$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa File: ac191acc-157f-3778-b6ca-042f58ea699a.roa (raw, json) Hash identifier: kAWJEcvsifR9bbI3Lb04S/4xzspld1rYjCHarOrd+po= Subject key identifier: AA:8A:6C:C3:3C:97:EE:24:1D:1F:C5:B1:4E:3A:AC:D6:C4:17:34:F3 Certificate issuer: /CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Certificate serial: 010D0C9F43285849FCAA727ED08DEB4AD40F9730 Authority key identifier: 58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa Signing time: Tue 27 May 2025 01:00:50 +0000 ROA not before: Tue 27 May 2025 01:00:50 +0000 ROA not after: Mon 25 Aug 2025 01:00:50 +0000 asID: 8987 IP address blocks: 130.137.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:fc:aa:72:7e:d0:8d:eb:4a:d4:0f:97:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b97d0f61-600f-43b3-b1f9-30ae9d3e1769 Validity Not Before: May 27 01:00:50 2025 GMT Not After : Aug 25 01:00:50 2025 GMT Subject: CN=7596fc8e-3b21-46fc-a9f8-2ef04488411f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:4c:ea:1a:52:a3:47:04:29:ed:13:3d:ca:0f: 9d:a0:72:95:93:5a:b7:d9:de:d4:12:44:5a:2a:ba: c0:bc:fb:88:96:ed:42:36:f8:16:5c:3b:d6:db:52: 52:f5:2c:8b:96:4c:8a:d7:26:ec:f3:b2:35:ca:5c: cb:99:72:a5:18:5f:5a:0d:d0:0b:be:ce:d3:44:78: 07:8f:34:59:a1:9a:c9:eb:db:a5:a4:fe:6b:d1:2d: ae:94:33:9c:7a:a2:16:44:92:16:7e:c2:bc:be:cf: bd:61:d1:82:01:a0:74:77:9b:27:40:43:d9:01:ff: c9:ee:5a:1f:a3:65:4e:f8:b0:a4:04:e2:28:d5:ba: 42:83:aa:d3:2d:c6:d0:c5:5a:9c:43:f8:2d:c0:73: e3:a4:84:46:90:65:dd:2c:a5:f6:4a:f8:d6:e6:dc: 24:75:3d:da:20:23:29:81:ce:c1:14:02:b2:bd:15: 01:15:69:92:71:4e:c4:1e:fe:70:d5:c8:51:a3:88: d4:34:7a:e0:03:88:0c:20:4c:8d:00:1e:c5:1d:52: 6a:49:8b:d8:39:b4:9b:71:12:bf:e5:80:fd:5f:80: bf:d6:43:e3:b1:99:e0:61:47:e2:ee:34:f6:96:8f: 7d:f1:16:1e:e0:08:37:9b:e0:20:7d:37:ca:57:36: 26:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:8A:6C:C3:3C:97:EE:24:1D:1F:C5:B1:4E:3A:AC:D6:C4:17:34:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/ac191acc-157f-3778-b6ca-042f58ea699a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.crl X509v3 Authority Key Identifier: keyid:58:76:1C:7B:31:9C:8B:54:30:B2:BF:14:5B:6F:EC:4D:8C:F9:E6:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b97d0f61-600f-43b3-b1f9-30ae9d3e1769.cer sbgp-ipAddrBlock: critical IPv4: 130.137.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:99:5a:bd:93:f8:43:fc:4e:da:07:e9:3e:0c:e3:55:45:d3: 45:40:31:c7:9a:16:b0:17:f6:05:42:dc:ef:fd:25:2e:b8:b8: ee:f4:c7:c4:4f:bf:ab:a9:b1:0c:85:13:b4:4e:87:18:16:0b: af:e3:f4:54:a8:8e:85:1a:34:15:e9:8f:fd:58:f3:d5:32:f1: 36:f5:5a:60:59:8b:38:38:64:cc:44:d2:4f:8f:09:e8:4a:33: 4d:b4:4c:d3:80:fd:d4:6d:45:a5:18:62:4b:96:2d:bc:90:a7: ec:7a:f3:b3:5b:d7:9e:f2:8e:ab:c6:c2:46:e6:42:04:a6:5b: 08:78:62:83:b3:ae:b2:d4:11:8e:28:84:7d:f8:98:cf:df:eb: 37:58:e6:4f:0b:ad:0d:a8:b6:74:3c:9c:31:82:f9:fc:61:1a: b6:6a:0d:5a:ae:25:17:70:40:36:c1:4c:f5:9b:40:c1:04:0f: 0c:72:e0:c1:c4:8b:af:3c:a1:7e:1a:0e:37:9a:5c:e7:85:11: fd:07:1c:00:5d:54:5f:4b:4e:74:bc:8c:12:bb:0e:29:6a:4a: e4:c9:a6:0c:7f:b0:c7:b6:7d:9d:4e:55:3b:27:63:46:11:90: d9:db:5f:7a:13:c8:95:3f:d8:a5:ff:6e:69:8e:d6:35:ec:3f: bc:c0:19:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnJ+0I3rStQPlzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjk3ZDBmNjEtNjAwZi00M2IzLWIxZjktMzBhZTlkM2Ux NzY5MB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk NzU5NmZjOGUtM2IyMS00NmZjLWE5ZjgtMmVmMDQ0ODg0MTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUzqGlKjRwQp7RM9yg+doHKVk1q32d7UEkRa KrrAvPuIlu1CNvgWXDvW21JS9SyLlkyK1ybs87I1ylzLmXKlGF9aDdALvs7TRHgH jzRZoZrJ69ulpP5r0S2ulDOceqIWRJIWfsK8vs+9YdGCAaB0d5snQEPZAf/J7lof o2VO+LCkBOIo1bpCg6rTLcbQxVqcQ/gtwHPjpIRGkGXdLKX2SvjW5twkdT3aICMp gc7BFAKyvRUBFWmScU7EHv5w1chRo4jUNHrgA4gMIEyNAB7FHVJqSYvYObSbcRK/ 5YD9X4C/1kPjsZngYUfi7jT2lo998RYe4Ag3m+AgfTfKVzYmpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKqKbMM8l+4kHR/FsU46rNbEFzTzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdk MGY2MS02MDBmLTQzYjMtYjFmOS0zMGFlOWQzZTE3NjkvYWMxOTFhY2MtMTU3Zi0z Nzc4LWI2Y2EtMDQyZjU4ZWE2OTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjk3ZDBmNjEtNjAwZi00M2IzLWIx ZjktMzBhZTlkM2UxNzY5L2I5N2QwZjYxLTYwMGYtNDNiMy1iMWY5LTMwYWU5ZDNl MTc2OS5jcmwwHwYDVR0jBBgwFoAUWHYcezGci1Qwsr8UW2/sTYz55uUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iOTdkMGY2MS02MDBmLTQzYjMtYjFmOS0zMGFl OWQzZTE3NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgontMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+ZWr2T+EP8TtoH6T4M41VF00VAMceaFrAX9gVC3O/9JS64uO70x8RP v6upsQyFE7ROhxgWC6/j9FSojoUaNBXpj/1Y89Uy8Tb1WmBZizg4ZMxE0k+PCehK M020TNOA/dRtRaUYYkuWLbyQp+x687Nb157yjqvGwkbmQgSmWwh4YoOzrrLUEY4o hH34mM/f6zdY5k8LrQ2otnQ8nDGC+fxhGrZqDVquJRdwQDbBTPWbQMEEDwxy4MHE i688oX4aDjeaXOeFEf0HHABdVF9LTnS8jBK7DilqSuTJpgx/sMe2fZ1OVTsnY0YR kNnbX3oTyJU/2KX/bmmO1jXsP7zAGVo= -----END CERTIFICATE-----Generated at Sun Jun 15 17:49:19 2025 by rpki-client