$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa File: 699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa (raw, json) Hash identifier: f4kJLCf/jYdNjZBDOED6k8R95Rem4ZzuvQButnBbNU0= Subject key identifier: D8:1B:90:BF:34:65:3C:27:48:2B:12:E4:8F:83:94:E7:4D:83:05:CF Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA70F8869E078C35D77940 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 14618 IP address blocks: 130.137.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:70:f8:86:9e:07:8c:35:d7:79:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=1d4a24ad-3217-4322-bdef-cbb3720799c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:84:ea:b8:23:be:57:a5:09:6b:d1:4d:c4:4a: 15:3a:a2:8b:f3:7c:29:eb:fd:6c:1b:05:14:aa:26: 6f:fd:77:c3:d3:6c:78:9c:6c:04:55:c1:f1:c6:13: 40:56:ee:ee:e1:17:21:09:20:81:06:fb:90:14:ab: 24:9e:b1:01:b6:b1:ee:24:ac:0d:78:5d:3a:84:2e: ad:98:03:8a:0c:ef:ab:8c:5b:15:58:75:3d:7e:e3: b8:3c:d7:e6:5c:3c:a3:bc:c6:aa:aa:94:2d:46:8e: 45:b4:7f:d5:22:9c:f2:25:b3:ab:e6:ec:a2:42:e2: 04:a9:b0:37:e0:84:cd:b6:6a:82:85:c9:bc:9e:fc: 7d:39:ec:ae:0b:d5:de:7d:3e:03:58:49:53:be:45: b0:5d:47:a7:42:c8:49:33:8b:0f:7d:a8:79:dd:ba: 2d:ca:f6:e5:89:c5:a5:23:c6:4a:e2:2a:e3:58:2c: 47:0f:d8:90:5b:a6:27:58:90:15:87:f4:4b:84:2c: 12:08:eb:e5:e5:7b:69:73:d1:79:d0:a1:41:80:9f: 4b:4d:b8:af:92:64:12:4b:b6:c3:9d:b3:a9:4a:f3: d0:9d:d9:74:a0:80:5c:f6:31:f9:95:86:14:fd:ee: d8:da:dc:ea:f3:7e:24:c3:b6:50:dc:3f:96:7a:3c: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1B:90:BF:34:65:3C:27:48:2B:12:E4:8F:83:94:E7:4D:83:05:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/699e42de-25a9-3ec9-a43f-d9e1a6a13335.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:28:cc:45:07:8b:05:5e:33:83:e2:ac:e7:78:a5:fe:ff:b8: a5:d1:63:a2:94:ff:17:26:4e:4d:83:e7:02:be:d7:f5:5e:ab: 5f:5e:36:d9:19:ae:b7:d2:e0:16:fb:a3:6c:5a:c5:ad:29:3a: 69:3f:14:e2:67:7e:76:10:a3:76:16:d6:b5:ba:2f:b2:8d:a7: 66:d4:66:fa:e9:e4:eb:55:c5:21:39:5a:84:e6:85:e8:38:5c: 14:99:d9:1d:0b:cf:23:e9:43:a3:0e:6b:ff:d5:65:d7:22:4a: a7:2e:7d:1f:39:a5:24:c9:99:47:28:79:12:14:ce:21:9f:f5: bf:7a:0f:c1:16:29:b9:c9:2e:09:58:02:74:3d:f6:0f:10:5d: f1:35:78:5d:13:c2:d6:32:23:1a:75:36:16:75:d5:2b:36:b1: df:c9:35:a2:02:c4:00:7a:37:ce:09:ec:b2:e3:51:79:ee:20: 0b:08:8b:5a:fd:42:a9:45:6e:b1:80:71:1e:56:54:87:46:42: 48:84:65:06:e3:84:fe:14:7c:7d:ff:97:36:87:f1:ef:d1:89: c1:c9:78:67:f2:31:5f:b1:19:a2:5f:95:26:d0:5e:94:fc:89: 9c:3a:f3:67:bf:ae:44:50:a6:48:ab:ed:1e:49:69:cc:36:ba: 82:d5:4d:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnD4hp4HjDXXeUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk MWQ0YTI0YWQtMzIxNy00MzIyLWJkZWYtY2JiMzcyMDc5OWM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoITquCO+V6UJa9FNxEoVOqKL83wp6/1sGwUU qiZv/XfD02x4nGwEVcHxxhNAVu7u4RchCSCBBvuQFKsknrEBtrHuJKwNeF06hC6t mAOKDO+rjFsVWHU9fuO4PNfmXDyjvMaqqpQtRo5FtH/VIpzyJbOr5uyiQuIEqbA3 4ITNtmqChcm8nvx9OeyuC9XefT4DWElTvkWwXUenQshJM4sPfah53botyvblicWl I8ZK4irjWCxHD9iQW6YnWJAVh/RLhCwSCOvl5Xtpc9F50KFBgJ9LTbivkmQSS7bD nbOpSvPQndl0oIBc9jH5lYYU/e7Y2tzq834kw7ZQ3D+WejyOnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgbkL80ZTwnSCsS5I+DlOdNgwXPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNjk5ZTQyZGUtMjVhOS0z ZWM5LWE0M2YtZDllMWE2YTEzMzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcozEUHiwVeM4PirOd4pf7/uKXRY6KU/xcmTk2D5wK+1/Veq19eNtkZ rrfS4Bb7o2xaxa0pOmk/FOJnfnYQo3YW1rW6L7KNp2bUZvrp5OtVxSE5WoTmheg4 XBSZ2R0LzyPpQ6MOa//VZdciSqcufR85pSTJmUcoeRIUziGf9b96D8EWKbnJLglY AnQ99g8QXfE1eF0TwtYyIxp1NhZ11Ss2sd/JNaICxAB6N84J7LLjUXnuIAsIi1r9 QqlFbrGAcR5WVIdGQkiEZQbjhP4UfH3/lzaH8e/RicHJeGfyMV+xGaJflSbQXpT8 iZw682e/rkRQpkir7R5Jacw2uoLVTZQ= -----END CERTIFICATE-----Generated at Sun Jun 15 00:02:29 2025 by rpki-client