$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e1ccac6-5e9e-334e-9165-df47921de972.roa File: 9e1ccac6-5e9e-334e-9165-df47921de972.roa (raw, json) Hash identifier: Gx78M+2dG9Ag5dW1ge1mwezkPnqWNbvsTODWTit4zFo= Subject key identifier: 8A:46:02:40:A4:D3:CB:76:4F:4E:19:44:66:F1:75:A5:08:03:42:31 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA69BDC76E17692C3A3300 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e1ccac6-5e9e-334e-9165-df47921de972.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 14618 IP address blocks: 130.137.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:69:bd:c7:6e:17:69:2c:3a:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=e490c3c2-8133-4a0f-a48a-f27bee2d5997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c2:a4:78:a8:c0:88:e6:f1:16:b4:f3:67:03: f4:c4:ca:3c:89:13:f0:ce:ae:32:b3:93:16:94:8e: 81:b4:d1:a9:ae:5d:ba:f9:cc:99:e9:c5:0c:a5:b4: 92:90:4e:97:58:72:bf:9e:1e:77:0a:c0:6c:15:7a: 30:7d:3f:a8:61:76:2e:97:c6:50:1b:93:63:c2:4b: e9:02:9a:15:ee:bd:ab:05:d5:cf:0f:d0:45:93:f3: d5:a7:b3:1a:11:bb:f9:05:ed:a1:3c:11:3c:00:e6: 6f:af:a2:10:fc:d6:18:4a:10:13:67:34:98:e3:7b: b9:2a:79:eb:83:80:9f:89:69:ed:ca:ee:69:27:e9: 08:07:24:10:92:28:9f:6e:12:dd:53:d8:a9:2c:50: 15:fa:8f:17:fd:32:fe:03:39:0f:89:e3:27:f1:2b: d8:5c:9e:2e:17:2a:46:70:20:4c:9e:1d:ee:61:6c: 68:d2:d4:ed:13:8e:67:63:47:ec:d3:55:a2:7e:42: e5:e9:f8:dd:7f:60:b0:61:c9:62:52:81:41:b8:57: e0:3d:4b:63:6a:4d:7d:b0:c4:ed:93:75:9a:74:ee: ac:88:db:ac:e0:c6:ad:3c:17:71:ad:da:f6:10:34: 60:c5:7b:7b:95:14:90:7f:43:bc:74:89:10:32:85: f5:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:46:02:40:A4:D3:CB:76:4F:4E:19:44:66:F1:75:A5:08:03:42:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/9e1ccac6-5e9e-334e-9165-df47921de972.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:c8:4e:9b:36:0e:7d:3f:6b:8d:9a:61:0c:a4:03:a4:51:d1: 24:3c:54:49:06:2d:b4:ac:eb:63:61:b2:0e:cf:4f:50:dc:d7: 86:71:0d:e2:26:5d:c3:32:d1:bf:22:8f:08:25:c9:54:78:20: f1:2b:ff:da:d6:7a:d1:56:d4:c5:22:98:42:e1:65:34:27:a3: 0f:be:08:7e:ad:d0:94:7d:44:cd:7b:8b:c5:13:ba:c2:80:ba: e1:31:48:09:dd:21:b2:bd:30:f6:9b:b2:51:51:2f:ab:4d:81: c6:b6:ad:f1:25:ee:72:b4:27:8a:50:8c:15:f9:5a:ec:c6:f9: a1:72:ab:9e:7f:71:ee:e1:97:c5:68:30:56:f3:68:be:59:09: cd:9d:37:f5:be:6b:7c:2a:7a:a1:01:a7:d7:21:d2:2e:60:d6: a8:5e:85:7c:33:97:af:51:11:a5:9a:eb:84:58:b8:7d:e7:66: 7e:a6:3e:df:8b:e3:ba:ab:42:0f:7f:45:3f:94:88:29:07:00: 4c:35:31:67:5f:96:22:1c:99:0f:6a:f9:29:93:04:e6:7d:99: ad:2a:af:72:3e:d8:43:0d:df:a4:20:51:7d:34:52:4c:08:e3: 10:d6:94:51:8a:0d:a8:06:38:10:e5:70:90:c2:96:34:2b:4e: a9:f9:43:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qmm9x24XaSw6MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZTQ5MGMzYzItODEzMy00YTBmLWE0OGEtZjI3YmVlMmQ1OTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMKkeKjAiObxFrTzZwP0xMo8iRPwzq4ys5MW lI6BtNGprl26+cyZ6cUMpbSSkE6XWHK/nh53CsBsFXowfT+oYXYul8ZQG5Njwkvp ApoV7r2rBdXPD9BFk/PVp7MaEbv5Be2hPBE8AOZvr6IQ/NYYShATZzSY43u5Knnr g4CfiWntyu5pJ+kIByQQkiifbhLdU9ipLFAV+o8X/TL+AzkPieMn8SvYXJ4uFypG cCBMnh3uYWxo0tTtE45nY0fs01WifkLl6fjdf2CwYcliUoFBuFfgPUtjak19sMTt k3WadO6siNus4MatPBdxrdr2EDRgxXt7lRSQf0O8dIkQMoX1MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIpGAkCk08t2T04ZRGbxdaUIA0IxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvOWUxY2NhYzYtNWU5ZS0z MzRlLTkxNjUtZGY0NzkyMWRlOTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgomQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErITps2Dn0/a42aYQykA6RR0SQ8VEkGLbSs62Nhsg7PT1Dc14ZxDeIm XcMy0b8ijwglyVR4IPEr/9rWetFW1MUimELhZTQnow++CH6t0JR9RM17i8UTusKA uuExSAndIbK9MPabslFRL6tNgca2rfEl7nK0J4pQjBX5WuzG+aFyq55/ce7hl8Vo MFbzaL5ZCc2dN/W+a3wqeqEBp9ch0i5g1qhehXwzl69REaWa64RYuH3nZn6mPt+L 47qrQg9/RT+UiCkHAEw1MWdfliIcmQ9q+SmTBOZ9ma0qr3I+2EMN36QgUX00UkwI 4xDWlFGKDagGOBDlcJDCljQrTqn5Q1I= -----END CERTIFICATE-----Generated at Sun Jun 15 08:58:08 2025 by rpki-client