$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa File: a250dd3e-19db-319a-9217-e8d1061abdec.roa (raw, json) Hash identifier: m+6qr8TqgysxyxK5vy0EP1iqW1m8Tbxs/Kcs4KiNB8c= Subject key identifier: 4C:A2:D3:DF:76:50:7D:8F:8A:F3:74:46:E1:5E:7C:CC:6E:32:16:25 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA71F7DAFC05092DF5FF40 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 16509 IP address blocks: 130.137.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 15 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:71:f7:da:fc:05:09:2d:f5:ff:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=50ff8baf-4b41-4d2d-8ed2-1e82651a8674 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:97:82:e9:22:ee:14:18:3e:69:95:fc:03: 03:fb:61:ef:8d:7c:df:09:93:dc:67:86:75:ed:c1: ec:5b:39:f2:43:fd:d7:21:54:dc:0c:9d:a1:33:dc: 8e:49:6a:85:e2:e5:27:71:54:85:ed:15:5d:0d:7e: 50:41:33:4f:84:9a:80:88:29:c8:02:c6:9a:7c:ee: 9e:8a:49:d9:95:10:17:93:c3:0f:5d:6d:45:b8:ef: 47:df:45:5f:44:b1:89:3d:e2:03:c1:16:ad:ab:62: bd:17:1e:33:b7:c7:24:74:48:1a:6a:ec:22:bb:67: 22:6d:6d:8f:9c:69:a5:ed:1f:c5:12:2f:0b:09:78: 78:b1:90:96:c1:ea:93:21:0a:79:e0:e7:e0:9f:7d: 0d:16:c9:88:dc:a2:ce:38:37:76:54:7d:8b:f6:9c: 21:15:3e:28:39:51:64:31:87:b8:2a:3d:37:10:22: 1c:f3:77:1d:4b:95:06:dc:18:3c:c5:5c:71:81:0d: 71:04:d9:59:cd:4c:38:7d:d0:8c:4b:eb:b2:52:e1: 7b:4c:e1:68:70:1c:70:c6:48:93:c4:ac:80:4c:7a: 78:f5:7c:27:1c:60:72:ba:e4:42:60:ae:60:bf:80: ec:8e:17:a0:79:6e:e2:18:88:ba:5a:c1:bd:16:77: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A2:D3:DF:76:50:7D:8F:8A:F3:74:46:E1:5E:7C:CC:6E:32:16:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/a250dd3e-19db-319a-9217-e8d1061abdec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:7f:98:29:f8:14:12:16:80:4d:46:f5:59:8c:4c:be:fd:25: e6:eb:5b:3a:6a:cb:71:2d:a6:62:cc:17:fc:2a:27:75:c7:12: 36:40:ea:ad:bf:c1:76:de:9c:75:08:4a:b3:9b:10:18:70:13: f6:3c:de:9e:00:50:a4:42:97:68:c2:5f:c6:bf:68:e0:08:4e: 6a:6c:7e:c5:b8:3e:b0:fa:6e:76:7c:a7:d6:ae:46:86:4f:96: a9:b5:2a:72:f3:b4:24:9d:d1:b0:88:cd:d8:42:ab:ee:02:aa: b6:a0:73:97:11:50:27:57:e0:1f:f2:06:c3:c4:bc:9a:b2:4d: 06:b3:a4:04:22:54:e7:b9:06:79:20:64:43:b8:e6:5a:87:b2: 48:f9:ab:fc:5a:bd:43:84:e4:14:2e:07:9f:90:11:7d:4c:4a: 10:fe:56:17:5a:38:f0:0a:62:f7:3a:6e:9f:63:0d:81:15:12: b8:18:ee:e1:96:88:a1:f4:35:f5:77:b3:0a:42:96:b5:bd:4a: 68:6b:8d:d6:ef:cb:a1:d2:65:9e:1a:a7:58:ee:4b:72:be:39: 3b:02:70:ad:15:de:21:89:4f:86:5d:3d:8c:d2:58:f2:c0:c7: 62:f7:e3:14:b1:f6:63:46:99:0a:34:50:f9:31:75:29:6c:59: b6:e6:b4:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnH32vwFCS31/0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NTBmZjhiYWYtNGI0MS00ZDJkLThlZDItMWU4MjY1MWE4Njc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLiXguki7hQYPmmV/AMD+2HvjXzfCZPcZ4Z1 7cHsWznyQ/3XIVTcDJ2hM9yOSWqF4uUncVSF7RVdDX5QQTNPhJqAiCnIAsaafO6e iknZlRAXk8MPXW1FuO9H30VfRLGJPeIDwRatq2K9Fx4zt8ckdEgaauwiu2cibW2P nGml7R/FEi8LCXh4sZCWweqTIQp54Ofgn30NFsmI3KLOODd2VH2L9pwhFT4oOVFk MYe4Kj03ECIc83cdS5UG3Bg8xVxxgQ1xBNlZzUw4fdCMS+uyUuF7TOFocBxwxkiT xKyATHp49XwnHGByuuRCYK5gv4DsjhegeW7iGIi6WsG9FnfVOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEyi0992UH2PivN0RuFefMxuMhYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYTI1MGRkM2UtMTlkYi0z MTlhLTkyMTctZThkMTA2MWFiZGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgonrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHR/mCn4FBIWgE1G9VmMTL79JebrWzpqy3EtpmLMF/wqJ3XHEjZA6q2/ wXbenHUISrObEBhwE/Y83p4AUKRCl2jCX8a/aOAITmpsfsW4PrD6bnZ8p9auRoZP lqm1KnLztCSd0bCIzdhCq+4Cqragc5cRUCdX4B/yBsPEvJqyTQazpAQiVOe5Bnkg ZEO45lqHskj5q/xavUOE5BQuB5+QEX1MShD+VhdaOPAKYvc6bp9jDYEVErgY7uGW iKH0NfV3swpClrW9Smhrjdbvy6HSZZ4ap1juS3K+OTsCcK0V3iGJT4ZdPYzSWPLA x2L34xSx9mNGmQo0UPkxdSlsWbbmtFw= -----END CERTIFICATE-----Generated at Sat Jun 14 06:06:25 2025 by rpki-client