$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa File: 42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa (raw, json) Hash identifier: gQcPO/Kthc50le1Mb1JoguYwFCpq3HwHgrXvVcCOtpE= Subject key identifier: 88:B7:06:D9:F6:78:4F:A5:94:E6:A3:64:2D:D1:5C:FF:3E:D9:31:39 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A07D525FBC27B7798D7E2FF80 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa Signing time: Sat 31 May 2025 01:00:50 +0000 ROA not before: Sat 31 May 2025 01:00:50 +0000 ROA not after: Fri 29 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 130.137.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:07:d5:25:fb:c2:7b:77:98:d7:e2:ff:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 31 01:00:50 2025 GMT Not After : Aug 29 01:00:50 2025 GMT Subject: CN=ad0cc0fc-72b9-48d8-a25c-ee67f0003822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:5d:b5:d7:bb:72:56:42:22:b0:db:f9:8b:0e: b9:82:88:0f:52:63:37:c0:60:0d:ca:a5:b5:57:0d: db:00:aa:20:68:0e:87:85:09:de:18:22:2e:d3:68: 85:da:e0:18:d1:63:83:50:24:d4:24:8b:1c:5a:d4: bd:22:3f:4c:dd:fd:7a:ae:69:a3:10:54:32:17:a6: 6d:f9:9a:b0:a3:47:c7:ed:ab:51:64:7a:ab:22:ff: 7b:cc:b3:a1:f8:25:49:20:80:af:73:e8:14:7f:87: 57:02:be:b2:06:9a:11:e6:d8:1f:74:b4:44:a2:c0: be:a0:2c:27:7f:71:d4:b2:78:0e:c2:61:10:0d:5f: ab:a0:72:83:80:d9:bd:ad:d2:77:17:e6:52:30:76: 10:59:42:c0:59:59:26:8a:f9:83:6f:76:43:12:a7: 26:9a:b6:a0:36:70:89:36:85:ef:c8:f4:fe:03:4a: 30:e7:f3:c3:26:a5:b4:cb:bb:b3:ef:bb:c8:37:15: 91:17:9a:b4:58:07:a4:54:77:3e:11:81:ed:48:2e: 44:31:7f:23:48:e3:8a:88:4b:ca:5a:a4:f7:38:a5: c2:99:9c:b7:35:b9:10:75:f4:b0:cb:c1:11:f4:9e: 15:ad:4b:36:f1:58:d8:54:84:d0:d2:8a:38:78:22: aa:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:B7:06:D9:F6:78:4F:A5:94:E6:A3:64:2D:D1:5C:FF:3E:D9:31:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/42708bce-6673-3c9b-a3c6-48eeac1e3b78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:e9:1a:38:8c:e0:fb:f8:f6:d8:d4:5c:bd:d7:91:d1:5e:9c: a1:6b:46:7b:d5:9e:ef:34:43:55:58:98:a7:5e:ce:85:1d:02: 2c:ae:e0:62:77:11:48:17:87:c3:3a:1b:f3:7e:14:56:70:12: 37:ad:1f:dd:a6:bf:e3:81:10:20:37:20:09:0c:f6:c0:4c:82: de:58:92:a0:9a:a2:55:16:d0:c9:02:31:b6:86:1f:81:61:87: 57:a6:fc:69:3c:81:6f:0a:ec:19:62:b9:40:a8:61:6d:b0:91: 55:1c:f3:b8:61:49:1a:d6:2d:0f:f2:35:26:20:f3:e7:f8:4e: a7:5d:12:eb:7a:30:95:aa:c0:64:ec:ed:d6:0a:4b:d4:7e:b2: 30:54:13:9e:e7:c0:3b:c5:bd:47:27:9e:6a:1e:47:b9:a3:6d: 54:7f:4d:06:c2:e5:32:0c:3d:a0:7b:e2:a6:b5:7b:56:60:5a: 8f:8c:77:92:29:78:9e:e3:5c:a5:80:87:8b:60:35:32:c3:57: de:d0:93:3f:9b:ae:ac:f5:d7:6e:fa:ef:47:b0:c6:b0:22:91: 15:b2:08:ae:19:77:03:b8:7b:55:5a:ea:8b:35:46:79:ba:69: cb:7f:65:07:42:f1:fc:2d:91:cc:8a:81:ae:09:21:43:8a:8b: 42:2e:6c:f7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoH1SX7wnt3mNfi/4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUzMTAxMDA1MFoXDTI1MDgyOTAxMDA1MFowLzEtMCsGA1UEAxMk YWQwY2MwZmMtNzJiOS00OGQ4LWEyNWMtZWU2N2YwMDAzODIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5l2117tyVkIisNv5iw65gogPUmM3wGANyqW1 Vw3bAKogaA6HhQneGCIu02iF2uAY0WODUCTUJIscWtS9Ij9M3f16rmmjEFQyF6Zt +Zqwo0fH7atRZHqrIv97zLOh+CVJIICvc+gUf4dXAr6yBpoR5tgfdLREosC+oCwn f3HUsngOwmEQDV+roHKDgNm9rdJ3F+ZSMHYQWULAWVkmivmDb3ZDEqcmmragNnCJ NoXvyPT+A0ow5/PDJqW0y7uz77vINxWRF5q0WAekVHc+EYHtSC5EMX8jSOOKiEvK WqT3OKXCmZy3NbkQdfSwy8ER9J4VrUs28VjYVITQ0oo4eCKqcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIi3Btn2eE+llOajZC3RXP8+2TE5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNDI3MDhiY2UtNjY3My0z YzliLWEzYzYtNDhlZWFjMWUzYjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgon2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvpGjiM4Pv49tjUXL3XkdFenKFrRnvVnu80Q1VYmKdezoUdAiyu4GJ3 EUgXh8M6G/N+FFZwEjetH92mv+OBECA3IAkM9sBMgt5YkqCaolUW0MkCMbaGH4Fh h1em/Gk8gW8K7BliuUCoYW2wkVUc87hhSRrWLQ/yNSYg8+f4TqddEut6MJWqwGTs 7dYKS9R+sjBUE57nwDvFvUcnnmoeR7mjbVR/TQbC5TIMPaB74qa1e1ZgWo+Md5Ip eJ7jXKWAh4tgNTLDV97Qkz+brqz1127670ewxrAikRWyCK4ZdwO4e1Va6os1Rnm6 act/ZQdC8fwtkcyKga4JIUOKi0IubPc= -----END CERTIFICATE-----Generated at Sat Jun 14 06:20:24 2025 by rpki-client