$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa File: 97c9e838-6675-3d04-ac69-51572cb4e303.roa (raw, json) Hash identifier: 3UgAAgnPt032Nn8QrVGqUC1PcBSDz787+pkhE8Vuc84= Subject key identifier: 1E:08:7D:C5:E3:95:18:6B:49:5D:06:E7:EF:F5:07:EC:C0:A3:5E:78 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC121D1409F63E1496100 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c1:21:d1:40:9f:63:e1:49:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=cab4d2fa-d7cb-4226-b272-dea102266a39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:3c:74:e0:5f:6a:77:cc:22:4d:a2:1e:a9:c7: 6a:50:fc:4d:d5:45:47:65:4d:ec:10:16:56:50:34: a4:b1:2f:ee:7c:2b:61:9d:c5:9f:fe:24:c6:3a:9f: f9:54:e5:b3:da:6f:67:33:5f:f4:18:0a:07:b2:43: 87:14:45:55:d2:17:e3:a7:27:ca:c7:ca:9c:51:13: 76:4c:dc:c2:7f:7e:e9:ba:fa:67:4d:4d:ae:dd:3e: b3:67:11:c1:83:71:91:e4:ab:61:df:ad:b9:19:53: 14:ac:c8:dd:3d:a6:cf:d8:1f:d8:17:df:f7:36:21: 65:8e:5c:34:16:bf:7d:05:e6:e3:e7:98:09:8d:17: f7:09:cb:cb:10:17:87:8e:75:cb:c6:79:6a:ef:8e: 76:59:1f:1a:88:14:59:2a:85:d2:2c:cc:b1:c3:c0: 56:a7:48:30:36:c8:6c:c6:de:a8:a7:46:89:3b:25: 4e:83:98:bd:db:f3:e4:49:e3:c3:0b:16:81:b7:b0: 40:7f:99:77:80:f2:00:05:93:63:10:61:2b:4c:24: df:50:97:98:01:93:86:cb:69:90:e7:a0:5e:c0:1f: cb:10:6c:05:d0:fc:66:67:29:54:97:9a:b6:53:67: 28:d3:67:44:bb:6e:c1:4d:c8:1a:58:44:35:18:4e: 44:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:08:7D:C5:E3:95:18:6B:49:5D:06:E7:EF:F5:07:EC:C0:A3:5E:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/97c9e838-6675-3d04-ac69-51572cb4e303.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:a1:45:00:6c:66:9c:16:6f:54:bc:cf:6e:0b:00:f2:7e:fe: 5b:7b:c7:45:ae:f5:5a:71:71:27:5a:0e:a2:36:47:7b:84:d1: 98:b8:5d:30:a2:0f:ba:ed:2d:c0:93:d5:48:05:16:a7:1e:33: ea:48:a3:45:8d:b3:b8:b7:4e:25:49:91:a8:58:b9:a5:8b:21: 3f:58:d5:e0:cc:85:38:79:f2:a3:c0:bb:63:36:d3:c5:5b:01: e9:3d:1d:d0:67:21:6a:a6:e2:b9:85:e0:87:f9:75:4d:08:8c: 9f:9e:0c:b5:a5:7f:36:73:d7:fe:72:9d:8e:12:09:f3:36:de: 55:30:46:30:b1:43:8f:eb:df:d5:fc:18:11:32:5a:6c:9b:fd: 03:2e:17:66:1d:0d:f6:e6:43:38:12:a5:67:93:9b:4b:ac:aa: 54:e7:27:a8:55:a6:80:07:36:4c:dc:2b:9b:87:1c:f8:1c:17: 6e:65:c6:5c:3a:c5:0b:b5:a9:42:cd:14:f1:a0:97:2c:de:38: f9:c5:4c:10:f0:c3:4e:4d:6e:d8:70:d5:d7:ab:e9:95:37:8f: 75:4d:a1:ba:51:79:6a:0f:cc:e7:64:aa:6f:be:0f:48:64:23: 07:35:44:0b:73:1f:74:03:10:13:f7:2f:9c:62:ac:57:85:58: b7:f9:bb:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538Eh0UCfY+FJYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk Y2FiNGQyZmEtZDdjYi00MjI2LWIyNzItZGVhMTAyMjY2YTM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjx04F9qd8wiTaIeqcdqUPxN1UVHZU3sEBZW UDSksS/ufCthncWf/iTGOp/5VOWz2m9nM1/0GAoHskOHFEVV0hfjpyfKx8qcURN2 TNzCf37puvpnTU2u3T6zZxHBg3GR5Kth3625GVMUrMjdPabP2B/YF9/3NiFljlw0 Fr99Bebj55gJjRf3CcvLEBeHjnXLxnlq7452WR8aiBRZKoXSLMyxw8BWp0gwNshs xt6op0aJOyVOg5i92/PkSePDCxaBt7BAf5l3gPIABZNjEGErTCTfUJeYAZOGy2mQ 56BewB/LEGwF0PxmZylUl5q2U2co02dEu27BTcgaWEQ1GE5EbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB4IfcXjlRhrSV0G5+/1B+zAo154MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOTdjOWU4MzgtNjY3NS0z ZDA0LWFjNjktNTE1NzJjYjRlMzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIuhRQBsZpwWb1S8z24LAPJ+/lt7x0Wu9VpxcSdaDqI2R3uE0Zi4XTCi D7rtLcCT1UgFFqceM+pIo0WNs7i3TiVJkahYuaWLIT9Y1eDMhTh58qPAu2M208Vb Aek9HdBnIWqm4rmF4If5dU0IjJ+eDLWlfzZz1/5ynY4SCfM23lUwRjCxQ4/r39X8 GBEyWmyb/QMuF2YdDfbmQzgSpWeTm0usqlTnJ6hVpoAHNkzcK5uHHPgcF25lxlw6 xQu1qULNFPGglyzeOPnFTBDww05Nbthw1der6ZU3j3VNobpReWoPzOdkqm++D0hk Iwc1RAtzH3QDEBP3L5xirFeFWLf5u1Y= -----END CERTIFICATE-----Generated at Sun Jun 15 21:34:33 2025 by rpki-client