$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa File: 72be9948-9cba-369c-abf7-d341e95269bd.roa (raw, json) Hash identifier: t6WB1NWMEuCoTEH+RLuvxhApCbLi/291tJU7YErVjR0= Subject key identifier: 70:88:0F:E3:6F:21:EA:CC:A7:9C:67:A0:FE:33:1C:DE:A5:CD:F1:A4 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A103539D2D7BB54D5D6D2A000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa Signing time: Tue 03 Jun 2025 01:00:50 +0000 ROA not before: Tue 03 Jun 2025 01:00:50 +0000 ROA not after: Mon 01 Sep 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:10:35:39:d2:d7:bb:54:d5:d6:d2:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 3 01:00:50 2025 GMT Not After : Sep 1 01:00:50 2025 GMT Subject: CN=e9ed9adf-244d-4b39-b8ff-3e64fc101da4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:36:4b:be:7a:59:b9:53:57:54:eb:7b:c8:49: aa:3d:a7:0f:98:72:2f:12:05:59:5e:ea:88:25:2b: 18:d3:3a:3c:bb:27:68:75:8b:43:b3:17:9f:ca:a2: 89:92:32:81:bb:2c:86:79:7c:c4:f3:48:f5:1a:c5: 53:88:b4:7a:28:1e:e2:6e:4c:f3:d7:36:eb:c9:a0: 56:ee:85:6e:29:41:68:9b:ff:00:e5:41:1e:bc:69: 7e:e2:fd:ff:da:e1:f2:f2:67:35:30:f8:f0:d7:13: b9:82:f8:ff:02:49:01:a0:37:bc:6d:f8:91:0d:b2: 17:10:07:ae:26:68:76:7a:89:1c:ad:6e:64:07:a9: 36:1d:d5:6b:47:6f:8e:bd:68:72:ae:0a:3c:2f:f3: 06:19:60:62:7d:7b:90:61:da:00:af:1a:0a:a5:52: 2f:af:7d:25:f9:35:b2:c3:87:f3:a1:52:3e:df:15: a0:9f:c3:0c:3d:e4:9b:f7:b3:9c:b9:b4:43:83:87: 3b:ac:a1:ab:7d:51:a2:18:bb:30:0d:9a:94:80:40: 8b:d4:a6:eb:5b:0d:2d:d7:89:07:22:4d:b9:a5:4e: 89:1d:cc:66:69:24:7f:d8:54:6f:28:96:c0:16:91: d8:c1:5e:0e:71:47:f3:0f:e7:2e:99:ba:74:89:e4: a8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:88:0F:E3:6F:21:EA:CC:A7:9C:67:A0:FE:33:1C:DE:A5:CD:F1:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/72be9948-9cba-369c-abf7-d341e95269bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:1c:94:72:c0:e2:fa:7b:a3:68:7c:ef:72:1d:1c:3a:68:2c: 6f:69:37:51:df:17:6c:1c:27:fb:fe:ba:8d:c1:3c:d9:ea:91: 62:46:5e:2f:5c:b7:68:02:fa:a4:2d:a0:a6:61:1c:1f:39:de: bc:98:0c:58:6d:12:19:45:42:21:ba:5d:6d:48:e8:e5:d6:08: 7e:0f:aa:1b:b2:e5:46:ef:4c:46:9b:1f:c7:e7:02:de:2d:c1: 8c:1b:b3:cd:6b:b6:b3:33:b3:d4:fc:16:a7:30:55:5f:88:f7: 13:ae:ee:29:2d:67:77:d9:46:68:dd:47:ac:42:eb:04:42:fa: 0d:0b:bd:ae:0a:99:7f:fd:01:00:fb:60:52:64:75:a6:5d:45: c9:ea:bf:f5:fe:83:8e:34:dc:61:63:c3:14:e9:28:3e:b8:be: 4e:fb:17:2f:e6:72:9b:ec:b7:c1:3e:a9:b0:f1:3d:57:60:17: eb:55:a6:8c:f8:14:5d:1d:99:2d:bc:a9:c7:c5:8e:6f:d5:14: 10:c9:42:2e:bc:fb:0f:73:04:b6:37:de:fb:79:fd:68:d0:35: 5c:53:70:7b:8f:af:4b:cf:18:bc:6a:d9:2a:a9:33:f8:26:54: 72:d6:b7:3c:20:d3:9d:c9:93:94:bf:65:2e:1f:88:b1:ef:ff: ed:fd:06:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTnS17tU1dbSoAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk ZTllZDlhZGYtMjQ0ZC00YjM5LWI4ZmYtM2U2NGZjMTAxZGE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDZLvnpZuVNXVOt7yEmqPacPmHIvEgVZXuqI JSsY0zo8uydodYtDsxefyqKJkjKBuyyGeXzE80j1GsVTiLR6KB7ibkzz1zbryaBW 7oVuKUFom/8A5UEevGl+4v3/2uHy8mc1MPjw1xO5gvj/AkkBoDe8bfiRDbIXEAeu Jmh2eokcrW5kB6k2HdVrR2+OvWhyrgo8L/MGGWBifXuQYdoArxoKpVIvr30l+TWy w4fzoVI+3xWgn8MMPeSb97OcubRDg4c7rKGrfVGiGLswDZqUgECL1KbrWw0t14kH Ik25pU6JHcxmaSR/2FRvKJbAFpHYwV4OcUfzD+cumbp0ieSo5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCID+NvIerMp5xnoP4zHN6lzfGkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvNzJiZTk5NDgtOWNiYS0z NjljLWFiZjctZDM0MWU5NTI2OWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgondMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJIclHLA4vp7o2h873IdHDpoLG9pN1HfF2wcJ/v+uo3BPNnqkWJGXi9c t2gC+qQtoKZhHB853ryYDFhtEhlFQiG6XW1I6OXWCH4Pqhuy5UbvTEabH8fnAt4t wYwbs81rtrMzs9T8FqcwVV+I9xOu7iktZ3fZRmjdR6xC6wRC+g0Lva4KmX/9AQD7 YFJkdaZdRcnqv/X+g4403GFjwxTpKD64vk77Fy/mcpvst8E+qbDxPVdgF+tVpoz4 FF0dmS28qcfFjm/VFBDJQi68+w9zBLY33vt5/WjQNVxTcHuPr0vPGLxq2SqpM/gm VHLWtzwg053Jk5S/ZS4fiLHv/+39Bu8= -----END CERTIFICATE-----Generated at Sun Jun 15 06:20:39 2025 by rpki-client