$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa File: 3eb727f7-429d-3153-84bc-bca2a65f45a7.roa (raw, json) Hash identifier: zTuNfgtZMoIH7YQ2jB4aGMAkVj8y3/vVrCgkTev87Ig= Subject key identifier: 81:27:F5:AB:78:AE:0D:ED:B3:A9:1C:27:69:5B:D0:8A:D1:4F:4A:79 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC2B8E90451F9E362DB10 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 130.137.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c2:b8:e9:04:51:f9:e3:62:db:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=6aa9bda8-c4b6-4349-88af-bd7ec6402bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:44:79:f1:fd:4d:7c:32:0a:cf:14:0d:5d:5f: f7:5c:25:c3:30:c4:d6:22:45:62:5d:f2:00:1e:a7: 5a:4d:0e:94:eb:b7:d0:66:b6:11:1b:13:ee:22:de: 09:24:2d:6b:4b:b3:25:3f:1b:21:7a:6c:32:1d:81: 6d:1c:ef:a9:97:e8:8d:78:64:84:ae:11:96:54:91: ed:c2:e4:35:5c:4c:4e:6f:e2:98:a1:bc:9f:c2:9b: 45:c2:ec:f3:87:14:6e:5f:fb:b2:f4:ad:48:a7:bb: ca:ca:c8:e8:10:3e:3a:cb:3f:21:8c:57:09:ca:fd: b7:22:c6:0f:1a:63:54:e4:d1:3d:6a:c0:87:63:6e: 1b:8d:e3:1f:20:83:13:40:13:ab:1e:e7:80:b2:0a: 4f:5e:8b:9b:19:d7:3e:2a:40:6f:8d:2a:d6:41:f2: d4:82:c1:83:54:6a:7b:0e:6f:f9:e1:43:0f:04:41: 11:75:22:9c:5e:bc:5b:95:f5:f1:f5:fe:72:45:d2: d1:55:70:52:d7:c4:52:a2:19:68:08:f4:79:f1:12: a0:b1:5a:58:28:9a:30:81:ea:63:6c:47:c5:d0:b9: ce:cc:49:d2:16:2a:fa:73:16:dd:4e:87:8c:cf:69: 7e:44:83:7e:06:19:9b:02:97:4d:e6:2e:34:58:20: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:27:F5:AB:78:AE:0D:ED:B3:A9:1C:27:69:5B:D0:8A:D1:4F:4A:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/3eb727f7-429d-3153-84bc-bca2a65f45a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:aa:34:29:cb:bd:1b:33:74:5c:67:f4:2a:fe:86:b4:4f:65: ca:82:26:e0:df:a0:57:fb:b9:a6:e5:24:b2:23:c1:af:88:ae: 85:12:25:a5:cd:31:64:ff:dc:bb:05:da:41:ae:39:07:55:aa: e7:bd:da:0d:2d:16:02:7f:91:a3:7f:89:f0:d1:e9:52:26:e9: 04:6a:5c:2d:c2:1f:a5:aa:d1:16:75:e9:a5:c1:03:0d:cf:78: 6d:c0:5b:dd:b1:15:f1:57:ab:d5:ab:a3:77:96:58:d1:f4:92: e5:9d:5b:e4:82:46:68:77:c5:3a:d8:bd:21:1b:2d:2e:e7:e8: c3:a3:40:08:d8:97:85:ef:f7:1b:fa:b3:bb:ec:6a:a4:c8:7f: f9:01:77:ea:b9:54:5b:81:0d:f0:90:73:7b:05:95:8d:22:52: ec:71:71:cb:a2:0f:75:6b:d4:7f:1b:18:d0:c5:27:c4:b9:ef: 74:91:cd:14:56:10:45:31:79:91:69:fb:39:65:15:18:9f:04: 77:ba:ee:aa:93:83:26:ec:54:81:db:01:87:d2:6a:21:6f:1a: 05:2c:df:4c:f0:b2:ad:d3:0b:b3:88:9b:ab:11:c5:25:6d:6a: 03:f5:fb:d4:67:40:15:ca:6a:ad:db:88:9d:fb:f5:4b:32:de: e3:ce:37:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538K46QRR+eNi2xAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NmFhOWJkYTgtYzRiNi00MzQ5LTg4YWYtYmQ3ZWM2NDAyYmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0R58f1NfDIKzxQNXV/3XCXDMMTWIkViXfIA HqdaTQ6U67fQZrYRGxPuIt4JJC1rS7MlPxshemwyHYFtHO+pl+iNeGSErhGWVJHt wuQ1XExOb+KYobyfwptFwuzzhxRuX/uy9K1Ip7vKysjoED46yz8hjFcJyv23IsYP GmNU5NE9asCHY24bjeMfIIMTQBOrHueAsgpPXoubGdc+KkBvjSrWQfLUgsGDVGp7 Dm/54UMPBEERdSKcXrxblfXx9f5yRdLRVXBS18RSohloCPR58RKgsVpYKJowgepj bEfF0LnOzEnSFir6cxbdToeMz2l+RIN+BhmbApdN5i40WCBtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEn9at4rg3ts6kcJ2lb0IrRT0p5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvM2ViNzI3ZjctNDI5ZC0z MTUzLTg0YmMtYmNhMmE2NWY0NWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByqNCnLvRszdFxn9Cr+hrRPZcqCJuDfoFf7uablJLIjwa+IroUSJaXN MWT/3LsF2kGuOQdVque92g0tFgJ/kaN/ifDR6VIm6QRqXC3CH6Wq0RZ16aXBAw3P eG3AW92xFfFXq9Wro3eWWNH0kuWdW+SCRmh3xTrYvSEbLS7n6MOjQAjYl4Xv9xv6 s7vsaqTIf/kBd+q5VFuBDfCQc3sFlY0iUuxxccuiD3Vr1H8bGNDFJ8S573SRzRRW EEUxeZFp+zllFRifBHe67qqTgybsVIHbAYfSaiFvGgUs30zwsq3TC7OIm6sRxSVt agP1+9RnQBXKaq3biJ379Usy3uPON9E= -----END CERTIFICATE-----Generated at Sat Jun 14 06:24:14 2025 by rpki-client