$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa File: 85b5591c-78f3-3264-a4a7-3216b1882c46.roa (raw, json) Hash identifier: NSrAAzEwDH7yyXIpGck7wX/Jrp16gA+72g1z0iWkFBc= Subject key identifier: 4B:BC:36:5E:61:16:30:FF:B2:CF:A1:D0:A9:9A:32:C7:54:30:39:87 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849ABB4A5627C55CD82E1D64000 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa Signing time: Mon 28 Apr 2025 01:00:48 +0000 ROA not before: Mon 28 Apr 2025 01:00:48 +0000 ROA not after: Sun 27 Jul 2025 01:00:48 +0000 asID: 14618 IP address blocks: 130.137.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:ab:b4:a5:62:7c:55:cd:82:e1:d6:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Apr 28 01:00:48 2025 GMT Not After : Jul 27 01:00:48 2025 GMT Subject: CN=6a6e61da-b608-4848-a3fe-8a13b0828cae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:32:00:09:79:95:75:bf:a6:a2:d6:0a:55:b0: 28:72:07:01:de:4e:a4:69:69:3e:7b:5c:55:d6:41: cc:12:7a:88:7d:8c:90:1b:dd:b8:f7:85:96:0b:aa: c6:0a:cf:30:30:3f:b6:e8:d0:79:9b:f9:5d:3a:24: e8:ba:6c:7e:39:b2:18:14:23:59:2e:16:f4:a9:e2: de:e0:19:43:15:0b:80:49:1f:95:68:0c:e9:ba:e0: b7:5d:7b:35:dd:64:aa:e1:bc:75:c0:be:4d:56:45: bf:d9:d8:7c:23:73:f9:fd:6a:65:4d:54:9f:06:22: b4:cf:5a:12:c2:f2:12:00:c1:5c:6a:5a:c9:6f:33: 9c:79:a4:17:05:6d:59:52:eb:2e:9e:39:5e:1c:ed: ab:57:89:57:97:a1:3b:9c:9e:7d:59:fa:42:e2:fb: 26:88:0a:fb:ef:a3:c0:eb:cb:dc:b0:ce:f6:1d:1d: d3:a4:18:b8:cc:7c:e4:5e:e9:8a:3c:42:ad:6c:36: b1:c4:17:63:97:36:65:87:5c:c1:57:a2:da:e0:f0: d8:3d:42:ba:df:8e:c7:2b:df:42:d1:ca:f3:4e:dd: 6a:46:9d:a1:83:62:44:32:8b:e6:75:03:cc:bc:49: f1:b2:08:4f:29:26:42:7f:db:ef:0f:52:c4:47:da: 5b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BC:36:5E:61:16:30:FF:B2:CF:A1:D0:A9:9A:32:C7:54:30:39:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/85b5591c-78f3-3264-a4a7-3216b1882c46.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:bc:51:b6:53:aa:42:8c:bd:7c:86:e9:29:3f:df:88:bc:af: 21:89:af:51:c5:1b:91:94:72:83:9d:37:1a:da:03:c1:f7:a6: c2:d2:d6:a5:cb:cc:66:9a:e2:44:a9:b3:ab:21:82:0a:55:ac: aa:ca:4c:dc:fb:4b:e1:f8:a5:67:49:c4:dd:f8:53:1e:fa:b7: eb:9a:35:e9:4b:05:fd:9c:4a:50:8c:8d:8d:1b:fd:09:54:d5: 7f:0f:c2:b5:31:f1:e4:57:dd:ba:85:10:1f:a2:a8:84:28:78: 39:9c:eb:65:0c:4d:91:9e:3e:de:a4:fb:bc:e0:85:af:82:2c: 91:82:da:c3:19:a6:7f:67:78:81:e1:48:39:1f:c2:b8:3c:f7: a8:ed:3a:c7:d0:e1:27:99:0a:dc:18:92:cc:67:42:48:1d:50: bd:c7:de:e0:9b:11:b9:1b:f0:7f:42:2c:b0:ea:c4:3d:36:e4: ed:ce:04:21:7e:d4:c2:48:f1:ca:09:a4:cb:dc:ba:db:fd:60: ba:7b:64:28:c4:71:d0:50:6c:a7:51:72:b6:de:3c:2c:f0:ca: a1:32:69:f6:59:6b:35:38:65:8a:fe:69:7d:df:83:80:8a:79: d9:86:f2:3d:5b:ac:6d:1f:d1:30:87:38:3c:d8:04:f9:d6:3d: 02:2c:68:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmrtKVifFXNguHWQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk NmE2ZTYxZGEtYjYwOC00ODQ4LWEzZmUtOGExM2IwODI4Y2FlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzIACXmVdb+motYKVbAocgcB3k6kaWk+e1xV 1kHMEnqIfYyQG92494WWC6rGCs8wMD+26NB5m/ldOiToumx+ObIYFCNZLhb0qeLe 4BlDFQuASR+VaAzpuuC3XXs13WSq4bx1wL5NVkW/2dh8I3P5/WplTVSfBiK0z1oS wvISAMFcalrJbzOceaQXBW1ZUusunjleHO2rV4lXl6E7nJ59WfpC4vsmiAr776PA 68vcsM72HR3TpBi4zHzkXumKPEKtbDaxxBdjlzZlh1zBV6La4PDYPUK6347HK99C 0crzTt1qRp2hg2JEMovmdQPMvEnxsghPKSZCf9vvD1LER9pb6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEu8Nl5hFjD/ss+h0KmaMsdUMDmHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvODViNTU5MWMtNzhmMy0z MjY0LWE0YTctMzIxNmIxODgyYzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgokTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEi8UbZTqkKMvXyG6Sk/34i8ryGJr1HFG5GUcoOdNxraA8H3psLS1qXL zGaa4kSps6shggpVrKrKTNz7S+H4pWdJxN34Ux76t+uaNelLBf2cSlCMjY0b/QlU 1X8PwrUx8eRX3bqFEB+iqIQoeDmc62UMTZGePt6k+7zgha+CLJGC2sMZpn9neIHh SDkfwrg896jtOsfQ4SeZCtwYksxnQkgdUL3H3uCbEbkb8H9CLLDqxD025O3OBCF+ 1MJI8coJpMvcutv9YLp7ZCjEcdBQbKdRcrbePCzwyqEyafZZazU4ZYr+aX3fg4CK edmG8j1brG0f0TCHODzYBPnWPQIsaOk= -----END CERTIFICATE-----Generated at Sat Jun 14 23:57:55 2025 by rpki-client