$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa File: 9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa (raw, json) Hash identifier: kfPhQUJSl+VLTaaGaHC6KrKBePO29QYARfuvQI/Cj6o= Subject key identifier: AF:78:D4:60:93:87:74:51:10:29:F1:F4:1B:8B:48:ED:2D:6D:4F:79 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849F9DFC09E9B15D3F920D1E080 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 130.137.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:c0:9e:9b:15:d3:f9:20:d1:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=1d8daaae-58a1-468b-afc2-f5e13273b2bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:be:dc:7a:28:db:41:ea:6f:88:8b:39:31:ba: c2:ba:20:42:d8:64:96:50:7a:e5:8a:93:1a:eb:8f: f5:63:f7:5d:58:66:d6:37:18:e4:21:d9:de:2c:dd: 5a:c4:27:dc:d3:8f:eb:83:e2:d1:3c:6e:61:86:e2: 0e:36:a7:b8:87:0c:63:b6:ff:fb:bf:dd:86:32:c3: 7f:3b:09:2e:82:a3:bc:9c:94:56:70:02:50:2a:35: ff:f9:ea:aa:4e:de:59:fe:32:fa:f1:54:43:6a:d8: 26:c5:51:e5:3f:ef:4c:87:5f:d3:81:b3:44:f6:f3: e2:6b:bf:2b:be:19:e7:b7:60:34:0e:97:a1:93:48: 5c:8b:e3:af:69:8b:3c:86:49:e3:3d:37:3c:d7:d2: da:b9:9a:23:b1:92:53:50:5e:30:0d:ff:47:88:7a: f7:ea:36:c8:cf:64:5a:4d:4d:ba:f8:63:67:0e:73: 6e:86:41:79:75:5f:42:75:1b:1d:da:18:1b:91:84: cf:3a:07:27:41:cc:7c:b9:7d:1b:27:d3:48:aa:3a: a7:e3:f3:9a:94:96:87:1c:a8:1b:d6:ac:0f:72:e0: 03:86:ae:81:30:9b:d2:32:f7:36:11:b5:90:01:b6: 71:10:5d:aa:85:84:a7:e8:0e:85:48:d5:4a:9a:29: 5b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:78:D4:60:93:87:74:51:10:29:F1:F4:1B:8B:48:ED:2D:6D:4F:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9aaeafd0-0dae-3d7f-918e-2fc493196fa2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:79:d2:47:57:81:29:53:ed:a5:73:67:64:af:f6:b0:92:75: 1a:f2:2a:0f:2c:da:63:79:15:fe:4d:04:e4:d3:2d:bd:eb:a9: 02:e1:08:a2:9a:d1:aa:95:1f:0b:2a:65:88:92:43:aa:7d:10: 33:db:3d:69:9d:a6:ea:96:55:0c:7a:bb:93:5c:96:eb:17:15: 4d:24:08:b4:53:da:5f:51:f8:6a:37:24:f9:07:ca:19:ed:3e: 9b:e9:54:2e:19:5a:41:18:18:f7:b9:89:bd:63:e3:e1:7d:9f: 95:78:dc:5d:3b:4c:50:ac:d7:fc:bf:af:42:ca:e7:50:fc:2e: 07:a1:9a:96:be:f4:9b:a0:87:cb:67:26:71:96:ee:9c:51:02: 60:49:03:b6:3a:db:18:b7:7d:a5:05:48:f6:f7:e9:e8:c1:97: 28:53:cd:d6:67:ab:62:7c:20:9d:6f:1f:ce:a6:ea:cb:bc:11: 31:0c:e5:56:2c:9f:d6:33:2e:fd:b1:73:c5:86:c9:b7:29:6e: f5:ea:35:af:f1:e7:90:d3:c8:03:16:64:9e:02:d6:1d:a9:e9: 2b:1e:b9:0d:ed:b9:2e:27:64:d5:42:e5:69:c9:f7:6f:73:47: 5d:22:e6:a1:f3:61:eb:cf:76:5c:f5:be:0a:a0:01:27:ed:e4: 13:24:dd:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn538CemxXT+SDR4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk MWQ4ZGFhYWUtNThhMS00NjhiLWFmYzItZjVlMTMyNzNiMmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r7ceijbQepviIs5MbrCuiBC2GSWUHrlipMa 64/1Y/ddWGbWNxjkIdneLN1axCfc04/rg+LRPG5hhuIONqe4hwxjtv/7v92GMsN/ OwkugqO8nJRWcAJQKjX/+eqqTt5Z/jL68VRDatgmxVHlP+9Mh1/TgbNE9vPia78r vhnnt2A0Dpehk0hci+OvaYs8hknjPTc819LauZojsZJTUF4wDf9HiHr36jbIz2Ra TU26+GNnDnNuhkF5dV9CdRsd2hgbkYTPOgcnQcx8uX0bJ9NIqjqn4/OalJaHHKgb 1qwPcuADhq6BMJvSMvc2EbWQAbZxEF2qhYSn6A6FSNVKmilb8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK941GCTh3RRECnx9BuLSO0tbU95MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWFhZWFmZDAtMGRhZS0z ZDdmLTkxOGUtMmZjNDkzMTk2ZmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ50kdXgSlT7aVzZ2Sv9rCSdRryKg8s2mN5Ff5NBOTTLb3rqQLhCKKa 0aqVHwsqZYiSQ6p9EDPbPWmdpuqWVQx6u5NclusXFU0kCLRT2l9R+Go3JPkHyhnt PpvpVC4ZWkEYGPe5ib1j4+F9n5V43F07TFCs1/y/r0LK51D8Lgehmpa+9Jugh8tn JnGW7pxRAmBJA7Y62xi3faUFSPb36ejBlyhTzdZnq2J8IJ1vH86m6su8ETEM5VYs n9YzLv2xc8WGybcpbvXqNa/x55DTyAMWZJ4C1h2p6SseuQ3tuS4nZNVC5WnJ929z R10i5qHzYevPdlz1vgqgASft5BMk3cY= -----END CERTIFICATE-----Generated at Sat Jun 14 06:10:31 2025 by rpki-client