:15:c5:f8:7c:16:ba:fa:96:8c:95:fa: 9d:82:bf:21:2f:c0:95:67:fa:47:11:b8:b6:c7:8d: 2c:71:bb:43:15:4d:10:1c:b2:6f:09:83:df:0d:39: 1b:1e:48:34:7f:54:29:7d:9f:54:3b:fd:54:94:77: 0c:9c:b8:cc:e5:d8:30:5a:d7:e7:97:1b:e9:b2:da: 4c:f7:d3:41:06:ae:54:33:a5:0e:b8:c3:06:e1:cc: 06:bc:74:16:1f:85:d7:98:12:94:90:5a:5f:d7:2c: 36:81:8c:40:29:61:9f:fc:2e:87:fe:19:5f:86:2e: 73:f9:af:4e:d9:02:34:78:36:93:1f:eb:98:6d:60: 8a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:A1:E8:7F:AF:52:AE:E8:4C:B5:8A:25:5E:1F:50:8C:6A:3D:A2:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/1b1f431a-cc2d-3476-9010-a01cf18e3242.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d7:2d:7a:c1:35:07:65:53:50:c2:74:fd:d6:90:40:1a:9d: 08:26:68:1c:5c:84:ad:cd:56:2c:96:b6:0f:73:6f:a0:59:24: c9:4d:2c:55:46:8a:8e:af:39:eb:a2:58:63:66:94:ef:af:aa: 35:58:f3:6b:71:3d:83:18:77:40:7f:59:2e:f1:48:28:81:2d: 91:57:6b:34:f8:ed:98:17:68:57:29:f3:e0:b9:92:99:ef:fa: 89:33:e2:a7:89:5f:d3:84:f6:60:4c:94:6a:15:1e:c0:0d:00: 8b:ba:f7:c3:0d:17:81:d2:d2:de:d8:f8:5c:84:1b:e2:7c:f8: 75:bc:4c:8a:3c:14:11:d7:ed:3e:57:87:63:9a:97:b6:9d:10: 4c:5d:c9:b0:3e:3a:ab:54:c6:88:30:ae:08:2f:68:3d:f6:34: cb:2f:b2:ed:ca:d3:d7:91:08:32:11:60:cb:94:44:02:39:e9: a6:57:69:86:cb:73:1f:b8:61:c4:3d:6d:c5:b6:89:c9:25:de: f5:07:76:a0:f7:51:3e:df:07:5f:a8:4b:5e:60:99:2f:32:91: 32:10:27:80:e1:c2:a3:b7:ea:d2:c7:93:f5:9e:0c:c9:ea:09: 17:cd:f9:72:e5:eb:46:b9:51:fc:e9:2a:27:32:0e:8c:e3:61: f3:2c:3f:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538D7UkDt+VNND8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk YTEwMDUwNGUtZTlhMS00YWVlLTliMDktNzEwZGJiNmQzOTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSlnjhIzni9wgSuqs0MI/ZXfPTDZtRwjjwIz cjY1lLHAZNq0Pu4AMpF3V/wZPfGxnCVg2QzD4K15ldD3Q/rwKQn8inMRK7/yoHJV Z/Hh1FLSYAlMM40wk0GwNGTH+AMfh1HCd0aDwrwwCvB6qXBDKWCl8u33col8Ug52 FcX4fBa6+paMlfqdgr8hL8CVZ/pHEbi2x40scbtDFU0QHLJvCYPfDTkbHkg0f1Qp fZ9UO/1UlHcMnLjM5dgwWtfnlxvpstpM99NBBq5UM6UOuMMG4cwGvHQWH4XXmBKU kFpf1yw2gYxAKWGf/C6H/hlfhi5z+a9O2QI0eDaTH+uYbWCKeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+h6H+vUq7oTLWKJV4fUIxqPaKIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvMWIxZjQzMWEtY2MyZC0z NDc2LTkwMTAtYTAxY2YxOGUzMjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfXLXrBNQdlU1DCdP3WkEAanQgmaBxchK3NViyWtg9zb6BZJMlNLFVG io6vOeuiWGNmlO+vqjVY82txPYMYd0B/WS7xSCiBLZFXazT47ZgXaFcp8+C5kpnv +okz4qeJX9OE9mBMlGoVHsANAIu698MNF4HS0t7Y+FyEG+J8+HW8TIo8FBHX7T5X h2Oal7adEExdybA+OqtUxogwrggvaD32NMsvsu3K09eRCDIRYMuURAI56aZXaYbL cx+4YcQ9bcW2ickl3vUHdqD3UT7fB1+oS15gmS8ykTIQJ4DhwqO36tLHk/WeDMnq CRfN+XLl60a5UfzpKicyDozjYfMsPzg= -----END CERTIFICATE-----Generated at Sun Jun 15 15:44:55 2025 by rpki-client