$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa File: 91807d1c-489c-3c3e-9229-5ecc326d6394.roa (raw, json) Hash identifier: JlwvJ+Uw3BbCshgQye1FXjchOb7bLHP2OFsIecoOAy8= Subject key identifier: 06:D7:A2:47:32:D5:7C:EA:5A:43:1D:D0:5E:30:06:98:8E:10:9A:A7 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F4328584A0D6A84B0DD8965032094A380 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 8987 IP address blocks: 130.137.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:84:b0:dd:89:65:03:20:94:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=8d46089c-f3e8-4258-9366-c2f0bbd0fb0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:77:54:13:1c:f2:6f:b6:97:e8:71:08:1d:81: 4b:50:75:60:2a:7e:a0:3c:91:23:15:dc:a1:96:6d: 42:42:3f:e5:28:66:5b:74:f6:9f:a3:30:d9:ac:7d: 48:6d:f5:26:46:97:fe:d9:a8:17:f2:ac:c9:84:65: 5d:83:35:d3:0b:58:8a:57:6c:36:2d:b3:75:8f:c7: 28:4e:21:59:fc:aa:12:57:08:d6:64:dc:b4:a0:22: e5:9b:2c:e9:ea:86:cd:95:f8:d8:4e:9c:b7:33:7e: 0a:ad:99:5d:71:07:bf:5c:92:24:6d:5a:9f:dc:85: a2:21:80:fc:7c:46:c7:08:a6:4c:08:88:25:00:08: d4:4b:51:ac:ff:8c:62:d8:0e:65:b5:11:e7:41:e6: 8a:3e:68:82:43:90:b1:df:9c:c3:58:c1:e8:24:ac: 43:3c:7a:fd:a3:0e:74:7e:4e:8e:ed:4d:d2:84:d3: ee:04:99:ef:9f:1c:f6:6a:40:1d:a1:0e:1b:9d:01: a9:3a:51:ec:e8:8c:4e:b0:fb:73:2d:03:4e:77:a5: 82:dc:22:26:40:40:53:a6:8a:3a:95:5d:9b:93:2c: 7d:e2:4e:b8:a4:a1:e4:53:02:f1:83:21:23:c1:23: 1c:f7:2d:6f:d0:7f:42:ce:08:5e:f4:92:4e:1a:52: 01:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D7:A2:47:32:D5:7C:EA:5A:43:1D:D0:5E:30:06:98:8E:10:9A:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/91807d1c-489c-3c3e-9229-5ecc326d6394.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:55:d2:50:32:e4:56:20:47:61:86:88:af:f0:05:94:1a:48: 3e:26:cd:56:82:a7:dc:9f:1a:34:58:da:91:b0:6c:87:9b:2e: f2:1b:ab:bb:f9:9d:3f:87:8b:11:47:bf:33:56:76:46:f0:92: e1:f4:4c:b7:9d:cb:67:d2:2f:be:be:0d:29:0d:7f:d1:78:9d: 34:82:d8:09:34:29:fb:ad:6c:f5:77:da:71:ad:3a:70:be:2c: e7:42:0b:91:95:ca:d2:6a:4b:81:5b:f9:95:40:4e:16:f3:e8: 50:7c:90:b5:3f:aa:0e:5c:85:ec:88:7e:88:04:a4:be:c1:c3: 0d:68:63:0c:80:dc:0a:c1:a2:8b:90:57:f9:54:83:90:3b:5b: 2d:c1:fd:88:e7:dc:fe:d5:04:2f:17:e7:3a:2c:fb:a5:b8:c5: 0b:5b:50:ac:72:32:cf:1f:c0:5e:c8:f8:2c:5c:12:af:aa:c8: d5:5f:24:a2:06:87:0f:c2:9a:02:61:8a:17:cc:06:ce:76:c7: 64:97:9e:1a:40:05:99:79:2d:d6:7b:81:34:d9:46:a9:7f:11: 7e:21:43:35:29:54:7f:95:da:dd:e3:62:24:ea:e6:4e:0a:4d: 33:6a:ac:79:ad:57:f5:fd:53:1d:56:10:3f:6c:e1:23:50:97: d6:2d:d9:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoSw3YllAyCUo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk OGQ0NjA4OWMtZjNlOC00MjU4LTkzNjYtYzJmMGJiZDBmYjBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63dUExzyb7aX6HEIHYFLUHVgKn6gPJEjFdyh lm1CQj/lKGZbdPafozDZrH1IbfUmRpf+2agX8qzJhGVdgzXTC1iKV2w2LbN1j8co TiFZ/KoSVwjWZNy0oCLlmyzp6obNlfjYTpy3M34KrZldcQe/XJIkbVqf3IWiIYD8 fEbHCKZMCIglAAjUS1Gs/4xi2A5ltRHnQeaKPmiCQ5Cx35zDWMHoJKxDPHr9ow50 fk6O7U3ShNPuBJnvnxz2akAdoQ4bnQGpOlHs6IxOsPtzLQNOd6WC3CImQEBTpoo6 lV2bkyx94k64pKHkUwLxgyEjwSMc9y1v0H9Czghe9JJOGlIBkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbXokcy1XzqWkMd0F4wBpiOEJqnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTE4MDdkMWMtNDg5Yy0z YzNlLTkyMjktNWVjYzMyNmQ2Mzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgol4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElV0lAy5FYgR2GGiK/wBZQaSD4mzVaCp9yfGjRY2pGwbIebLvIbq7v5 nT+HixFHvzNWdkbwkuH0TLedy2fSL76+DSkNf9F4nTSC2Ak0KfutbPV32nGtOnC+ LOdCC5GVytJqS4Fb+ZVAThbz6FB8kLU/qg5cheyIfogEpL7Bww1oYwyA3ArBoouQ V/lUg5A7Wy3B/Yjn3P7VBC8X5zos+6W4xQtbUKxyMs8fwF7I+CxcEq+qyNVfJKIG hw/CmgJhihfMBs52x2SXnhpABZl5LdZ7gTTZRql/EX4hQzUpVH+V2t3jYiTq5k4K TTNqrHmtV/X9Ux1WED9s4SNQl9Yt2ZI= -----END CERTIFICATE-----Generated at Sun Jun 15 15:13:31 2025 by rpki-client